Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
File: 4qEN5v-uWQQnJEoDND22asVkJ1o.mft (raw, json)
Hash identifier: j/t59BXMBMP2yDQZ7aZ0So9MgN7IP7Xu7gMTwg1USc4=
Subject key identifier: 66:09:22:5B:87:F8:D6:D2:5F:27:DE:3C:CE:D1:04:7E:C7:CA:84:54
Authority key identifier: E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A
Certificate issuer: /CN=e2a10de6ffae590427244a03343db66ac564275a
Certificate serial: 0194BD8548DE640208C836797C5581D3F522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
Manifest number: 1173
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: 4qEN5v-uWQQnJEoDND22asVkJ1o.crl (hash: dCSM6/eDkULLKgFWGgQgormWnBV2ioHXEPiBMlgalr4=)
2: EMEQainrdjhvrSxfRt2EdTwfFho.roa (hash: MgfrBxxTqDVEh7a/Ypney2yykLPSmFU/4+sRkVkl74s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:48:de:64:02:08:c8:36:79:7c:55:81:d3:f5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a10de6ffae590427244a03343db66ac564275a
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=6609225b87f8d6d25f27de3cced1047ec7ca8454
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:fa:5f:fd:8e:9c:33:4b:90:2f:52:73:2e:
3e:52:38:1f:4c:04:22:47:03:56:f3:dc:a2:fa:66:
03:8c:49:97:5a:1b:d6:05:e6:ed:48:3d:e1:a5:cb:
8b:47:52:75:a4:4b:41:20:6b:6c:be:a5:e2:11:14:
ad:a6:37:6e:c8:ce:88:ec:24:ac:57:cb:69:64:4e:
d1:a1:1a:fe:33:af:a1:7e:89:03:80:35:c8:09:e0:
29:a7:82:2a:3f:1e:5c:3d:74:16:60:c9:30:48:29:
bc:db:3a:3b:cd:5a:35:20:16:f6:a1:68:88:7a:41:
a2:fe:93:54:54:d4:7d:86:93:42:c9:61:fd:db:c2:
6b:18:d1:cc:61:c6:0a:0c:76:9c:e0:99:e3:9d:b0:
21:ab:1f:c9:e3:b9:bd:c4:67:23:0c:ec:f3:cd:79:
1c:e2:39:de:fd:7c:ae:66:2a:99:3e:93:a4:fa:b8:
49:06:db:d2:44:6c:46:bc:5d:13:9a:56:b4:f4:10:
96:c8:63:3d:b0:aa:43:8a:45:d3:4c:fc:62:73:a7:
85:f0:9d:db:d1:30:2c:67:9f:41:c1:1a:92:6c:bc:
77:9a:1b:36:7d:ad:d2:8a:ef:37:4d:1e:c9:1f:c4:
c7:c8:34:66:3d:7c:17:b0:e7:09:6e:02:6f:43:0f:
1d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:09:22:5B:87:F8:D6:D2:5F:27:DE:3C:CE:D1:04:7E:C7:CA:84:54
X509v3 Authority Key Identifier:
keyid:E2:A1:0D:E6:FF:AE:59:04:27:24:4A:03:34:3D:B6:6A:C5:64:27:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qEN5v-uWQQnJEoDND22asVkJ1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a8bb57-c181-4695-9be7-57554058620b/1/4qEN5v-uWQQnJEoDND22asVkJ1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:a0:0c:a8:c1:e4:35:6a:2d:66:99:f0:f0:b3:37:7c:bb:52:
29:37:7d:e9:3c:12:76:4b:c6:d1:97:68:88:a6:74:05:cd:98:
15:4c:f7:45:a8:6a:7c:b0:64:87:d6:d6:dc:15:be:15:96:84:
b7:fc:51:cf:b7:14:40:82:47:e3:06:08:11:74:5b:26:d4:ce:
05:f0:07:61:f4:1d:77:70:85:99:54:ba:0f:40:e5:74:74:a3:
96:b5:25:0c:f1:19:85:49:28:aa:9f:bf:db:14:40:9a:96:f5:
89:e6:2a:67:ab:e2:f6:93:18:e0:bf:34:a3:57:5a:c0:86:bb:
43:e8:a1:ab:ed:25:51:39:e9:8c:89:c1:32:60:1d:c3:23:7c:
05:d5:9d:81:72:42:2b:b3:7d:7a:fd:91:b8:bf:a7:6c:cb:2e:
80:49:61:5d:b3:a9:d9:7c:49:ef:4e:ae:bc:4b:b8:ce:5b:e9:
cb:d2:48:93:96:ca:5a:b1:ea:3f:01:09:59:66:94:92:0c:5d:
a7:59:21:9d:5d:7e:23:f9:f2:7c:51:2b:20:48:f7:2e:14:5d:
fd:55:34:0e:7f:0c:c9:7e:a5:f6:05:18:e4:2e:c9:c1:e1:16:
9c:9d:62:7d:f9:72:77:5c:7d:43:d5:f8:e4:35:c7:c0:46:6a:
9a:92:07:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:29 2025 by rpki-client