Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
File: 4BEGBvUk26pTjmfhI8r7xt8zhsA.mft (raw, json)
Hash identifier: EYw6ib+HlLWVml7+Nnx/CE/ACMSWhSZzCaSLQfaYq8U=
Subject key identifier: 17:B7:04:80:26:AB:38:33:51:B0:84:46:BD:D0:7A:1B:6C:25:2C:E7
Authority key identifier: E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
Certificate issuer: /CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Certificate serial: 0194BCE05DA55C50FDC7D30219A0137A3347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
Manifest number: 0191
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: 4BEGBvUk26pTjmfhI8r7xt8zhsA.crl (hash: 3+VawRIxkd5f1Py07n9QQrVQvecscLqT/J/TpOJhCfc=)
2: LKg2o2zlysSfcmScabBK3xapbdE.roa (hash: 1l6VyqJgKUuQ/XvxIU6XnLgEokzCKE4ghCBRoC85WGg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5d:a5:5c:50:fd:c7:d3:02:19:a0:13:7a:33:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0110606f524dbaa538e67e123cafbc6df3386c0
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=17b7048026ab383351b08446bdd07a1b6c252ce7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:f3:e4:3a:7f:a4:8f:4a:28:aa:8a:2e:fe:
8d:c9:19:a4:6b:1e:5a:dc:9f:9b:33:2a:ec:20:14:
73:84:b8:76:60:d3:e0:ba:f9:76:82:e0:f0:b3:ea:
96:e5:cd:9d:ef:02:c0:c6:d9:33:ec:d1:0f:5d:da:
90:ba:14:79:1b:7a:98:ae:68:e2:26:1d:fd:3e:d7:
18:d4:14:50:50:d4:64:f9:ff:21:71:36:93:25:8b:
06:3c:b7:87:71:7b:6c:55:df:f9:34:27:7f:5b:f1:
b6:39:50:8a:de:53:3a:08:b6:77:4f:ca:da:40:7c:
fc:83:fb:83:e5:c2:d1:ac:a7:a5:a2:62:0e:dd:af:
e4:a1:22:e0:cb:74:cb:a0:10:cc:73:22:c2:3e:c2:
f5:ae:ab:09:2d:87:a7:aa:59:c3:17:72:3b:e5:6b:
ed:bb:81:e3:85:d3:03:d0:d3:50:4d:d5:21:1b:22:
fb:50:cc:07:ec:45:55:b6:32:23:32:c3:af:28:6f:
10:cb:11:6e:fc:7c:77:a5:cf:4b:62:c3:c7:d5:70:
27:95:8b:ff:30:e0:99:c6:e6:f1:f0:c9:f3:f6:98:
eb:d6:00:98:95:e6:e5:f1:27:c0:4a:6c:4e:3d:45:
e2:d2:51:05:a5:e6:0b:e7:3b:40:60:1d:c5:43:7f:
0b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B7:04:80:26:AB:38:33:51:B0:84:46:BD:D0:7A:1B:6C:25:2C:E7
X509v3 Authority Key Identifier:
keyid:E0:11:06:06:F5:24:DB:AA:53:8E:67:E1:23:CA:FB:C6:DF:33:86:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BEGBvUk26pTjmfhI8r7xt8zhsA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/73f749-4560-4abe-8d0b-e2c1abafaa6c/1/4BEGBvUk26pTjmfhI8r7xt8zhsA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:53:0c:34:1e:19:e0:b7:98:f3:b4:b1:b1:cd:9c:23:a3:5b:
7f:d6:6c:bb:19:1d:fa:01:7a:11:d6:ab:a3:45:99:18:49:d9:
87:a3:71:c9:20:ef:d0:5c:e8:4d:a9:35:62:78:e8:27:96:50:
74:8c:0d:85:fd:78:8f:52:a8:0d:d8:6b:a9:ef:49:26:8c:6b:
b6:a2:a5:5a:cb:ac:f3:88:e2:10:6d:f6:c4:59:28:fd:11:74:
b9:5f:1d:f2:6c:76:5e:b0:62:62:de:c6:55:db:14:10:8c:1c:
81:6f:6b:f3:b1:a2:68:db:a7:33:00:bc:f7:94:af:be:87:03:
15:f0:99:2e:4d:a2:0d:f5:ec:e1:d8:03:57:8f:70:ef:13:f5:
23:83:56:78:ff:f7:ef:c0:35:e1:5d:ca:e8:51:90:7f:58:11:
08:df:bf:39:f9:b5:23:60:86:79:32:6b:6f:0d:71:6c:ab:8f:
2e:3a:37:00:0a:8f:a7:50:7a:70:52:c1:b8:e4:c6:50:f7:fa:
0a:e5:b9:89:b6:3c:d6:c9:09:0b:f5:d4:89:84:77:9e:c4:62:
31:e0:bc:90:63:b8:51:78:ed:71:03:ed:d9:b1:ef:a4:1e:2b:
f3:46:8f:7b:28:f7:30:e6:25:43:9c:af:cc:bc:4e:ac:8a:bd:
55:68:09:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:14 2025 by rpki-client