Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
File: 4wEfCFnQaghJdfTovStVZxDdjDA.mft (raw, json)
Hash identifier: lBRfIitC0AG5OyMqvqjDe8494UH1eSXMItvui58ymLs=
Subject key identifier: D0:F1:AE:57:E6:8B:41:B2:86:63:1A:DE:A4:64:95:62:7D:E1:FE:FC
Authority key identifier: E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
Certificate issuer: /CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Certificate serial: 0194BC3BD855745D05822459E5C9F313449B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
Manifest number: 0EB4
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: 4wEfCFnQaghJdfTovStVZxDdjDA.crl (hash: OoJqHkzApe9vJoo53kTSSL2ypOshBFPW/1GNkLJp21Q=)
2: y5czNixkNluft47-krcqIbdqVD0.roa (hash: AmEHJkAG0oDmal6HjQJOOd7Nfm7cgEA//96C9SqFxV0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d8:55:74:5d:05:82:24:59:e5:c9:f3:13:44:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3011f0859d06a084975f4e8bd2b556710dd8c30
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=d0f1ae57e68b41b286631adea46495627de1fefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7c:03:3a:da:41:0f:83:7b:b8:b9:ba:3b:26:
06:cd:5a:c9:43:5a:e3:30:d3:26:1d:60:a1:9a:f2:
3a:36:89:f2:3c:b4:b9:88:dd:b2:87:d7:44:0b:f8:
a9:e4:81:de:aa:d8:9b:23:13:f2:e1:df:79:56:5a:
92:cb:c1:3f:3a:cc:3d:91:e8:54:73:78:13:f0:7e:
f4:f0:ae:6f:bd:3f:c0:83:97:09:ce:16:e9:dd:1e:
b4:39:f2:20:b0:d2:1c:7b:e5:b5:73:37:98:2a:d7:
d2:c9:dc:06:90:53:d5:df:c1:cf:ac:9e:3c:0d:45:
ea:75:c3:22:8d:1d:a8:32:8d:ac:05:dd:89:a3:aa:
4a:63:2d:8c:67:38:aa:c3:a1:80:22:77:07:47:5a:
db:1c:f5:e4:aa:ef:54:ca:1b:11:95:e2:33:7e:1f:
9a:f6:35:8b:86:84:3a:11:25:a4:79:12:43:41:07:
17:f8:a8:c7:54:69:05:2e:92:65:da:18:e3:21:f2:
ee:ba:00:6c:26:ff:56:a3:c3:bd:78:73:92:74:7d:
bb:e3:63:1e:7f:2f:4e:1f:ae:81:f2:d6:b8:0d:cd:
fe:17:21:7c:b5:85:ca:78:a7:9b:d4:72:b9:2e:e5:
40:b7:f7:95:0a:a8:13:be:08:88:e9:cb:00:44:e0:
cf:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F1:AE:57:E6:8B:41:B2:86:63:1A:DE:A4:64:95:62:7D:E1:FE:FC
X509v3 Authority Key Identifier:
keyid:E3:01:1F:08:59:D0:6A:08:49:75:F4:E8:BD:2B:55:67:10:DD:8C:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4wEfCFnQaghJdfTovStVZxDdjDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e8f727-cb23-43ce-85d2-d48b7d2624db/1/4wEfCFnQaghJdfTovStVZxDdjDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:d8:3e:24:56:ef:e5:af:05:9d:77:44:05:e2:65:f8:63:f1:
be:57:a8:d7:5d:61:60:3c:82:db:61:45:fc:d4:8c:47:f3:26:
ac:72:23:8a:ab:f7:02:1c:81:42:a3:ad:f0:d6:99:e7:6f:88:
23:44:a5:df:b6:90:2f:cb:45:78:47:cb:c2:50:de:bc:bb:ca:
b9:1d:52:c0:b0:ef:3f:1a:76:01:75:5d:49:65:c6:6d:9f:6c:
33:da:73:4b:af:af:0b:d8:b2:44:83:d8:f4:e2:df:0a:16:db:
29:ee:d6:a8:b2:7a:95:d9:88:40:ca:dc:3c:83:9b:ec:33:1f:
56:c1:5a:69:38:4d:8f:67:eb:0b:56:b5:99:84:fe:0d:a4:de:
ab:d8:c0:0a:84:9d:06:73:c7:ce:4b:f7:74:0e:5d:ed:f6:c0:
3a:18:1e:94:e6:6d:5a:7e:6c:6c:b5:88:b0:f8:9b:65:40:36:
0d:7f:33:41:96:9c:37:d6:e8:6e:9a:6a:bc:34:d3:f1:26:f6:
65:93:3e:81:5d:e9:89:b6:3c:b1:a0:95:65:88:43:0d:7a:60:
6e:4e:1e:36:8f:d0:f5:ae:c9:96:ac:33:77:47:16:c0:a1:dd:
2b:21:22:e6:0d:fd:29:50:a3:63:43:30:fb:ec:f3:e0:58:93:
b3:5f:a5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:01 2025 by rpki-client