Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/4XUkwqbyTX5nlLAMCWNNytIxBDQ.mft
File: 4XUkwqbyTX5nlLAMCWNNytIxBDQ.mft (raw, json)
Hash identifier: vQkvbw/BAPQItkYgJw73V+ZeN3xlQME357TTd7j5SEM=
Subject key identifier: D2:BD:B5:CD:29:AB:D7:2E:8B:A2:3E:A1:13:E4:23:18:3D:71:82:BA
Authority key identifier: E1:75:24:C2:A6:F2:4D:7E:67:94:B0:0C:09:63:4D:CA:D2:31:04:34
Certificate issuer: /CN=e17524c2a6f24d7e6794b00c09634dcad2310434
Certificate serial: 0193B33DB67130A243CCCF77717B62C764A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XUkwqbyTX5nlLAMCWNNytIxBDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/4XUkwqbyTX5nlLAMCWNNytIxBDQ.mft
Manifest number: 0F49
Signing time: Wed 11 Dec 2024 01:03:06 +0000
Manifest this update: Wed 11 Dec 2024 01:03:06 +0000
Manifest next update: Thu 12 Dec 2024 01:03:06 +0000
Files and hashes: 1: 4XUkwqbyTX5nlLAMCWNNytIxBDQ.crl (hash: AuA8m1kPTOEvl+x//NHFLrr8hmDSkWDHm8MsvQXqgWU=)
2: wG_toJzQcsLfnCCECsN6GO00t1k.roa (hash: EJ8D7AOAOxEr6g7iVAABRTKQ41iq0rT+KZMrYp1UHyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:b3:3d:b6:71:30:a2:43:cc:cf:77:71:7b:62:c7:64:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17524c2a6f24d7e6794b00c09634dcad2310434
Validity
Not Before: Dec 11 01:03:06 2024 GMT
Not After : Dec 12 01:03:06 2024 GMT
Subject: CN=d2bdb5cd29abd72e8ba23ea113e423183d7182ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:89:c6:79:51:28:fd:47:97:1a:a2:8f:25:05:
09:7b:f1:9a:1b:8d:66:c4:61:ec:0e:8e:4c:4a:a5:
6f:93:d3:53:9b:dc:92:dd:16:37:40:3f:85:80:35:
fb:b5:74:29:c6:3d:46:3d:f8:40:f4:b5:96:f2:57:
8e:25:15:e2:44:45:91:65:76:18:5b:59:ac:fd:42:
e4:db:29:26:87:c9:31:d7:f3:51:23:dc:a3:f8:c8:
4a:1f:e4:80:ae:bb:1b:55:da:5e:49:3d:bb:81:36:
2c:a9:ee:3a:38:24:3f:55:f4:61:ad:28:3e:37:f6:
6a:ea:8b:70:55:aa:df:c1:f0:fd:77:7c:16:99:73:
0a:c0:c1:f8:49:6d:6b:e4:c6:2d:be:d9:14:a2:b7:
ba:cd:1b:b5:84:6e:02:1c:8d:9a:9a:0f:b5:3d:10:
4a:41:03:80:7f:8b:89:b3:db:a4:8a:91:c4:ae:3f:
99:59:39:d5:bd:80:28:33:ed:61:af:a5:04:33:47:
95:aa:22:4b:e6:a3:28:f9:8a:8f:7d:58:1c:ed:a8:
b6:95:ae:1d:6e:69:e4:8a:b5:06:a9:be:cc:99:19:
6e:4a:27:6c:89:47:4d:78:13:e1:e1:e0:9d:5c:fe:
33:6b:ad:cb:97:cd:33:88:f5:cf:90:fa:e7:37:93:
0e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:BD:B5:CD:29:AB:D7:2E:8B:A2:3E:A1:13:E4:23:18:3D:71:82:BA
X509v3 Authority Key Identifier:
keyid:E1:75:24:C2:A6:F2:4D:7E:67:94:B0:0C:09:63:4D:CA:D2:31:04:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XUkwqbyTX5nlLAMCWNNytIxBDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/4XUkwqbyTX5nlLAMCWNNytIxBDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/4XUkwqbyTX5nlLAMCWNNytIxBDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d6:75:3d:ed:c8:dd:b3:bd:71:34:d6:44:98:c7:61:8a:ca:
a2:b9:b0:fb:17:25:34:83:d8:5e:cf:2a:0d:06:de:93:29:8c:
db:82:55:45:c1:31:df:98:b4:2d:ef:20:5c:df:f2:97:d0:99:
0b:8a:d1:1f:e1:0c:f4:81:1b:20:70:4d:19:c0:fc:4b:cc:d2:
2a:cd:e9:9a:a8:ef:7e:e1:91:7a:3f:7d:f6:53:a3:c0:4b:49:
c5:3f:f9:6f:72:45:e5:fa:b0:6a:a4:d0:ae:ed:d2:78:68:14:
ab:3a:c5:2d:d9:52:fa:61:84:e1:b5:ba:0f:b6:54:9b:80:7b:
be:3a:fc:f7:96:c2:91:d8:db:bc:52:10:98:74:62:4c:7f:ff:
7b:23:aa:a3:db:48:9e:3c:02:87:0a:25:6d:d5:30:25:27:68:
d5:ad:23:e2:bb:b9:cd:59:f8:8d:1d:27:13:94:32:ce:0e:21:
9e:a2:0a:f3:7a:35:59:b8:39:64:1a:0a:91:1b:7f:f8:75:b8:
c0:ab:16:a0:15:aa:a0:6b:5e:46:7c:cc:a5:f4:55:00:f5:f2:
98:a2:e2:83:cf:82:fc:8a:c8:ce:9d:af:65:7d:0d:b0:63:f7:
62:87:a5:bf:a7:04:59:fe:6f:b8:73:48:c5:90:49:27:19:e5:
be:7a:6c:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:05:36 2025 by rpki-client