Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
File: 4jDeX9PCRVFzumlqmUQdliDYHTg.mft (raw, json)
Hash identifier: Xj8sCFyR91baHENnV4QvhQQ6of94my/0gJpzimk7yvY=
Subject key identifier: 8C:AD:BB:5A:D7:61:7F:6D:24:D6:50:07:52:14:09:E1:ED:E1:6F:1F
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 0194BC72E5DB5F5C2B4DAE9DC6851D59B5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
Manifest number: 0A42
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: 4jDeX9PCRVFzumlqmUQdliDYHTg.crl (hash: CSaNW/nTWAiTDHSZbnHreMqUQS7AfWUpLfQEV4Lg/u4=)
2: qADZbjUspL_WRqhq7wvNpX-fT-E.roa (hash: 8V+RbGGUYULjGMvZVkBND643qQkjbKJgabtjnmu0hrU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e5:db:5f:5c:2b:4d:ae:9d:c6:85:1d:59:b5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=8cadbb5ad7617f6d24d65007521409e1ede16f1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:48:94:9b:d6:a6:20:fd:db:14:88:46:00:
f0:fd:8b:04:1f:b5:5b:03:4c:0f:88:bd:84:83:58:
cf:7b:65:2f:72:d5:c2:a9:2c:4d:21:f0:f0:11:23:
22:2c:a7:43:5e:63:b5:38:78:c0:5c:e3:68:11:07:
ea:a0:fd:8c:c9:a7:96:d7:57:f4:e4:70:3d:6a:82:
b1:81:65:fe:fb:39:4f:75:b1:d8:02:69:25:55:df:
74:a9:18:fa:33:d9:ff:92:69:aa:14:8c:aa:17:30:
d1:d5:2b:56:b7:e2:30:a4:da:0a:93:ea:e1:de:ab:
8e:88:a0:d5:5a:94:5d:e4:32:c7:c3:36:5f:a5:05:
c5:58:62:dc:df:d6:39:50:ff:d1:58:97:27:8d:6d:
ac:3c:d5:6c:3e:6e:40:5d:74:55:a3:68:bb:52:04:
bb:ab:56:25:7f:f7:a2:f0:7d:60:7a:ad:da:8f:13:
de:33:1a:5c:9e:fd:47:23:a4:79:cf:c1:2a:0a:78:
da:f4:56:76:0a:57:25:ff:c8:5a:f3:9a:5d:5f:c3:
a1:76:01:bf:62:d1:a8:71:4d:59:d3:aa:9a:04:fc:
91:e4:40:12:8c:20:77:57:12:70:50:98:2c:cc:f2:
06:d7:a6:b3:70:e5:56:de:04:de:f0:ec:df:8d:c3:
89:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:AD:BB:5A:D7:61:7F:6D:24:D6:50:07:52:14:09:E1:ED:E1:6F:1F
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:21:d8:53:be:64:a9:79:c6:64:28:67:0f:f1:05:8c:b4:89:
76:7c:e4:90:42:ee:9f:1d:dc:88:23:42:00:b1:d3:f9:30:c9:
e3:55:20:b8:df:da:11:2f:7a:80:c0:69:d0:ca:a6:16:0c:4f:
2a:f9:7f:8e:c9:e4:ef:ea:c1:ef:5a:97:a1:01:6b:86:82:42:
55:70:fe:7a:c9:57:61:9f:01:12:e1:01:80:06:cc:06:17:ca:
26:37:52:03:67:8b:9b:04:f8:9e:51:de:7a:2f:ad:f6:df:a8:
c2:ef:a1:9d:3a:4d:af:61:3e:38:b5:ba:ad:a7:2b:0b:ed:a8:
18:40:b4:a8:3c:5b:20:0c:7c:80:8e:6b:b9:c7:dd:82:20:bf:
ed:84:d4:da:1f:a5:00:66:c7:da:51:79:e8:ee:c5:6f:1b:49:
47:c9:9c:84:56:86:30:79:65:e3:ea:03:16:5c:cf:43:db:d1:
68:93:bb:29:72:e8:64:54:b4:58:ad:cf:12:4d:1b:1c:c8:12:
72:35:8e:39:dd:b4:07:01:70:4f:d2:60:1f:98:47:4a:8f:88:
d4:49:16:14:c1:bd:85:76:18:c6:0e:33:25:ad:61:b4:ff:a4:
c2:0c:1e:c9:c7:38:94:ef:ca:6a:d7:f4:af:b3:e4:06:81:7c:
22:2c:53:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:14 2025 by rpki-client