Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
File: 46iYuhJQyJicx22fi1PR28YrKJA.mft (raw, json)
Hash identifier: 3zEsGsc1+dqLM/HeSrvvMCnOeaLKsA1/OrSjW5jg4mw=
Subject key identifier: 7C:9D:FB:81:2D:AC:EA:BD:2F:A0:12:EB:1C:36:D8:14:35:0E:A2:B8
Authority key identifier: E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
Certificate issuer: /CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Certificate serial: 0195E0469AB79D004282B754F5D9A3B011FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
Manifest number: 0A1A
Signing time: Sat 29 Mar 2025 05:01:18 +0000
Manifest this update: Sat 29 Mar 2025 05:01:18 +0000
Manifest next update: Sun 30 Mar 2025 05:01:18 +0000
Files and hashes: 1: 46iYuhJQyJicx22fi1PR28YrKJA.crl (hash: wQsPdV3EVcpmDOoptKdSRn+BQqRD35KcDGuqXu34WZY=)
2: iPsc5cdyBdI5OoAXm1WxUyXcwKs.roa (hash: uev/ryB2qmGhnPuUk4GEhG25G76cZsNfJpVAjKwYXdQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:9a:b7:9d:00:42:82:b7:54:f5:d9:a3:b0:11:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3a898ba1250c8989cc76d9f8b53d1dbc62b2890
Validity
Not Before: Mar 29 05:01:18 2025 GMT
Not After : Mar 30 05:01:18 2025 GMT
Subject: CN=7c9dfb812daceabd2fa012eb1c36d814350ea2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:88:05:c5:3e:bc:20:47:df:48:b5:47:1c:0f:
27:a8:f1:be:72:29:c7:74:06:fb:26:6d:b0:ca:0b:
d8:af:51:7f:2e:68:54:4d:a9:a5:98:1d:13:56:27:
d7:0e:db:91:5c:e3:c1:9d:a3:8c:92:87:d3:9b:77:
d8:30:e6:fc:bd:59:14:91:ff:01:09:8c:c6:70:0c:
8d:c1:00:83:49:b4:d1:60:f4:15:8a:9b:c4:53:6f:
b7:a4:64:db:63:f7:58:19:fd:de:a4:3c:a7:f5:9d:
ef:f0:04:b2:1a:60:e9:6d:56:97:2c:6c:ba:55:02:
06:0e:cc:44:6d:5e:44:4f:22:d8:fb:7e:bd:aa:db:
a1:98:1f:15:c5:07:c9:f0:8c:b2:04:04:e9:31:52:
96:99:1a:65:f3:ab:f8:ce:7b:2c:d7:cb:96:28:d0:
45:1c:30:6f:df:c2:91:2b:f3:2f:cb:35:55:14:bd:
2a:f1:12:69:92:9c:19:0e:97:ae:26:12:9a:49:47:
61:4e:07:0f:da:b7:98:57:de:88:09:2a:c4:5d:ed:
81:9c:90:bf:46:b6:99:2f:54:46:a3:18:cb:75:45:
50:93:3b:e0:a6:40:f8:bd:c0:ee:73:65:96:74:a7:
d1:5b:f0:f2:00:67:9d:26:85:dd:ba:60:d5:07:5c:
86:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9D:FB:81:2D:AC:EA:BD:2F:A0:12:EB:1C:36:D8:14:35:0E:A2:B8
X509v3 Authority Key Identifier:
keyid:E3:A8:98:BA:12:50:C8:98:9C:C7:6D:9F:8B:53:D1:DB:C6:2B:28:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/46iYuhJQyJicx22fi1PR28YrKJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/b688da-765c-4481-8eb3-730383211f25/1/46iYuhJQyJicx22fi1PR28YrKJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a4:1e:7d:02:9b:37:8a:1e:8b:9e:64:c9:0e:2f:20:b7:ff:
1e:ec:0a:2f:57:0e:f2:12:80:40:cc:4e:f0:67:af:48:16:a8:
cd:1e:57:a4:8d:84:77:7b:58:a8:41:95:43:88:62:2d:bf:27:
8f:4f:d3:2c:52:22:33:33:e6:3a:f8:41:9b:3d:03:f9:3e:ec:
5e:d1:f2:4a:18:50:b3:31:58:a1:d2:9f:5e:10:fb:03:8a:4e:
3d:7b:2f:70:b5:36:02:6f:e0:ec:3e:58:31:dd:6a:4d:79:8d:
ca:af:ac:53:f7:04:99:e1:6d:48:fb:ca:40:1d:29:02:5d:7c:
09:39:54:32:79:64:ea:1a:0b:8b:2d:34:ca:36:a2:80:52:d1:
1f:ff:c8:31:b5:32:80:52:59:d4:a5:cf:0d:a1:30:31:06:ed:
16:82:ab:15:2b:74:77:bf:9a:39:4b:00:07:bc:56:09:53:25:
db:58:bf:ff:c8:93:cc:de:61:dd:72:06:f5:a1:fd:e6:5a:62:
62:da:49:dc:32:35:32:eb:79:60:32:58:41:6c:04:29:4d:1f:
ec:ba:6e:07:b3:a4:c2:0b:49:04:56:20:5c:4d:e1:b0:88:89:
98:74:57:86:c0:cb:6c:07:6f:ee:a1:4c:06:fd:bd:e5:e9:0a:
35:a1:6f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:23:31 2025 by rpki-client