Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
File: 4K4U6GPBsVoeouSaLrUEhT91tr0.mft (raw, json)
Hash identifier: 2hQxq87B2l54OT0wRVobdPjva+DgBUFEdnGFUdEojmw=
Subject key identifier: AE:C7:24:A7:79:79:C6:42:86:59:A3:01:4E:29:2F:C2:CA:20:A0:CC
Authority key identifier: E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
Certificate issuer: /CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Certificate serial: 0194BD17FAFF6B561B93BC64366AF4B63D12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
Manifest number: 04BC
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: 4K4U6GPBsVoeouSaLrUEhT91tr0.crl (hash: nY1xqcqJSxnHz6nkhvv5K8fWYXNtWUrR3uuSNeaz10E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:fa:ff:6b:56:1b:93:bc:64:36:6a:f4:b6:3d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0ae14e863c1b15a1ea2e49a2eb504853f75b6bd
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=aec724a77979c6428659a3014e292fc2ca20a0cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bb:dc:2a:b6:6b:18:cb:22:dd:be:0f:14:e5:
ea:63:15:9f:7a:06:41:1e:75:88:ab:2a:25:a2:36:
f4:6d:d5:be:58:01:ba:54:78:6c:8b:29:68:ce:53:
69:19:10:03:7c:53:c2:dc:dc:db:4c:ae:ff:3f:da:
56:a3:6a:af:99:d0:62:ed:ff:d5:74:12:6b:98:af:
81:ef:01:ca:cf:f8:cd:e2:e5:a4:6b:c1:aa:30:35:
3b:5d:6b:e9:fa:8e:0e:b6:e3:3f:f4:8e:04:48:b2:
59:a7:7a:dd:53:5d:f6:eb:13:2c:b0:9a:3b:a3:6a:
37:10:17:a2:25:37:5b:75:5b:cb:0d:9c:ec:f5:8a:
73:4f:b7:1d:f1:ec:bb:88:96:a4:21:87:72:d9:46:
55:92:15:ed:84:bc:92:6a:d7:b6:e1:51:66:30:db:
81:a9:36:8a:0c:0e:37:50:72:98:7a:6d:c1:e8:d0:
22:f3:5a:84:34:f3:a4:c9:87:35:67:3b:af:6e:90:
fe:1d:26:55:fe:b6:ff:db:dc:c2:f8:c6:75:b0:11:
4d:de:7d:6b:c5:a3:fa:8d:c6:15:ba:f0:ca:fc:55:
c9:5a:06:55:c2:c9:d8:c8:8c:31:08:43:ad:07:73:
14:8c:cb:8e:01:a7:ee:08:39:92:66:5b:c7:69:49:
5c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:C7:24:A7:79:79:C6:42:86:59:A3:01:4E:29:2F:C2:CA:20:A0:CC
X509v3 Authority Key Identifier:
keyid:E0:AE:14:E8:63:C1:B1:5A:1E:A2:E4:9A:2E:B5:04:85:3F:75:B6:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4K4U6GPBsVoeouSaLrUEhT91tr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ed956e-bec3-44ee-8186-c7905fb386a7/1/4K4U6GPBsVoeouSaLrUEhT91tr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:91:90:e7:a5:98:31:02:d0:a5:f1:6d:6f:3b:49:4e:df:16:
33:f7:37:61:3a:4e:0c:b1:67:f9:58:35:7c:8f:42:2f:a2:e0:
ec:d9:7f:57:ec:e5:00:87:bc:96:59:b3:ff:b6:af:1f:62:6f:
93:8e:4d:e1:47:db:9e:c7:8d:4e:05:45:d3:5c:fd:a7:34:cc:
ce:5b:9a:74:92:dd:11:35:c2:d9:cc:92:49:ef:f5:f2:7d:86:
0f:36:ed:da:aa:7b:2e:91:02:a6:aa:7b:0d:b5:c3:af:2c:b3:
81:01:67:82:85:4b:26:5a:b6:ce:51:94:2b:5e:45:be:81:c5:
3f:13:c2:9c:eb:fa:d0:57:1d:38:73:05:77:72:c1:1b:ed:41:
4c:8e:7b:38:05:8a:a4:d8:da:d7:b1:d9:a3:52:ec:67:20:f9:
b1:cb:ee:e5:49:66:52:99:7b:c0:ab:66:5f:c4:a3:e9:24:b5:
6e:5e:c7:7e:48:71:2a:ab:e0:f1:ca:9e:d1:8f:8e:b3:27:c2:
6a:f5:e3:22:11:35:48:75:49:bf:c9:d6:5c:79:f9:c6:52:e9:
e6:9c:84:4b:9e:fd:5a:73:32:cf:d3:3e:80:43:1d:d1:d7:ea:
33:d8:6c:23:40:ab:c9:e7:7e:de:3b:74:6b:5b:f5:29:de:e6:
2e:f3:f2:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:44 2025 by rpki-client