Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
File: 4upZNGSFjik5UjRc9Ol3ksiBEFc.mft (raw, json)
Hash identifier: VG2+VrGirxdJXsP1O1n0eMo7EAlUX7/xStyEdXAkLlY=
Subject key identifier: A3:08:08:5D:B8:99:E0:E7:01:A5:3B:1B:BF:12:30:1E:85:C3:4A:5A
Authority key identifier: E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
Certificate issuer: /CN=e2ea593464858e293952345cf4e97792c8811057
Certificate serial: 0194BD854B3FB123BDF09E71F664CDD1C5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
Manifest number: 13BE
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: 4upZNGSFjik5UjRc9Ol3ksiBEFc.crl (hash: 84XxzBaES+MQG9Hn4OGIanFfrMwdS08NISqLhU/56tw=)
2: n71MSGzOhUkplgZWWIqcoN_zTeY.roa (hash: M4lvFRLACkU+Ya2mbosmCvcTtHX7Mafia2WGDrBrlJQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4b:3f:b1:23:bd:f0:9e:71:f6:64:cd:d1:c5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ea593464858e293952345cf4e97792c8811057
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=a308085db899e0e701a53b1bbf12301e85c34a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:1b:f7:33:c6:73:a9:02:5d:83:62:e6:b0:ac:
e0:2a:2e:07:0f:fa:4d:7a:54:4b:79:4f:9c:6a:c6:
ad:38:fc:c8:2b:28:07:4f:d7:d6:83:58:24:d5:ee:
09:7b:5e:80:cc:21:3a:88:63:bd:57:bb:9a:5e:88:
86:3a:07:ea:33:14:69:2e:ea:49:09:6a:ec:4b:82:
ca:dc:be:25:3d:2f:be:af:8b:d7:5d:13:ab:15:12:
1f:2c:b1:69:80:9a:97:db:61:54:7f:fa:d0:27:dc:
3c:ac:79:45:b9:07:75:44:da:36:b0:ee:32:10:b2:
54:c9:d9:2f:7a:23:78:94:f8:6a:23:1b:6a:a1:17:
43:67:b6:ca:9f:a5:73:b5:64:38:da:de:0c:08:67:
bd:a3:9c:1c:53:e6:19:81:1d:b7:64:0e:c8:02:f1:
4a:c3:34:3d:7f:91:bd:dd:ff:34:a2:d0:8e:c7:fd:
44:44:64:98:00:71:9b:bd:0e:0e:cd:19:19:cd:2e:
f1:61:1e:73:72:1b:da:00:88:3e:5b:98:6e:86:e5:
73:45:6a:6d:ef:a4:ff:d4:a4:7b:41:10:e8:d9:4e:
7c:83:49:f5:f6:9f:e3:be:42:e4:0c:a1:07:cc:88:
37:5d:ec:a9:f9:d6:c3:bd:d1:ca:44:95:4f:62:4c:
f5:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:08:08:5D:B8:99:E0:E7:01:A5:3B:1B:BF:12:30:1E:85:C3:4A:5A
X509v3 Authority Key Identifier:
keyid:E2:EA:59:34:64:85:8E:29:39:52:34:5C:F4:E9:77:92:C8:81:10:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4upZNGSFjik5UjRc9Ol3ksiBEFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c3932f-f476-4d5c-bb5a-62e4baee4fc5/1/4upZNGSFjik5UjRc9Ol3ksiBEFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b9:04:cb:eb:34:70:95:d6:f0:1b:02:83:df:53:30:84:66:
69:91:a5:da:ea:66:ee:59:14:34:4e:4c:28:c7:10:81:b9:ff:
0f:55:f7:c1:59:01:5a:cc:cd:61:aa:c1:8c:bf:88:0f:50:31:
3e:9d:86:57:1a:30:d4:c4:66:e2:a7:ee:92:71:c5:25:96:af:
a5:ee:ec:be:47:65:ae:18:49:5a:e5:0d:a0:6c:1e:32:87:a3:
26:b4:36:d7:13:a8:a1:a6:30:0d:53:1f:f6:0f:79:4a:fd:8b:
f0:76:7c:6f:03:55:67:4e:66:b9:45:f0:3f:3f:2d:6d:25:cf:
95:ea:24:3c:94:65:be:2d:55:fc:a1:7f:86:f5:6e:60:54:1d:
fd:9e:ab:13:4f:e0:f9:a1:64:40:8f:a9:f7:c5:f1:e7:32:90:
29:ca:20:a8:65:ab:26:ed:3e:d1:49:ba:ff:69:0c:cd:7e:2b:
15:7a:cc:48:0f:ae:7e:cb:bd:6e:58:a3:aa:9e:0a:a3:e0:2f:
ff:ba:bb:98:9e:5a:c8:1d:6e:0d:2d:57:d6:17:9c:01:4e:f0:
b9:55:3e:ed:b1:d2:57:24:91:a0:38:eb:4e:a3:fe:d9:cc:2c:
de:78:b5:e7:d2:d2:e9:27:37:3c:69:c6:3c:fd:c6:49:1b:8e:
f4:8d:ab:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:55 2025 by rpki-client