Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
File: 4uTP5HrtUexxqnX1NhibrW6GLes.mft (raw, json)
Hash identifier: xJi8O3UxdQcxX1AbVzGBIxWcnQ8ATqbhTddBrdFBu0U=
Subject key identifier: 0A:85:E6:34:0F:9E:CE:04:D3:A0:AA:7E:02:35:EB:71:FC:1C:0A:DD
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Certificate issuer: /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial: 0194BC3BE73C87098146622DC86EDEF4E825
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
Manifest number: 07CF
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: 4uTP5HrtUexxqnX1NhibrW6GLes.crl (hash: 81kEGCRVQNxJtNksazBUnmX4XDUwG+uEDzz8P0NxTqc=)
2: QOPe1cLW7EaWSDo3eq_hBQK39Wo.roa (hash: N6OU5OMUXPa8ri34/Wuotfq2VOjXlYSfy+37I0hPZzM=)
3: qswjHcqLBQY9Z2nmcWTR62TphaY.roa (hash: p4pPSzszW4Gf4Jz9O3n/L0PF3Vv3naASMu8aongMgFA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e7:3c:87:09:81:46:62:2d:c8:6e:de:f4:e8:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=0a85e6340f9ece04d3a0aa7e0235eb71fc1c0add
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e1:dc:59:91:bc:1e:e9:ac:05:75:ba:55:78:
87:38:81:4a:ac:47:15:ab:f1:fb:8e:98:89:60:ad:
c3:8d:32:58:e1:bd:6f:df:ff:35:5c:a9:47:f4:4e:
9f:29:bf:27:ec:f7:af:e3:9b:00:ad:48:2a:fd:69:
88:e9:73:f5:b2:55:ac:95:ba:f7:04:ac:69:ea:dd:
41:a6:b5:0f:d8:15:2a:20:f5:e2:fd:fb:40:e1:f6:
e3:c4:7e:a1:d9:a6:25:d5:41:85:dc:8a:23:c3:de:
60:88:e1:4b:c5:4e:f8:d7:e8:32:68:8f:93:5b:a3:
69:73:da:2e:5f:44:0e:65:93:ee:ec:d2:94:f8:47:
7d:07:f5:88:5e:f6:7e:e7:cb:6b:c2:2f:cc:cf:52:
49:29:2d:bc:3f:6a:66:5a:12:36:0f:db:27:bf:a9:
19:65:e1:e8:15:58:de:c6:9e:3c:37:0a:77:1e:1a:
98:de:d1:26:ac:43:8f:6a:73:6b:9c:66:04:e1:07:
7e:c0:f8:99:fb:40:fb:21:bb:e4:ce:60:e8:10:34:
06:65:92:4f:da:6c:59:75:44:06:45:be:97:c5:f6:
91:f1:37:ce:04:cb:46:96:26:93:f8:37:c7:84:50:
54:7d:e7:34:18:09:7f:99:74:18:5e:59:89:a9:96:
ba:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:85:E6:34:0F:9E:CE:04:D3:A0:AA:7E:02:35:EB:71:FC:1C:0A:DD
X509v3 Authority Key Identifier:
keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:11:ec:85:fd:df:3f:bb:1c:12:38:58:0f:46:d4:dd:9f:cd:
88:e3:3d:90:8a:9b:e1:c2:25:57:59:e4:80:b3:87:98:b8:69:
5d:5f:60:2c:14:c8:62:c9:3c:c6:a9:81:13:53:65:47:04:40:
24:c2:28:48:85:f6:4a:c5:77:f5:3b:12:d6:b8:2a:15:e9:5b:
23:3f:1d:fa:da:c3:99:4d:5e:0a:d5:cc:6f:65:ba:e4:a3:93:
ee:99:33:f4:bf:ae:f5:7b:d8:4f:1c:fa:5c:f1:92:09:4e:f5:
69:11:b1:72:3d:97:93:88:cc:be:42:a5:fd:17:8d:a1:ee:a6:
18:ce:48:ef:6d:18:37:6d:06:77:18:1f:5d:71:b2:69:de:32:
c1:56:60:d6:f9:c7:d3:bf:51:5f:74:d8:41:73:c6:fe:11:68:
d6:43:61:a2:0e:98:48:5a:53:e0:18:7e:19:5f:ea:c9:d4:f5:
4d:d2:f3:fe:4b:2a:f8:89:84:39:23:c3:2f:92:75:24:d8:31:
29:c9:21:c6:f5:82:e1:fa:48:dd:f9:d1:86:7d:40:7f:69:bc:
15:3e:8d:08:ae:d4:82:55:54:e8:e7:d5:65:a7:71:8e:82:1f:
71:54:e0:96:52:47:95:3c:39:91:c8:d7:ab:9f:3c:fe:6d:9c:
8e:26:95:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:33 2025 by rpki-client