Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
File: 4d9YUq-QW0Ff31PjKHb1enTWwfA.mft (raw, json)
Hash identifier: LghcU0lTr3HUsyljhqdjcy/CYvxniohIVEub44rGO+4=
Subject key identifier: 4F:28:50:86:74:81:E2:67:2C:55:1A:FF:5C:2C:E9:BF:57:BB:5C:36
Authority key identifier: E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
Certificate issuer: /CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Certificate serial: 0195E0EB4441C99AB68C4ECFA43FD5B52208
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
Manifest number: 0DD2
Signing time: Sat 29 Mar 2025 08:01:09 +0000
Manifest this update: Sat 29 Mar 2025 08:01:09 +0000
Manifest next update: Sun 30 Mar 2025 08:01:09 +0000
Files and hashes: 1: 4d9YUq-QW0Ff31PjKHb1enTWwfA.crl (hash: mMqvirLMDfVr93BBTYCHUi4A4/Lg8ebTuaaWZBHVBIs=)
2: cD_mZgVZwLPlXPcv17kJI-LgBr4.roa (hash: KNwGHjS6BluwkxT0qyW7BxgZYc1pPDj7oHyq37oQR90=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:44:41:c9:9a:b6:8c:4e:cf:a4:3f:d5:b5:22:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1df5852af905b415fdf53e32876f57a74d6c1f0
Validity
Not Before: Mar 29 08:01:09 2025 GMT
Not After : Mar 30 08:01:09 2025 GMT
Subject: CN=4f2850867481e2672c551aff5c2ce9bf57bb5c36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ec:10:8f:d6:16:b7:8a:5f:f5:4f:3b:3a:7f:
72:32:85:f5:2b:e0:1d:02:8b:c1:99:92:7b:3d:24:
21:e6:7a:47:f4:65:6d:f5:f7:f1:d4:06:dd:16:ef:
b8:af:8c:ab:36:b9:22:64:db:3d:29:d5:55:2d:44:
af:8b:57:a8:fd:51:01:2e:6c:26:c9:c9:89:96:fb:
bd:85:db:5f:87:17:78:6c:f8:71:25:4f:3a:ae:4a:
43:bd:ae:fe:e2:6e:a7:20:b5:0b:3a:b6:86:c8:4e:
65:45:ad:70:e5:c8:26:9e:67:2d:78:20:58:af:5e:
38:72:bb:9a:f9:27:c5:2d:2c:41:9a:3c:79:b9:1f:
c0:c2:44:69:40:b8:a1:9c:b9:a8:70:d9:b4:da:47:
6e:26:39:6c:54:1b:61:0f:b6:5c:55:6f:31:49:f8:
7d:c0:e3:da:b4:f4:9c:d6:71:3d:16:7a:c7:5a:75:
c7:df:73:9f:5a:98:32:91:26:d8:58:9f:f7:f4:ce:
0d:74:8b:26:61:7a:31:a8:35:e1:69:68:32:13:b3:
cc:50:0a:f9:98:20:4e:51:8c:84:f7:2c:b3:72:62:
12:3a:8d:83:4d:1c:a0:88:47:ab:ec:10:38:03:f0:
78:2e:61:a4:be:07:31:28:7c:93:2b:60:03:38:a9:
76:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:28:50:86:74:81:E2:67:2C:55:1A:FF:5C:2C:E9:BF:57:BB:5C:36
X509v3 Authority Key Identifier:
keyid:E1:DF:58:52:AF:90:5B:41:5F:DF:53:E3:28:76:F5:7A:74:D6:C1:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d9YUq-QW0Ff31PjKHb1enTWwfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4c9206-95cb-4324-ab88-1e6577ca172d/1/4d9YUq-QW0Ff31PjKHb1enTWwfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:a5:dc:95:2c:06:d1:1e:8d:e5:c0:c1:a6:c2:29:ed:7a:e8:
cb:8d:0d:51:a0:ea:ec:2a:f8:c1:b4:98:06:fd:ef:bd:3a:f3:
40:cf:db:d4:73:82:00:e9:14:49:d6:76:67:c0:55:93:d7:27:
29:c0:c7:6f:3c:ad:56:72:24:c1:1c:8a:3f:df:30:d4:64:38:
aa:6b:1f:e5:78:78:0b:24:73:8f:fd:6c:1f:9d:31:79:1d:17:
ae:c4:78:3c:27:12:62:59:c8:c0:f6:35:4c:d2:5e:88:88:8c:
d3:b8:bf:1a:ce:9b:a9:ee:9f:8f:f7:07:cd:0c:3d:e8:d2:51:
94:d5:3b:8a:6c:90:ec:d6:c3:79:4f:46:57:5a:5e:9f:c5:2f:
6e:be:0d:d1:56:b1:06:c7:80:48:d8:1a:fd:9f:3f:c8:2f:21:
16:52:8d:95:c3:fc:23:63:b0:ea:f6:c1:55:35:b8:91:9b:de:
be:74:b2:78:f4:b5:e9:f8:cd:79:aa:57:66:e9:26:2d:43:31:
e3:23:35:95:cc:22:5a:5d:c9:11:13:e2:8b:a3:e3:f5:4f:5c:
61:46:c5:57:0e:c3:a5:c1:be:c1:20:39:4a:83:09:00:6e:6c:
ce:17:d4:e8:07:71:44:10:4a:5e:c4:6d:26:d6:cf:71:9b:8b:
a3:92:57:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 10:37:14 2025 by rpki-client