Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
File: 4N6QuLKkhGwldFi_G_tset6TLss.mft (raw, json)
Hash identifier: +5M5Dx2kXX3vEUH0xtJ6+bAPEb4Sg22r5/DuyQNBnUY=
Subject key identifier: 88:58:FB:F0:74:1C:6B:BB:84:BE:B4:30:E9:D8:2E:48:82:5C:47:EA
Authority key identifier: E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB
Certificate issuer: /CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
Certificate serial: 0194BD4EA7B3847E01B9371D6B3BBC4C7626
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
Manifest number: 0120
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: 4N6QuLKkhGwldFi_G_tset6TLss.crl (hash: x8QkXYp5x9tSdb8cVkbeWIiTB1QoyaW4wumkJnPZEQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a7:b3:84:7e:01:b9:37:1d:6b:3b:bc:4c:76:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0de90b8b2a4846c257458bf1bfb6c7ade932ecb
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=8858fbf0741c6bbb84beb430e9d82e48825c47ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:87:20:26:a3:a9:f7:46:a0:46:33:64:67:1b:
d1:e0:80:8e:31:eb:e7:1a:9e:63:69:0d:3d:1a:f8:
19:8e:01:6e:e8:58:ed:8d:bf:39:23:1f:ad:67:7a:
e7:f6:52:c9:3e:57:46:63:a4:ce:04:bf:04:51:37:
29:2c:ab:9a:40:f8:c9:05:d0:64:76:79:5a:aa:4e:
26:27:eb:66:2e:f7:3c:08:21:3b:52:48:0c:01:12:
5a:60:2b:b0:cc:78:92:73:2a:cd:c5:cc:92:90:8c:
32:d2:c4:ff:ca:2e:bd:17:d7:2d:d4:d7:5d:18:0f:
8f:bd:1e:65:52:6c:e7:09:1d:3b:d0:c7:51:e4:ea:
be:3d:d6:6a:5a:f2:b7:28:e1:75:15:23:9b:f0:ef:
7f:17:b5:9e:ae:6e:4f:c7:f8:a5:23:5e:c3:7e:97:
ee:0e:a3:d8:09:e0:8c:9a:9e:38:63:a6:03:bd:46:
64:0c:9a:06:a7:e1:7f:5f:17:d7:ef:6e:b8:8c:f5:
44:84:ee:72:bb:09:ac:02:a1:12:15:7f:78:36:10:
ab:18:87:35:f8:13:75:f2:fb:1b:99:b3:8b:ec:4a:
61:6e:b7:c1:9e:ac:b7:f3:61:4d:4b:17:8b:9e:27:
da:b6:2b:0a:8c:26:e9:48:ab:6e:93:e2:c5:7b:2b:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:58:FB:F0:74:1C:6B:BB:84:BE:B4:30:E9:D8:2E:48:82:5C:47:EA
X509v3 Authority Key Identifier:
keyid:E0:DE:90:B8:B2:A4:84:6C:25:74:58:BF:1B:FB:6C:7A:DE:93:2E:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4N6QuLKkhGwldFi_G_tset6TLss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b5d770-8e3e-42f6-9fdc-47df4a571f5a/1/4N6QuLKkhGwldFi_G_tset6TLss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:97:47:66:7f:1b:fe:d8:8b:da:2c:2a:1e:e3:05:6c:cb:b0:
13:1c:f9:f3:66:fc:01:07:a5:28:63:4f:77:aa:72:46:6a:6f:
be:7f:8c:b6:5d:d2:2d:76:1a:e1:0f:37:98:cd:3c:22:dc:22:
69:65:5c:f7:fb:ee:ab:0f:eb:54:14:91:76:54:17:63:a8:04:
3d:0c:c2:c4:00:9d:99:e1:32:f2:5c:ee:df:ce:d9:e5:50:63:
ba:11:93:82:46:87:18:b1:c9:a2:a1:68:30:78:6a:07:15:19:
fd:2c:11:99:85:17:3f:19:71:90:fa:78:e1:0b:3a:d4:6a:0e:
a4:3f:ca:be:1e:b2:0a:66:b9:f3:da:57:45:c4:aa:0a:51:22:
ba:38:e4:3f:7f:20:c5:85:44:64:22:2a:af:34:c1:b8:4f:92:
2a:f9:a0:e2:e5:82:6d:6e:e0:f1:08:3b:c3:da:b7:c8:c0:0d:
f2:cf:b6:9b:15:af:59:71:92:ec:ff:9f:90:89:ca:db:5c:3c:
86:11:da:4b:fa:c2:4e:a0:9e:0f:84:93:fc:f3:c0:b6:04:20:
52:a2:32:fc:b2:41:4f:97:a8:47:c4:42:3f:b7:1d:5a:17:ff:
d1:3d:9f:36:5c:06:3f:d1:80:43:b4:32:9a:3d:db:60:01:e3:
ea:99:a5:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:26 2025 by rpki-client