Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
File: 4auG-AxLsqxW5B7HokauKWnY01g.mft (raw, json)
Hash identifier: kPxLPH4omH9IhXPu16JTk4qu/Bnbt0AXwzOkzkoBtL8=
Subject key identifier: A8:0D:A8:75:C5:86:29:C9:FC:30:CA:D1:1F:7A:F8:36:0E:4A:E4:12
Authority key identifier: E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
Certificate issuer: /CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Certificate serial: 0194BD17FAC46534E2350BA2E0C4192A2282
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
Manifest number: 03F4
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: 4auG-AxLsqxW5B7HokauKWnY01g.crl (hash: ksm5McprXPQfdYfTBeEvvpxoCOTV8tO3C0L2xF2gFZk=)
2: IrEzCg-L6ChV6NO0z_pSKTvObkE.roa (hash: BAxTmTfKNgnausi613sLgqp7n2C4MuqhHvDS7/1g8aY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fa:c4:65:34:e2:35:0b:a2:e0:c4:19:2a:22:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ab86f80c4bb2ac56e41ec7a246ae2969d8d358
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=a80da875c58629c9fc30cad11f7af8360e4ae412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f6:67:45:cc:91:42:79:a7:e8:f8:4a:ae:2c:
be:aa:ad:9c:11:e4:e0:7a:37:fd:ff:9a:fa:b2:49:
7a:30:02:3f:cf:1c:b6:d4:7c:bd:14:32:b7:43:c0:
79:8a:41:82:c5:d5:3a:9f:bb:f4:78:0b:af:8e:cc:
56:dc:92:02:17:5d:78:42:ee:23:7f:24:b2:ad:3c:
96:ff:01:34:fc:f3:e9:0a:87:f5:6e:96:e2:c1:2b:
78:2c:d2:00:16:84:5e:70:95:3e:91:79:af:16:06:
e4:aa:84:c7:f9:68:cf:8c:0c:e7:87:b4:8a:c6:10:
79:7d:e5:74:a0:cd:74:9f:55:c4:32:9d:6c:90:a0:
c8:08:e3:59:4b:83:0d:e6:69:32:a6:4d:67:31:7d:
ae:21:62:f0:77:e1:51:32:37:d7:f1:a7:3f:c0:82:
a4:00:b0:d1:b3:93:00:16:a7:3c:34:94:fa:59:f8:
c3:39:8e:1a:d8:c1:f4:5a:ec:30:60:6f:75:9d:fb:
ed:3c:e0:28:8c:9f:f8:0c:d8:40:e7:75:1d:f3:8e:
1a:17:08:80:f0:14:e7:14:3b:2e:ad:96:03:75:ed:
66:b8:ec:28:0f:f3:d5:4a:e2:9b:0b:31:87:8f:6d:
1e:e9:c1:5a:72:9a:4a:39:7a:30:2b:4d:79:ee:27:
2d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0D:A8:75:C5:86:29:C9:FC:30:CA:D1:1F:7A:F8:36:0E:4A:E4:12
X509v3 Authority Key Identifier:
keyid:E1:AB:86:F8:0C:4B:B2:AC:56:E4:1E:C7:A2:46:AE:29:69:D8:D3:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4auG-AxLsqxW5B7HokauKWnY01g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/1240eb-bab4-45ad-9387-516f11acb3ae/1/4auG-AxLsqxW5B7HokauKWnY01g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:04:5a:e2:16:33:2a:8e:ba:f6:ec:37:03:1b:59:3a:9d:49:
0c:fc:77:35:23:55:58:9a:2c:52:32:d4:6e:63:27:b7:d1:23:
e8:7e:b5:f4:fe:ab:b9:da:bc:ca:c5:3f:31:52:50:1d:ad:ca:
d1:78:4c:8e:1d:a4:0f:c9:64:fc:54:e7:4b:a5:2d:a4:f2:1c:
24:57:08:f3:bc:09:5a:18:78:73:39:19:0a:93:d2:eb:a6:46:
bd:5c:22:03:a2:ae:a0:62:4f:c0:9a:b5:a8:24:2d:5d:e2:fa:
cc:51:69:b3:2c:41:bf:5e:df:bb:e0:88:95:2e:36:67:50:07:
df:be:05:8c:ba:55:36:67:87:7b:e4:b6:2f:7d:73:1c:b1:c0:
db:d3:c2:d2:e2:e2:aa:7f:d5:d8:15:ad:64:00:c9:0b:95:98:
85:c2:47:69:a1:8a:16:fa:c9:04:eb:7c:5f:83:4a:2a:05:60:
93:c7:b6:cd:62:73:10:f5:9d:42:f4:93:39:92:d3:1e:28:e7:
f2:90:97:08:91:47:3a:1a:55:9a:82:da:b1:6f:9d:cd:fd:96:
8c:d4:31:98:03:7d:31:75:a0:9f:5e:b6:55:2e:52:7d:bf:37:
04:ad:7b:0c:74:2f:9d:b8:fc:dc:a0:c2:63:c2:0c:44:e5:9f:
4f:e9:79:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:12 2025 by rpki-client