Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
File: 4fP23EYQ9sm7qkUyERc45JO2rfA.mft (raw, json)
Hash identifier: wZJR+8kbmirx+2h39K21R3Uk0acdM+d7OO8YZs54Uy0=
Subject key identifier: BB:C1:7B:5D:D8:DE:8A:96:C6:8D:67:BF:6D:5A:07:50:69:40:3B:7F
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial: 0194BBCDC29DD1BA9680F676B7B91B1C8419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
Manifest number: 022C
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: 0jdBY_E5YLyLUu_FzsB8buFy_Wg.roa (hash: m69bij1M0dFLciXpzKZZy7Clt1a/35aqA5PNXsZojag=)
2: 4fP23EYQ9sm7qkUyERc45JO2rfA.crl (hash: sseemBWOCyUpASHueR4295Bdw2BpSwuWF2vZwWEBC3E=)
3: xDz5khWz84DZoygENZz9smDY9DE.roa (hash: ImBhN/9eW34k/DBkodgK0kDXEWCtP6C29MLbYuo8Lq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c2:9d:d1:ba:96:80:f6:76:b7:b9:1b:1c:84:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=bbc17b5dd8de8a96c68d67bf6d5a075069403b7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:cd:a8:26:28:1f:2f:b9:f5:04:2f:5c:0e:1f:
2f:60:f1:08:1c:2d:87:cf:9c:74:ff:56:31:25:5d:
46:f8:93:57:73:d3:5f:f4:a7:87:da:b8:e6:f6:26:
b5:d3:84:d3:b6:88:e3:28:e3:a4:5b:23:92:0f:6e:
e3:20:d7:b9:d8:2a:dd:2d:f2:bb:d5:ef:b6:73:dd:
42:6e:a0:bc:59:85:42:b8:0b:d1:54:e5:fe:28:c8:
24:8c:a5:da:5a:33:80:62:d2:a5:1a:d6:b8:b5:03:
e6:d1:af:6f:48:46:17:51:0a:75:06:34:45:a6:84:
4d:d1:44:56:93:9d:84:b7:02:d1:08:f3:69:46:61:
32:fe:4a:b5:ce:4b:c5:5f:a6:9c:6c:fd:d3:0f:34:
2c:e2:83:be:3e:ec:b1:cb:a2:cb:5e:f0:29:6d:87:
3f:6a:a5:a0:7d:1d:3f:fd:2a:25:e8:5c:2f:64:f8:
29:62:5b:28:60:e8:8f:b6:c9:f6:b1:40:3c:a5:ae:
45:d7:b8:6d:af:e0:1f:a9:a4:b0:dd:8f:51:26:7f:
9e:c2:bc:93:d0:e0:93:d7:40:95:2c:80:6f:46:05:
fc:28:c2:e6:de:c4:d7:b0:8e:eb:95:49:ef:85:96:
1d:64:f1:a3:1f:d8:55:15:39:b7:67:0a:d6:28:7e:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C1:7B:5D:D8:DE:8A:96:C6:8D:67:BF:6D:5A:07:50:69:40:3B:7F
X509v3 Authority Key Identifier:
keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:3d:54:d7:c7:dd:0c:f6:18:e0:3b:41:23:33:8d:78:99:5a:
46:51:bf:d5:a1:2d:18:a2:bc:d6:b0:02:bd:60:78:e0:43:ce:
40:d5:e4:61:53:56:2e:4f:42:de:64:1b:eb:6f:b0:21:f9:5a:
6c:21:e0:92:d4:78:bb:97:cc:c4:2c:89:a1:b4:ad:06:c2:b0:
44:a0:ca:52:ba:34:77:46:61:b0:2b:45:27:9d:8f:01:17:4d:
8c:60:0a:8c:25:52:bf:d6:2c:23:72:7a:51:6f:e9:70:96:49:
25:e7:71:40:af:a5:37:dd:85:52:a9:b5:dd:e6:12:8c:85:bc:
7b:60:69:ce:47:bb:ee:29:1b:5d:03:93:6c:16:7e:84:6c:85:
6c:70:e4:f1:f7:c6:ce:c0:7b:e8:fe:35:f6:02:96:00:01:ca:
a5:e6:d2:b0:aa:90:18:b9:84:4a:74:c2:2a:57:72:e7:09:e0:
85:32:fb:5d:07:94:d8:91:35:70:37:68:ce:53:d7:cf:ce:33:
84:f0:08:0f:f9:03:3b:e1:e3:30:7d:d7:b8:f5:c3:c7:f6:25:
8c:43:5f:e9:59:c1:3d:9e:b8:38:28:58:5a:0a:9a:67:6b:a3:
0f:8e:ad:f6:b8:c2:8a:cd:b6:cc:ef:e2:fd:e9:35:90:6d:50:
7c:9d:37:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:49 2025 by rpki-client