Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
File: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft (raw, json)
Hash identifier: sgCyRq6M2JvFaQPbwxQiRm02kW+6kgFsOYS/I0yabOs=
Subject key identifier: 66:A1:7A:E3:4D:61:E1:66:0E:CF:70:6D:BD:AE:7D:E5:1E:7B:0D:3A
Authority key identifier: E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
Certificate issuer: /CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Certificate serial: 0194BD17CF5DE7384A0498DF7487E721538C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
Manifest number: 0253
Signing time: Fri 31 Jan 2025 16:00:41 +0000
Manifest this update: Fri 31 Jan 2025 16:00:41 +0000
Manifest next update: Sat 01 Feb 2025 16:00:41 +0000
Files and hashes: 1: 2G3KAngu1j7cVjl09bHkVR1Q8mU.roa (hash: U0mdK9ze04Jz/Qx2ufdQLy/tw5yhbjVYG2kiEygUxAU=)
2: 4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl (hash: GR5dD/VBsbIC2ZLp0U//bYieTzBq6wDHSzR42Mr2Tjo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:cf:5d:e7:38:4a:04:98:df:74:87:e7:21:53:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04b28a19dbf534ad61cb049986e5424c3284de2
Validity
Not Before: Jan 31 16:00:41 2025 GMT
Not After : Feb 1 16:00:41 2025 GMT
Subject: CN=66a17ae34d61e1660ecf706dbdae7de51e7b0d3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:84:6e:af:77:fc:e1:37:2d:63:42:6b:fa:1e:
79:ad:dd:9a:7d:0b:b1:87:60:75:ac:5d:1b:16:8c:
4e:2a:e9:b5:e8:0e:75:c3:8d:ed:0f:d0:5e:d4:a7:
e7:21:e3:b2:dd:23:25:f6:15:51:9d:2e:0b:10:6e:
bc:53:3a:76:64:57:ac:ca:64:c4:6c:28:fe:ae:ec:
09:95:73:b4:aa:a3:f4:4a:e0:cf:48:d7:fe:9d:55:
64:58:55:ef:5e:19:3e:de:3a:06:04:82:d1:57:72:
2e:af:bd:27:89:71:c0:23:50:47:f0:6a:c6:96:c7:
df:62:0c:05:eb:80:91:cc:12:1d:5d:53:12:44:41:
fc:d7:9f:d1:ea:3b:0e:78:13:3d:21:03:e9:ec:8e:
5f:31:96:3e:5e:22:6e:ed:56:5b:46:2a:13:a4:6f:
64:aa:73:54:e9:d3:67:11:a1:ce:2c:d9:79:37:a0:
aa:78:56:b4:24:61:a4:33:3f:e2:f8:f6:b7:80:56:
6c:b4:cf:5e:c4:07:ff:af:1b:80:18:00:84:0f:7c:
1d:4f:f4:bd:e6:d1:f8:82:9c:57:0f:26:42:05:cb:
44:3e:bb:69:af:fe:ac:27:aa:70:f2:16:7e:7e:46:
77:e2:4d:95:0e:bb:e0:89:76:53:7b:2a:12:5f:fb:
8c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A1:7A:E3:4D:61:E1:66:0E:CF:70:6D:BD:AE:7D:E5:1E:7B:0D:3A
X509v3 Authority Key Identifier:
keyid:E0:4B:28:A1:9D:BF:53:4A:D6:1C:B0:49:98:6E:54:24:C3:28:4D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EsooZ2_U0rWHLBJmG5UJMMoTeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/cda8f7-8b87-4c6e-bd56-acf04481064d/1/4EsooZ2_U0rWHLBJmG5UJMMoTeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:f6:c0:b0:07:24:e6:d2:21:4b:3b:a4:1f:19:cc:53:0e:fa:
c2:cc:3f:01:e1:bf:e8:eb:9b:e0:c1:66:63:dc:80:7a:18:96:
86:56:e9:4f:27:ad:0b:58:94:ae:72:0d:69:8c:75:ef:d6:d3:
29:79:b1:81:90:23:fa:2d:1f:27:af:48:e9:67:d9:8c:b4:54:
3d:84:23:a9:7c:95:bd:b6:b5:86:9c:03:6f:5d:5d:5c:c2:dd:
1e:44:6b:dc:95:20:f2:1c:0b:7b:15:a2:e0:d5:f4:bf:80:c0:
8c:ed:04:1b:d0:85:3d:c8:94:f1:d1:ca:85:d0:c3:ac:43:5d:
e2:6a:9e:58:1b:50:fc:99:3c:2c:2a:b5:20:bb:b7:63:0c:fa:
17:98:51:71:c1:5e:32:a5:85:4f:50:6c:a3:bd:b7:8b:a8:98:
c3:06:3e:42:f4:83:70:b7:63:a8:f3:f5:2f:3e:67:b9:55:64:
5a:71:ad:9a:27:3c:81:03:ab:f1:9c:34:46:b6:e9:df:4b:08:
46:2a:21:cc:f7:e8:b9:d9:9a:26:54:34:0e:23:ee:8c:c5:b4:
41:0b:5b:53:2e:4e:94:48:39:f5:73:19:59:f4:35:41:02:5a:
6d:d5:92:a1:ca:c7:26:37:81:f4:3d:7b:2d:80:85:21:e1:1d:
e1:17:00:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:20 2025 by rpki-client