Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
File: 4n5m5APTHHlYM1KYFo3mCiFcDA8.mft (raw, json)
Hash identifier: DP3uQpnaPf+t4HUKvEoAdQLpoyHh1/EeYFKQgFRJOJQ=
Subject key identifier: 4A:18:40:C9:24:DA:50:48:09:12:99:BF:92:E0:30:46:4C:2E:43:90
Authority key identifier: E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
Certificate issuer: /CN=e27e66e403d31c7958335298168de60a215c0c0f
Certificate serial: 0195E1590AF71F5E63C9A12B1FBE81EE6CB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
Manifest number: 0422
Signing time: Sat 29 Mar 2025 10:01:03 +0000
Manifest this update: Sat 29 Mar 2025 10:01:03 +0000
Manifest next update: Sun 30 Mar 2025 10:01:03 +0000
Files and hashes: 1: 4n5m5APTHHlYM1KYFo3mCiFcDA8.crl (hash: aJ5rVJ7THkZwsv7qrYwe2GRNOkt/M7JetV0IEyk3mYs=)
2: UzjmKBXy8gum7-vzXEXY9qRXHJg.roa (hash: rXm+F/jMusDQ+vIPMdo+lZ7IaHnnszuMtgWpHGWtSR0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:0a:f7:1f:5e:63:c9:a1:2b:1f:be:81:ee:6c:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e27e66e403d31c7958335298168de60a215c0c0f
Validity
Not Before: Mar 29 10:01:03 2025 GMT
Not After : Mar 30 10:01:03 2025 GMT
Subject: CN=4a1840c924da5048091299bf92e030464c2e4390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:94:da:55:b0:3c:b8:1b:43:11:07:a6:e2:df:
13:ba:13:a9:cd:19:80:f1:d0:8a:98:d7:8d:fe:bb:
e4:82:ed:9d:fe:de:1e:d2:13:a6:96:98:f4:81:36:
be:71:81:c9:8a:1d:d3:c9:e4:6e:84:5d:6c:77:c1:
16:d4:d9:df:61:1e:f5:7b:c9:e0:c3:24:c9:fc:05:
f1:93:4a:62:ed:a9:1e:fe:28:26:b1:84:d3:07:aa:
15:9a:99:83:71:3d:58:cd:34:d9:da:08:09:cb:9b:
13:dd:00:1f:f7:70:94:77:32:83:f2:df:d8:80:ad:
4f:34:62:10:4a:c2:44:38:03:fe:9b:31:e1:6a:92:
66:88:19:fb:96:3b:20:17:10:f6:9e:46:6d:f4:ba:
d2:b2:86:33:61:a3:7b:dd:ca:ed:bc:a2:90:24:22:
c3:62:16:1c:1f:bf:b6:2f:27:ad:5a:76:03:55:18:
d5:fd:fe:a2:e1:72:ae:f7:6e:69:07:ce:52:33:40:
42:e8:18:b7:30:20:48:79:45:31:07:89:05:6a:c3:
43:90:85:37:e9:c5:7a:f9:b6:34:3d:05:ff:67:c3:
3e:bf:fa:54:65:a0:c4:d5:e1:c5:f5:df:34:41:6c:
57:28:e7:2b:f3:75:fd:2d:5d:98:ca:b2:73:24:0d:
18:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:18:40:C9:24:DA:50:48:09:12:99:BF:92:E0:30:46:4C:2E:43:90
X509v3 Authority Key Identifier:
keyid:E2:7E:66:E4:03:D3:1C:79:58:33:52:98:16:8D:E6:0A:21:5C:0C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4n5m5APTHHlYM1KYFo3mCiFcDA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/26a971-f2fd-4f2d-8303-6e6e76f37946/1/4n5m5APTHHlYM1KYFo3mCiFcDA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:be:1a:99:54:ad:95:eb:f4:16:28:46:6a:6d:85:21:80:ee:
8b:c0:cd:7e:c6:ce:b5:05:f1:90:5d:86:c1:dd:74:4e:9a:e9:
6d:54:ca:89:67:3c:f5:b9:87:d0:d2:73:0d:f9:b6:bf:c5:7d:
6a:36:2c:9a:ba:23:d1:9d:99:31:8b:3e:e0:a5:a6:d2:7b:0d:
59:5e:c4:7e:c5:eb:d8:eb:0c:89:d4:ef:97:d9:d4:b4:a3:e5:
6b:ef:95:45:94:88:b5:86:16:ff:c7:35:86:3b:4a:77:fb:7b:
99:c3:21:28:98:61:1a:5e:e3:c2:fc:95:88:6d:45:ca:6a:b2:
b9:15:fb:69:38:18:a4:b7:ab:be:1c:c6:c8:5d:49:94:d0:1d:
bf:e7:90:d7:f8:69:72:22:41:a8:54:81:4a:ca:2d:65:e0:fb:
29:24:e3:ed:15:cd:ee:a7:b9:f4:9e:1f:08:06:9d:d7:63:97:
28:26:44:e8:01:70:b3:2d:54:1e:e4:bb:bf:91:0b:02:6b:ce:
49:e6:81:91:55:04:a7:c0:98:3a:0d:cb:29:ab:25:7b:ec:cb:
70:75:ed:3c:d1:74:40:82:0d:df:68:3e:83:92:dd:69:20:51:
70:8d:b8:63:5a:a0:72:fe:e6:bf:f3:62:5b:e3:9b:7e:aa:a2:
a8:b7:e9:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:00:33 2025 by rpki-client