Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
File: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft (raw, json)
Hash identifier: HVet9oyi3oeR7Yeey5NtygAorUafS3a0t5AiJqhK8r8=
Subject key identifier: 30:04:CA:C7:96:F4:DA:B2:C0:FF:FC:FB:78:79:41:CD:62:D3:39:6C
Authority key identifier: E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
Certificate issuer: /CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Certificate serial: 0195E00F4845FB84F30ABB84B5341DC8FE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
Manifest number: 09D4
Signing time: Sat 29 Mar 2025 04:00:52 +0000
Manifest this update: Sat 29 Mar 2025 04:00:52 +0000
Manifest next update: Sun 30 Mar 2025 04:00:52 +0000
Files and hashes: 1: 4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl (hash: GwWioVgB7svErtew9LcvKs/0OmyC+bGOdqxo7znDr+M=)
2: 4ea1dMd4wRgTBo1jIMebmZZJLM4.roa (hash: s7rnybcZ+EzxkGbEPGLzvVlVM7bMx+c1GhcuJyz67VI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:48:45:fb:84:f3:0a:bb:84:b5:34:1d:c8:fe:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01f196dd7edd1131d0220fdb777122621bbbdef
Validity
Not Before: Mar 29 04:00:52 2025 GMT
Not After : Mar 30 04:00:52 2025 GMT
Subject: CN=3004cac796f4dab2c0fffcfb787941cd62d3396c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:04:fc:90:2b:fa:34:4a:90:95:e9:35:3a:72:
67:8f:36:fe:a1:40:32:3c:41:c6:82:69:0b:ac:ba:
ec:e8:5a:6b:b1:76:41:9c:45:2c:1b:f9:3d:27:4d:
9e:bc:bc:03:8a:93:6d:94:e5:5e:82:1d:f1:f2:e0:
16:43:39:60:16:2e:da:10:a2:ff:93:58:63:3d:8e:
b2:f6:ee:2a:da:23:a1:92:3c:bd:cb:56:53:6c:44:
05:ba:d3:95:42:1c:a1:60:46:43:5b:7c:8c:27:35:
69:7a:3d:95:be:3e:13:e7:70:db:ae:0d:b2:49:98:
d7:55:73:2b:04:c5:f9:5e:b1:8a:d7:20:ed:b8:71:
bb:9b:a0:4a:33:d1:cb:0b:cb:ef:63:d2:ba:dd:8b:
5d:f9:60:2c:09:aa:0a:d1:05:85:9f:80:80:68:71:
57:30:8b:b2:e1:14:13:18:a7:f7:6c:90:6b:f3:f9:
d6:3e:5b:f5:a1:9a:f6:3f:d4:9b:aa:16:f8:f2:41:
0e:51:12:b5:1e:0e:c7:d3:d8:ac:c2:06:30:c1:18:
e0:84:bd:84:54:ef:49:23:b9:fb:02:21:3d:92:b8:
6d:5c:29:ee:93:b4:92:36:fb:d2:9e:5f:f1:77:d9:
84:6f:3e:dd:30:5c:4e:62:8b:ac:72:2c:ac:01:a0:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:04:CA:C7:96:F4:DA:B2:C0:FF:FC:FB:78:79:41:CD:62:D3:39:6C
X509v3 Authority Key Identifier:
keyid:E0:1F:19:6D:D7:ED:D1:13:1D:02:20:FD:B7:77:12:26:21:BB:BD:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4B8Zbdft0RMdAiD9t3cSJiG7ve8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/968a85-01d3-4b0c-b920-66cbf876ab3e/1/4B8Zbdft0RMdAiD9t3cSJiG7ve8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:39:57:88:e0:36:b1:ea:bf:c2:d5:00:86:aa:f9:df:f8:72:
d6:92:d8:a2:e1:84:fe:e0:e1:6b:be:4d:60:2a:42:58:86:32:
7b:d1:8f:04:95:17:14:1f:4c:3c:f8:16:91:cf:03:06:7e:2f:
57:b6:1d:46:31:6a:58:60:d4:eb:cd:e0:72:33:6b:36:f6:2a:
e5:b7:3d:21:02:69:ff:91:38:45:e7:45:d3:d3:60:c3:db:10:
8d:74:ae:f9:1a:0a:0e:26:81:0b:76:ce:9a:2e:6a:e6:91:3b:
73:31:51:3c:c7:b5:2f:4e:35:20:11:c3:73:8f:e9:bf:b4:65:
36:84:04:08:66:91:22:ed:e7:02:2e:a3:4b:cd:a3:db:76:9d:
cb:fb:cb:1c:c9:ea:ba:c3:3a:b6:eb:ae:38:f6:a4:05:82:ad:
2c:e4:f0:ec:49:fc:86:70:ad:89:d8:82:fb:b0:b1:a1:73:89:
e9:d3:ca:fe:7b:5e:98:d5:b4:67:0c:89:3d:84:92:09:31:52:
a9:36:2f:37:d2:f8:ce:89:77:c2:40:ee:ad:6d:b8:26:96:23:
20:db:b6:5b:44:98:31:41:81:a3:00:48:63:06:9b:6d:a4:80:
26:4e:42:a5:ff:d9:60:47:17:f0:f0:bc:b5:5d:02:f0:8f:e2:
04:3a:34:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:37 2025 by rpki-client