Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
File: e4jUpKsYpZtmTauv2ziA3DWyK5E.mft (raw, json)
Hash identifier: LMMUtkfLVI+VbXsOBYpKuCZpvGbXfTwKzQ6/l9BXRII=
Subject key identifier: 1A:B1:EB:F3:16:25:43:6C:19:44:28:13:B6:4B:6A:D2:C8:D3:E8:F6
Authority key identifier: 7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
Certificate issuer: /CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Certificate serial: 0194BCA9A28358E67F776DC40E6045CEB18B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 14:00:21 +0000
Manifest this update: Fri 31 Jan 2025 14:00:21 +0000
Manifest next update: Sat 01 Feb 2025 14:00:21 +0000
Files and hashes: 1: XWu-Cy3k4bG46jzu68jWDU2BUlE.roa (hash: oYNAZflFkpftatNeWIk412xMRJVARxZKG+FJn7voe4M=)
2: e4jUpKsYpZtmTauv2ziA3DWyK5E.crl (hash: 728HaoVU8kC9IgLerKX+ZkmO3XETv9BC8fNBw0KIor0=)
3: jYKhHXV1OB2pC6LjAmSh2r6YUk0.roa (hash: 7C9VKQGPhygAtV4ulo4sNDzQRhMNsoU08LmAQx4ncWw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a2:83:58:e6:7f:77:6d:c4:0e:60:45:ce:b1:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b88d4a4ab18a59b664dabafdb3880dc35b22b91
Validity
Not Before: Jan 31 14:00:21 2025 GMT
Not After : Feb 1 14:00:21 2025 GMT
Subject: CN=1ab1ebf31625436c19442813b64b6ad2c8d3e8f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1a:a2:b2:02:da:e6:a7:ee:92:c6:6b:e1:68:
99:08:02:67:aa:a3:99:d7:a5:a0:4c:ec:3a:12:5c:
94:cd:f5:ad:0c:21:88:c6:5e:c2:18:02:9c:6e:f2:
a0:b5:7a:d5:a2:87:a8:f7:0a:d5:7e:3d:f2:ea:6f:
12:c3:0a:f1:93:52:95:9b:af:76:84:f9:f7:b7:b4:
50:1b:32:03:71:31:74:1f:3c:a5:0c:74:3f:dd:65:
19:3e:f2:42:e0:c2:84:13:87:d3:88:20:8c:14:84:
e2:2b:48:5c:e6:44:6f:e0:99:48:91:1d:b0:ea:60:
e4:27:00:f9:76:e8:26:df:9e:86:a4:00:ba:7a:38:
23:93:12:e6:90:c6:cf:13:05:cf:01:96:2e:c9:24:
c9:17:23:a9:4d:fe:2b:55:de:7e:a5:53:83:ac:5c:
9a:f9:59:93:2a:18:ae:12:40:9f:55:98:c9:d8:bf:
27:dc:b8:1b:2e:85:36:67:53:4b:d2:ad:cc:3c:f5:
77:96:09:b6:14:31:c3:73:56:08:26:07:34:c6:d4:
c9:b5:fa:df:36:45:01:90:b6:9c:01:55:4e:a9:a5:
be:33:57:8c:49:c6:a0:0a:bd:5c:6f:90:33:ab:1c:
7e:07:87:cb:13:fc:10:04:4d:81:b5:80:d3:bb:a7:
5a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:B1:EB:F3:16:25:43:6C:19:44:28:13:B6:4B:6A:D2:C8:D3:E8:F6
X509v3 Authority Key Identifier:
keyid:7B:88:D4:A4:AB:18:A5:9B:66:4D:AB:AF:DB:38:80:DC:35:B2:2B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4jUpKsYpZtmTauv2ziA3DWyK5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2048e4-818c-4601-b023-743765bd0f3e/1/e4jUpKsYpZtmTauv2ziA3DWyK5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:b0:97:a2:08:2c:97:b9:ad:f7:1a:67:fe:00:66:be:60:2f:
62:5e:15:97:71:5f:17:85:71:89:e0:ac:a1:b1:70:a3:27:41:
f7:66:d5:6c:a6:0f:82:71:7c:fc:f7:94:43:a3:95:2e:be:af:
85:aa:0d:c0:6f:83:46:a0:55:87:cd:7e:df:2a:1e:2e:61:13:
36:4f:23:4a:41:74:8a:e3:38:00:41:a6:7b:2e:4e:29:5a:6c:
7b:9b:12:1e:6c:aa:58:bb:40:74:84:90:7d:a8:12:fb:13:eb:
ef:70:f9:bd:0d:5b:d0:55:c8:c1:6d:c1:47:15:1e:ec:d1:2d:
c4:31:15:18:a3:b9:94:f8:d9:c3:45:98:07:ce:b1:c4:73:df:
45:a3:50:2f:83:41:dd:5e:7d:ec:7f:b7:a1:24:ba:03:51:76:
88:1b:e2:1d:ec:a5:b2:b5:0f:e8:c6:e8:3d:41:6b:40:e5:16:
f0:c6:46:79:f6:15:7e:6d:a1:7f:33:f0:00:de:1c:69:0d:ff:
42:9d:73:a6:91:5c:a0:6e:8b:c5:90:2e:2a:25:d7:6c:4a:94:
7e:6c:06:d2:6e:55:55:9d:5c:70:20:25:fd:ee:8e:b4:4f:18:
41:c3:17:73:b2:6c:7a:3a:9c:42:b5:53:03:72:72:63:06:7c:
af:f3:66:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:41 2025 by rpki-client