Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/e358f3-3188-4912-9c31-ca103ac45b6c/1/4nU_G2NrgnPqljlhlJFoohUfd4k.mft
File: 4nU_G2NrgnPqljlhlJFoohUfd4k.mft (raw, json)
Hash identifier: IGSMfA45w7V7gc+TbqA6/sFxC/VGvASUPomhKI3n50k=
Subject key identifier: EC:53:58:17:70:63:47:2D:52:52:02:7D:D2:DF:43:8C:38:96:9A:C4
Authority key identifier: E2:75:3F:1B:63:6B:82:73:EA:96:39:61:94:91:68:A2:15:1F:77:89
Certificate issuer: /CN=e2753f1b636b8273ea963961949168a2151f7789
Certificate serial: 01961DA52D5B9141E003A4CB7B054DD8CEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4nU_G2NrgnPqljlhlJFoohUfd4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/e358f3-3188-4912-9c31-ca103ac45b6c/1/4nU_G2NrgnPqljlhlJFoohUfd4k.mft
Manifest number: 0935
Signing time: Thu 10 Apr 2025 03:01:26 +0000
Manifest this update: Thu 10 Apr 2025 03:01:26 +0000
Manifest next update: Fri 11 Apr 2025 03:01:26 +0000
Files and hashes: 1: 4nU_G2NrgnPqljlhlJFoohUfd4k.crl (hash: SCbqW5fR3rTpix8c3328l4YcP2uT5bOBlMZmgjhTj3U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1d:a5:2d:5b:91:41:e0:03:a4:cb:7b:05:4d:d8:ce:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2753f1b636b8273ea963961949168a2151f7789
Validity
Not Before: Apr 10 03:01:26 2025 GMT
Not After : Apr 11 03:01:26 2025 GMT
Subject: CN=ec5358177063472d5252027dd2df438c38969ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e2:9b:33:4e:1d:59:61:2f:f2:42:4b:a6:28:
24:0d:96:2f:28:83:96:bc:b2:f0:ae:9b:03:a3:ad:
96:b2:df:b9:ce:3f:1d:f4:43:06:85:96:ae:45:8e:
2e:9d:ca:7a:c9:75:a4:d5:64:2a:0d:4c:c4:a1:bb:
a6:fe:c9:3d:45:b8:6a:8a:ea:cf:53:a9:f5:c7:74:
00:b3:2a:a9:f3:75:2b:52:ff:6d:ee:d8:24:7c:73:
16:42:2a:a7:62:e9:b4:f1:ec:ec:85:89:a1:bf:cb:
ee:8e:8c:2f:ee:5a:3f:65:03:12:5b:3e:d6:20:c6:
6c:75:95:97:7b:99:a2:1e:70:60:ee:68:c7:7c:28:
2a:9f:55:95:02:7b:b0:7d:c3:4e:9f:58:2d:d5:16:
c9:7a:f7:43:45:99:d4:28:5f:a1:80:b7:20:93:86:
65:74:a4:13:28:f7:8d:f1:82:7a:4f:91:a8:8e:bb:
c8:7d:cd:95:17:a6:9e:91:92:7d:84:83:cb:09:2e:
c9:fd:38:36:36:d4:26:11:95:fa:f5:c9:31:04:3f:
05:70:79:2a:08:21:8d:b0:76:81:9c:c4:ce:63:15:
85:8b:b6:d0:bf:76:f9:63:0a:2d:87:f9:26:8a:86:
cf:27:b3:03:bd:f1:01:4e:97:f0:6b:e0:59:36:e1:
06:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:53:58:17:70:63:47:2D:52:52:02:7D:D2:DF:43:8C:38:96:9A:C4
X509v3 Authority Key Identifier:
keyid:E2:75:3F:1B:63:6B:82:73:EA:96:39:61:94:91:68:A2:15:1F:77:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4nU_G2NrgnPqljlhlJFoohUfd4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e358f3-3188-4912-9c31-ca103ac45b6c/1/4nU_G2NrgnPqljlhlJFoohUfd4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/e358f3-3188-4912-9c31-ca103ac45b6c/1/4nU_G2NrgnPqljlhlJFoohUfd4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:63:ae:2d:79:27:21:a8:ed:79:46:f7:26:eb:90:35:a6:83:
0b:4a:6e:e0:6c:a6:a4:7c:44:42:8e:58:f0:11:d4:b9:cb:79:
6e:fc:7f:a6:93:9e:20:60:af:94:87:89:fa:7b:f1:b8:46:06:
d2:74:d9:d9:32:5c:05:94:e9:d2:b8:b6:56:fb:26:bf:dd:dc:
1c:70:b2:18:ed:a2:17:20:05:ae:57:23:d7:bc:df:0f:e6:7d:
24:21:79:79:81:d7:48:a3:af:6a:52:f1:44:ef:a1:fb:e7:56:
62:3b:b1:85:e4:0c:08:64:b7:27:fd:a9:85:30:df:b3:0a:f7:
1f:3c:5b:1c:fa:a9:aa:5c:58:ea:ee:2e:70:fe:67:03:f1:a2:
c3:af:5a:9e:84:03:56:d2:f8:eb:3b:7d:81:19:7d:16:d8:f4:
87:bb:4c:f3:7f:d7:16:40:b8:42:64:c1:0c:00:46:9d:39:fd:
dd:50:9e:58:7f:a0:de:92:39:81:9c:69:6e:86:ab:6d:51:ac:
38:5c:34:a0:d8:b4:68:7c:4f:46:43:97:90:94:90:35:84:13:
f7:55:d5:cd:ce:f3:3c:5b:b3:f6:ba:3b:cb:d3:11:31:9b:43:
09:22:fb:ad:c6:dc:e9:75:ed:1a:07:ca:57:c3:79:8c:27:b0:
de:f5:5d:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 15:03:41 2025 by rpki-client