Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
File: 4QBqBtxJCZf_j8OkLs84m-090Xg.mft (raw, json)
Hash identifier: cb1oKWfWdlg10Lht5OgMoumZr5sGJSjJ3Gj/Ol1dKCc=
Subject key identifier: FF:BB:FC:F9:3E:41:E6:1E:2C:AA:33:97:D3:9F:F0:51:A5:87:1F:03
Authority key identifier: E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
Certificate issuer: /CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Certificate serial: 0194BC3C9FB800F10E615E1C991C5E661556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: 4QBqBtxJCZf_j8OkLs84m-090Xg.crl (hash: uix7dJW7M3YJAH0gs0/gA3B5jSBWty8uaGIlypjLskE=)
2: LnqHoulK3VATGmKEAn72iWxo7SM.roa (hash: yf2dP1AEzVPcio054NYKJ4SAhZkRjptLQTGykKC3qEs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:9f:b8:00:f1:0e:61:5e:1c:99:1c:5e:66:15:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1006a06dc490997ff8fc3a42ecf389bed3dd178
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=ffbbfcf93e41e61e2caa3397d39ff051a5871f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cd:e8:9f:e5:cb:c4:c6:cc:cc:6b:cf:80:ec:
48:11:82:3b:5f:57:88:14:42:39:6a:a4:55:ee:13:
54:b7:88:59:f4:e4:c5:08:74:4f:e7:ad:28:75:3a:
6a:7a:cf:93:c9:f1:cd:6f:7c:9a:5d:8d:68:50:dd:
e2:98:56:04:72:7e:19:b2:f6:17:ab:fb:00:ed:62:
c8:25:21:ad:c8:68:67:40:09:ab:46:cc:34:78:8b:
47:49:4b:e8:6c:84:2d:04:78:b5:2c:13:76:91:12:
1c:71:ba:36:70:31:09:55:c0:a6:ad:dd:fb:76:bd:
4d:25:34:1b:03:da:20:48:70:b8:57:f9:2a:99:da:
58:70:36:7d:50:ce:8f:e3:88:bf:cb:d6:b4:1f:6d:
2d:14:b7:8a:8a:0f:06:c4:5a:fd:89:99:b8:25:ff:
15:ca:d9:99:2a:52:0c:79:c4:e2:8f:3a:39:a3:eb:
75:6c:54:35:c7:c7:8d:78:10:82:ba:78:b2:98:78:
91:a5:d7:71:62:63:44:27:43:9b:cf:34:a9:8c:30:
00:4a:af:57:6b:6d:67:f5:54:67:cf:e5:d6:50:e4:
ee:e4:0e:2c:99:2f:2c:ca:14:db:81:e7:ac:05:83:
2c:ed:6c:a9:cf:6c:ad:94:ff:44:e2:2e:0e:f9:83:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BB:FC:F9:3E:41:E6:1E:2C:AA:33:97:D3:9F:F0:51:A5:87:1F:03
X509v3 Authority Key Identifier:
keyid:E1:00:6A:06:DC:49:09:97:FF:8F:C3:A4:2E:CF:38:9B:ED:3D:D1:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4QBqBtxJCZf_j8OkLs84m-090Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/830b5c-b6c8-4979-a53e-494e26491796/1/4QBqBtxJCZf_j8OkLs84m-090Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:41:5a:38:27:d1:5f:b7:e3:88:66:62:2e:1d:15:9a:d6:a6:
93:97:13:c8:43:b3:3d:c8:55:97:04:cf:08:f6:eb:22:6d:f8:
69:5a:e1:11:3a:89:13:16:8f:91:17:d6:c6:8e:72:9f:00:4e:
e7:68:d7:46:67:45:a4:36:36:14:3c:1b:34:da:04:a1:ae:43:
db:f6:91:77:e6:ee:78:6d:40:da:ab:f7:31:3b:de:cc:7c:53:
d7:f3:8f:a9:e9:c0:d8:f7:49:db:5b:ea:6c:e2:e2:a3:8c:9c:
c1:1b:0f:fb:de:7f:47:18:8d:e1:ab:3c:99:f6:32:b4:66:a6:
49:03:04:03:66:e0:5d:94:9c:02:5f:c9:44:45:65:88:f4:53:
e7:0c:1d:0d:cf:00:fd:2c:b7:5f:0a:29:1c:73:30:c2:1e:cd:
e0:81:d0:52:54:0f:5c:3e:ac:9a:dd:c8:ed:f7:5a:51:d7:d0:
14:dc:9c:b5:15:ce:ce:02:22:b1:cf:25:2b:1f:d1:f4:fb:7e:
47:c1:f5:c3:eb:78:ec:35:8c:bd:f3:c8:a3:0e:54:c7:82:23:
2c:85:37:f3:b1:1c:35:97:0c:ec:4e:73:9c:36:fd:e2:f4:cf:
18:46:46:8d:b1:27:f0:cb:f5:7c:98:01:25:45:ac:06:69:00:
29:75:0a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:09 2025 by rpki-client