Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
File: 4rWwjcQz-On3dyfLUfa6JL3V85o.mft (raw, json)
Hash identifier: 9y1Imv8QFv51Gp9npLFqwWGtD1GHxoDf9mP4iWR8oFw=
Subject key identifier: 39:02:49:FB:8D:43:3B:C2:02:9D:B9:DD:0F:FB:21:F4:26:C7:70:E1
Authority key identifier: E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
Certificate issuer: /CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Certificate serial: 0194BD85346002D893B689325D28C6D57E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
Manifest number: 0445
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: 4rWwjcQz-On3dyfLUfa6JL3V85o.crl (hash: ahMSXa1hCehqNuoIuXGe7N41FWUEgZcae9cz2Zl1Ppo=)
2: 6QTOObZCJD1chm-ODo_uH-86-lI.roa (hash: PPt6OC48BVzBGzWbhNau2lL/cgNIrrJFP+rxLWVwYyA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:34:60:02:d8:93:b6:89:32:5d:28:c6:d5:7e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b5b08dc433f8e9f77727cb51f6ba24bdd5f39a
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=390249fb8d433bc2029db9dd0ffb21f426c770e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:57:4d:cc:c4:f1:98:f0:85:bc:8d:95:03:84:
bf:f8:4d:c7:3c:d1:11:f9:81:2e:7b:7c:ee:54:fd:
3d:15:bc:be:95:55:b9:fd:3b:b5:26:c4:20:2f:d5:
3a:55:80:7a:2b:c3:6b:b3:fb:de:d6:ae:49:d4:35:
d3:5a:db:e6:86:17:ad:af:dd:43:f2:43:aa:a2:19:
bf:fd:62:ac:18:6f:aa:71:d1:b4:3b:41:3a:c2:bc:
a2:84:31:4b:13:26:9e:d3:97:61:ee:d1:e8:ad:98:
71:62:58:38:15:e6:84:d2:d4:97:c6:39:c5:fd:91:
05:b4:82:d6:0c:40:a4:1b:2b:64:d1:aa:97:a6:c2:
a3:a5:d5:f0:aa:e5:30:a5:a6:29:af:5c:48:4e:97:
b0:5b:28:38:da:dc:81:b6:c5:88:e4:47:fd:f0:77:
7e:9d:4a:91:c5:38:2f:67:64:a8:12:bf:96:c8:a9:
43:ad:cf:a8:01:97:32:a9:d3:23:97:89:50:da:02:
43:af:44:95:f2:c8:f3:e4:6d:43:2e:0b:5e:10:9f:
d4:ca:33:7a:95:a0:75:63:52:f0:53:a8:89:76:9f:
39:b5:b5:e2:8b:a0:64:5e:e2:bd:f8:77:75:72:8b:
e6:5f:f5:21:29:1c:3e:7f:43:de:a7:27:d0:70:04:
a4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:02:49:FB:8D:43:3B:C2:02:9D:B9:DD:0F:FB:21:F4:26:C7:70:E1
X509v3 Authority Key Identifier:
keyid:E2:B5:B0:8D:C4:33:F8:E9:F7:77:27:CB:51:F6:BA:24:BD:D5:F3:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rWwjcQz-On3dyfLUfa6JL3V85o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fae443-198b-432e-b419-3e6fbe379e83/1/4rWwjcQz-On3dyfLUfa6JL3V85o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:66:0b:20:98:06:f2:c1:c8:11:86:8e:45:2c:77:28:af:36:
b5:6f:b5:dc:ea:20:f3:db:ae:f3:70:5b:fd:15:a7:4f:d1:c3:
9d:60:8c:c9:1a:f7:c4:09:85:31:b5:22:b3:7d:2e:a3:12:a5:
2e:95:6e:b5:35:09:4b:5c:7e:07:1b:fc:54:03:ba:62:a1:ba:
e2:ab:ba:e8:ac:3c:95:e5:a6:68:7a:77:4e:4f:fc:f7:28:a6:
90:0e:b5:f4:d1:32:b4:9b:49:f9:70:00:0f:e4:c7:ab:b1:1b:
2c:0c:22:44:25:50:49:9d:ea:29:3d:d5:ac:9b:16:10:e6:75:
22:0e:6d:b6:da:41:3d:24:4d:cc:5c:cc:76:2b:8e:9b:55:78:
d0:25:f8:3d:ca:2c:68:ac:af:3a:1d:66:0d:3c:94:0f:6a:e4:
a2:64:2c:a5:61:a4:1b:3e:7f:e8:b8:0e:71:8f:13:74:17:3e:
b9:51:62:7a:24:51:f4:5e:26:18:17:d5:e5:ab:d4:17:56:bd:
9e:2b:10:03:3b:f8:0a:1e:07:c9:29:71:5e:8b:b7:cc:77:33:
83:b0:7f:fb:ac:75:e1:f3:46:1d:ce:05:02:1f:db:f7:77:e8:
72:01:c1:51:17:9c:ba:60:bd:9d:46:0e:4d:86:80:14:a0:15:
5c:e5:83:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:52 2025 by rpki-client