Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
File: 4KAIqA2P8mJiXmX-JYdpFYspmPA.mft (raw, json)
Hash identifier: 6eF/QzFJ+jhMZo97xYf0DnlJb1BsZ4ODxQoJnBIT64o=
Subject key identifier: C1:91:18:C6:08:53:C3:4B:60:1A:37:F2:9F:45:6D:18:98:1C:14:6F
Authority key identifier: E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
Certificate issuer: /CN=e0a008a80d8ff262625e65fe258769158b2998f0
Certificate serial: 0194BCA9F4A404B6DB83679CE9455119850B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: 4KAIqA2P8mJiXmX-JYdpFYspmPA.crl (hash: ATcqNFdsPCkShuW1hGBe+y5YBySnSk+CKHWk4j3Sqpc=)
2: y5zHo6daLtznM6YyOsYqUp-odjg.roa (hash: jHrEQD+W4TVeVi8oEScgmYIF6Mmipa4IpJr32ELwoTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f4:a4:04:b6:db:83:67:9c:e9:45:51:19:85:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a008a80d8ff262625e65fe258769158b2998f0
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=c19118c60853c34b601a37f29f456d18981c146f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b1:e7:08:e8:f1:6c:de:4b:0c:bc:30:78:42:
b4:b8:6b:6b:fa:ab:93:11:8d:f0:72:9c:cd:d0:30:
ed:a5:2d:ce:52:79:80:8d:81:08:6d:41:00:cd:38:
35:de:04:13:ad:d5:26:c5:76:6e:a8:cf:85:aa:e8:
61:f3:c4:2a:f9:20:40:95:0f:d8:20:89:07:08:3f:
9d:5b:24:41:56:05:4b:e6:45:ba:1c:82:79:b8:d4:
d4:fe:6d:18:10:6e:46:b1:61:c8:fc:7d:a3:3b:e3:
bc:40:eb:75:0f:c0:20:f0:fa:a1:53:64:df:25:e2:
06:b5:b4:57:8f:f9:49:a9:79:e4:d6:8a:27:6a:b7:
49:9f:c3:fe:51:07:5f:2b:74:26:4d:9a:bf:c6:84:
e4:1c:c6:88:45:0e:36:3d:c2:85:49:b7:8b:d6:a4:
4a:b8:7f:0e:26:c0:5a:3c:f2:75:ec:d5:21:39:c2:
f3:2c:25:0c:c3:87:fe:a3:5b:66:f1:c6:cf:e9:6c:
80:00:75:35:fe:a5:38:30:72:4f:7d:65:1a:46:80:
21:5f:0a:4c:4e:d4:6d:78:dc:0b:30:ae:ba:09:56:
53:f3:cb:11:9d:28:52:1f:e9:88:1d:44:21:7b:60:
c5:65:fc:2c:74:1d:b9:aa:0a:f1:ec:d1:60:a8:f1:
63:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:91:18:C6:08:53:C3:4B:60:1A:37:F2:9F:45:6D:18:98:1C:14:6F
X509v3 Authority Key Identifier:
keyid:E0:A0:08:A8:0D:8F:F2:62:62:5E:65:FE:25:87:69:15:8B:29:98:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAIqA2P8mJiXmX-JYdpFYspmPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/0338f3-0802-4e5b-9241-60bf71937104/1/4KAIqA2P8mJiXmX-JYdpFYspmPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:2e:03:df:5c:c2:7b:28:71:ef:70:51:56:87:42:d4:02:1d:
ed:37:05:69:dc:c1:2a:20:f9:c0:26:da:08:57:5e:3c:21:de:
79:3d:77:ff:05:41:a1:47:5e:e0:a0:bc:58:f7:6b:63:37:a8:
24:b7:95:aa:66:e0:69:98:07:dd:7e:8f:11:4e:50:94:b3:da:
41:23:5b:9d:86:47:e9:79:ed:1c:00:60:7c:62:cc:c5:0d:ec:
17:50:f1:d7:56:45:8c:a2:3e:e6:dd:2d:c0:5f:b7:58:a4:e4:
2c:27:6c:06:ff:9d:e3:b7:ed:25:bb:6d:ec:85:94:c3:f4:73:
23:a2:3c:f5:88:5e:e9:df:66:45:11:f0:7e:68:e2:75:22:e7:
04:04:20:fc:db:5d:fb:f5:ca:39:20:c4:de:1b:35:82:14:2b:
bc:0a:0c:b6:b7:ee:2e:f9:e1:e4:a8:98:00:0e:32:ce:66:79:
10:d7:e1:20:91:5f:30:b9:68:a7:fc:db:56:ba:ba:a1:b7:8e:
6b:df:33:f2:2e:1a:d7:dd:50:c7:c6:64:eb:20:ac:6b:5e:f3:
e0:17:37:ab:44:5d:19:9f:1c:8b:5e:d2:5f:78:1d:16:52:8b:
89:92:13:ba:a1:0b:cf:eb:72:81:b7:bf:8c:0c:68:c9:9c:de:
17:7c:3b:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 14 00:16:58 2025 by rpki-client