Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
File: 4z2f_axY52ErCVFE_sBrolhapqg.mft (raw, json)
Hash identifier: Oo1fVFwAPh4G71jPzC1pim7DR9BZcLxdP91azHC8ou8=
Subject key identifier: 90:BD:53:C2:6E:28:BF:13:8A:46:2F:6C:9F:3E:FE:8C:43:F5:2F:C4
Authority key identifier: E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
Certificate issuer: /CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Certificate serial: 0194BC7306BE20BA154D7D5A81B833453B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
Manifest number: 1181
Signing time: Fri 31 Jan 2025 13:00:42 +0000
Manifest this update: Fri 31 Jan 2025 13:00:42 +0000
Manifest next update: Sat 01 Feb 2025 13:00:42 +0000
Files and hashes: 1: 4z2f_axY52ErCVFE_sBrolhapqg.crl (hash: JaNnt+S8mNa6mF4b9BFRbp7M50KR7j9Zw8SA8oH9yhw=)
2: kDBI9l_YMVWuxKarh0cfBt-co8E.roa (hash: Cmec62sAgGLnTuvkkeIcYM85TIkQ74UMRSA2arV5eDI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:06:be:20:ba:15:4d:7d:5a:81:b8:33:45:3b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e33d9ffdac58e7612b095144fec06ba2585aa6a8
Validity
Not Before: Jan 31 13:00:42 2025 GMT
Not After : Feb 1 13:00:42 2025 GMT
Subject: CN=90bd53c26e28bf138a462f6c9f3efe8c43f52fc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1e:42:bb:d7:59:ad:52:1b:b3:5d:0d:25:b5:
2e:28:b4:eb:0a:c3:4c:41:26:e8:47:21:7f:6d:cb:
bb:c8:14:5a:e9:b7:17:3d:11:9d:35:fb:88:bd:80:
91:3c:e4:95:e1:00:0f:47:e7:71:fc:8a:a1:ba:3c:
b5:09:60:3e:68:7d:d6:e9:17:82:1e:33:8e:ad:01:
09:fc:64:bc:e7:bb:4a:be:c2:37:d6:26:ec:bf:70:
15:07:30:e3:f7:8f:27:02:62:bf:81:ea:c3:12:b1:
f5:1d:ff:22:19:0f:8e:7b:21:ae:33:5d:f5:a3:d4:
34:93:b6:01:9c:43:09:12:be:f3:1b:57:2f:18:03:
2f:dd:62:af:a7:15:6a:bc:bd:34:87:ad:bf:be:65:
a3:00:2b:e2:1a:39:b3:c2:e8:a3:be:5f:65:77:f1:
56:fb:13:57:aa:79:8e:c1:bf:f1:b9:b3:db:13:80:
79:13:e0:f4:31:14:45:70:4c:80:c4:bd:56:68:52:
c8:04:f9:b0:5c:8a:77:2b:51:a7:a6:6f:c9:f3:c1:
4d:bc:91:95:ce:cb:25:b8:7a:8c:79:4b:b1:e9:60:
aa:1f:b5:19:ca:f9:18:9a:1c:e0:61:70:41:b0:b4:
d8:41:3a:45:e4:d7:38:09:ca:ae:a6:e1:22:8a:c3:
22:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BD:53:C2:6E:28:BF:13:8A:46:2F:6C:9F:3E:FE:8C:43:F5:2F:C4
X509v3 Authority Key Identifier:
keyid:E3:3D:9F:FD:AC:58:E7:61:2B:09:51:44:FE:C0:6B:A2:58:5A:A6:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4z2f_axY52ErCVFE_sBrolhapqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a34200-4b9b-4334-a159-9cb296301e64/1/4z2f_axY52ErCVFE_sBrolhapqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:02:cf:f8:42:f8:e7:ae:dd:81:32:01:ec:bc:6c:5d:30:c0:
67:43:53:58:cd:39:fa:5c:62:67:53:36:29:d5:eb:53:4b:71:
d5:79:49:b9:f6:54:d6:c9:be:33:ad:72:1c:23:29:53:00:87:
15:46:e6:fa:57:4c:0b:fd:00:d4:99:04:c2:54:f7:7a:e9:b1:
a3:ae:63:b1:82:5c:c5:88:aa:9a:58:4a:9b:ec:26:14:f6:cd:
38:bc:a4:83:c5:52:a6:0f:c7:24:de:ab:b5:47:77:73:44:4b:
82:b6:4a:9c:d0:ad:eb:05:34:55:74:48:c9:57:1c:ee:de:5c:
93:c3:93:bc:af:6f:42:bf:0e:2e:f8:32:8f:37:ce:be:2c:0c:
e0:cd:07:7c:68:58:dd:46:bf:77:b4:fa:4b:38:b7:f3:5f:1a:
11:12:bf:33:73:5c:89:32:71:66:79:65:80:70:04:02:0a:a8:
73:5c:61:1f:f7:a7:7d:e0:15:6a:ee:06:dc:5e:46:e5:8b:d1:
fe:b2:47:52:be:5b:67:cf:21:25:ff:ad:7c:f4:17:80:b5:39:
b1:38:10:8f:bf:b4:32:e0:b7:99:cd:14:fc:69:3f:96:20:41:
17:4d:85:ea:6f:38:7d:3a:d3:83:01:92:9f:2c:95:21:48:ed:
b6:52:3a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:28:32 2025 by rpki-client