Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
File: 4KACksKhBiuzKYCjxEP_84OkEAI.mft (raw, json)
Hash identifier: wx+2l6ub6cW+M53q7up8bcUW8Sx1+KtITfoYAUv4T5M=
Subject key identifier: A8:A0:71:41:AC:13:44:AA:4D:12:95:B4:FA:D7:32:2C:F4:E2:3C:BD
Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
Certificate issuer: /CN=e0a00292c2a1062bb32980a3c443fff383a41002
Certificate serial: 0195E0B46FE08417208BF3388EE216FC0222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
Manifest number: 0881
Signing time: Sat 29 Mar 2025 07:01:16 +0000
Manifest this update: Sat 29 Mar 2025 07:01:16 +0000
Manifest next update: Sun 30 Mar 2025 07:01:16 +0000
Files and hashes: 1: 4KACksKhBiuzKYCjxEP_84OkEAI.crl (hash: qWfI2dlmCTv4bA7ieifavxrpBEAcA6IGenJyl1J5IYI=)
2: mSKL5dZ-DfhQmd3vDgNujHfDeWQ.roa (hash: kM0tftmTBoswJU9/17L/nHsaIm00B47zHx/WZDRsoCQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:b4:6f:e0:84:17:20:8b:f3:38:8e:e2:16:fc:02:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002
Validity
Not Before: Mar 29 07:01:16 2025 GMT
Not After : Mar 30 07:01:16 2025 GMT
Subject: CN=a8a07141ac1344aa4d1295b4fad7322cf4e23cbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:27:48:d6:83:9f:41:ce:6f:ae:f9:84:af:78:
85:98:02:18:50:d3:09:cd:8c:b6:c1:44:47:e4:06:
82:c4:6e:ff:5c:a7:34:a3:f9:2e:15:fc:61:eb:42:
da:3d:70:69:8f:13:11:b8:d4:fc:89:18:91:4f:a7:
8a:82:b1:e5:11:f7:82:1a:54:7a:16:6a:d8:b4:ea:
68:4c:57:23:df:a5:0b:e6:ff:ad:5a:4f:e7:a1:7d:
f5:f2:c7:82:28:03:31:90:9e:e4:cc:91:7e:98:0e:
0e:3d:89:11:11:12:5e:08:1a:f0:36:ff:04:ab:5c:
21:fe:f6:ff:67:a6:b5:10:51:fa:de:fa:e0:b8:72:
fa:c4:30:7c:0e:79:e1:2d:5a:3b:d9:fc:9f:c7:50:
50:c6:13:41:3d:14:b0:59:1e:cc:c3:00:7f:53:1f:
57:55:b6:2e:94:b8:a8:52:16:fd:59:ec:16:8d:13:
dd:14:ae:f6:e8:99:65:21:4d:7d:09:4f:57:49:46:
12:b5:ac:71:1a:31:7b:ad:73:da:2b:ff:a4:08:13:
9d:89:bf:1d:d0:32:d6:75:10:f8:89:7b:f7:f7:5c:
ad:c6:b5:33:38:1b:fb:9d:b2:39:31:4e:d8:63:f2:
60:fe:eb:5a:7f:76:24:7e:13:31:63:16:2c:9a:95:
27:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A0:71:41:AC:13:44:AA:4D:12:95:B4:FA:D7:32:2C:F4:E2:3C:BD
X509v3 Authority Key Identifier:
keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:c4:72:ae:95:0a:2f:f7:e5:9c:c7:65:98:7f:55:43:e7:4c:
61:6c:a6:67:25:8e:64:c4:9e:33:06:24:64:eb:59:21:2c:cb:
09:8a:bd:a3:bc:e9:a2:d1:67:87:79:f4:6b:0b:84:75:d8:b6:
49:1e:d2:49:b5:4f:7a:ac:a4:b0:b3:56:13:11:f2:3d:a3:75:
42:16:dc:5c:8d:aa:a4:0f:21:63:7c:ec:af:f3:b1:80:a8:b4:
90:64:07:9f:60:68:da:ec:c3:96:26:95:62:96:8e:72:05:f6:
fc:69:6f:18:b3:3d:0a:f8:3c:9e:32:23:bc:05:15:2e:59:7f:
90:8c:49:bc:c7:e9:96:1b:d6:97:f3:90:7c:e7:8c:ff:ea:1d:
37:55:4b:9c:87:9c:d3:98:27:d9:fe:da:8c:95:06:5c:cd:30:
27:0d:a6:e9:0c:89:59:74:8d:1c:86:75:17:9c:7c:e8:0c:c0:
ac:04:12:96:fc:d6:2a:75:7a:9f:80:2a:5b:66:76:56:57:72:
06:dc:3d:ee:52:ca:9d:c7:3f:32:cd:41:f1:25:11:5a:88:31:
9e:ff:a8:ff:bd:62:17:75:9b:3a:33:70:c8:2a:66:98:a9:08:
77:cc:8e:37:f7:b3:f9:5a:4d:78:0a:46:4c:13:99:85:3b:4b:
57:7a:1a:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:05:48 2025 by rpki-client