Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e358f3-3188-4912-9c31-ca103ac45b6c/1/4nU_G2NrgnPqljlhlJFoohUfd4k.mft
File: 4nU_G2NrgnPqljlhlJFoohUfd4k.mft (raw, json)
Hash identifier: rPiCbWnjb5CdIpfgcYG8m359TClP7HN9b/7lCJQ4Arc=
Subject key identifier: 3F:8E:45:5C:56:FD:07:F9:26:5E:86:2E:6B:F9:B2:F9:CC:9E:2C:3C
Authority key identifier: E2:75:3F:1B:63:6B:82:73:EA:96:39:61:94:91:68:A2:15:1F:77:89
Certificate issuer: /CN=e2753f1b636b8273ea963961949168a2151f7789
Certificate serial: 0195DFD91DA6D351DF775892F4AC8E82AA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4nU_G2NrgnPqljlhlJFoohUfd4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e358f3-3188-4912-9c31-ca103ac45b6c/1/4nU_G2NrgnPqljlhlJFoohUfd4k.mft
Manifest number: 0915
Signing time: Sat 29 Mar 2025 03:01:42 +0000
Manifest this update: Sat 29 Mar 2025 03:01:42 +0000
Manifest next update: Sun 30 Mar 2025 03:01:42 +0000
Files and hashes: 1: 4nU_G2NrgnPqljlhlJFoohUfd4k.crl (hash: R78U0Fanl3IrTt+iJZuRMFesegWNijfD0MqAQtk9md8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:1d:a6:d3:51:df:77:58:92:f4:ac:8e:82:aa:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2753f1b636b8273ea963961949168a2151f7789
Validity
Not Before: Mar 29 03:01:42 2025 GMT
Not After : Mar 30 03:01:42 2025 GMT
Subject: CN=3f8e455c56fd07f9265e862e6bf9b2f9cc9e2c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d0:d7:f5:5b:38:2b:0f:dc:a4:1b:e6:e1:a4:
1e:48:5c:9b:63:40:d5:da:f2:c7:b5:73:c1:ef:ef:
39:d0:45:c0:24:fe:16:cb:d8:99:7d:48:6d:4b:61:
7e:d5:c0:79:5b:d9:61:50:1b:26:6d:6b:8f:db:14:
72:a9:98:d7:5f:89:c0:5a:9e:b0:37:8e:6d:33:d0:
7f:ea:cc:f5:69:13:32:b9:4e:10:28:de:f5:35:1c:
1f:6b:82:48:61:12:f9:64:d7:33:38:5d:90:8c:f9:
57:2d:e5:0a:b7:48:02:73:57:40:85:b6:87:30:3d:
eb:11:b9:19:f8:31:1a:3d:31:0e:09:8e:23:5e:cc:
84:db:35:e6:2f:29:0c:f2:5a:96:1e:e1:df:c3:3a:
67:28:f0:ca:41:fb:4d:62:54:77:73:0d:33:ce:97:
74:5f:3c:ce:78:e9:e5:cc:bc:07:64:68:80:40:3b:
78:fa:95:3d:f0:7b:04:69:03:1d:89:91:1f:f6:03:
8f:a7:c5:0a:3d:44:37:92:37:5e:fc:2d:81:8e:f1:
98:c2:db:9a:cc:82:58:23:fa:5c:f0:9a:df:bb:62:
f6:ed:a8:1b:bb:ff:cc:fd:9c:44:9b:e4:4b:ba:f6:
83:ee:47:4e:34:50:52:11:6c:8b:d4:9c:31:bf:84:
69:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:8E:45:5C:56:FD:07:F9:26:5E:86:2E:6B:F9:B2:F9:CC:9E:2C:3C
X509v3 Authority Key Identifier:
keyid:E2:75:3F:1B:63:6B:82:73:EA:96:39:61:94:91:68:A2:15:1F:77:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4nU_G2NrgnPqljlhlJFoohUfd4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e358f3-3188-4912-9c31-ca103ac45b6c/1/4nU_G2NrgnPqljlhlJFoohUfd4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e358f3-3188-4912-9c31-ca103ac45b6c/1/4nU_G2NrgnPqljlhlJFoohUfd4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:65:b8:18:03:ff:eb:1e:c1:ea:f2:58:4c:b9:17:cf:98:90:
8c:e6:3b:ae:e1:80:5d:b5:67:fe:ae:f4:2e:aa:dc:b7:ec:4f:
61:ac:7d:34:a5:68:96:2a:cd:54:51:a7:c1:17:22:01:bb:2a:
c4:65:7d:84:71:11:1b:08:ee:6e:09:ca:61:81:40:14:44:2e:
68:7a:85:97:72:00:8d:54:91:87:0b:8f:da:c4:89:ee:eb:03:
c5:99:66:89:de:83:13:b1:32:c5:e6:86:4c:23:4b:03:5b:96:
53:35:98:82:ff:af:ed:18:40:25:b7:a0:1e:6a:17:7c:51:f0:
ee:0c:b3:83:00:f6:2b:41:6f:22:35:b4:52:29:9e:37:32:26:
99:25:97:b1:49:50:c9:6e:92:e7:d3:a1:de:cb:34:89:62:df:
09:4f:68:8e:58:59:c6:e5:cf:b4:96:22:39:1c:55:c1:f7:cb:
80:8c:61:4c:f4:62:76:2c:4a:17:e6:be:93:4b:00:5a:9a:2c:
4f:6d:cb:90:3c:85:84:e1:67:7f:28:e6:0b:c5:7b:c0:56:1c:
8e:47:76:dc:3b:8f:69:4c:29:d8:bc:8c:0c:38:86:e2:e8:23:
0e:67:d4:55:13:55:8f:be:4f:57:9f:fd:fd:f8:4e:00:e7:72:
f3:99:ff:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 22:26:00 2025 by rpki-client