Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.mft (raw, json)
Hash identifier: n5zZDw2cJEFpcGVgUvkQE4EA+DRhywwUfdjQps0m960=
Subject key identifier: C7:0E:4E:0C:45:3F:F5:99:BD:05:46:7C:BC:7B:80:12:C4:9C:BA:4B
Authority key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Certificate issuer: /CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Certificate serial: 0194BD4E53162E7764A04046E4EDF53E5AFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
Manifest number: 113B
Signing time: Fri 31 Jan 2025 17:00:14 +0000
Manifest this update: Fri 31 Jan 2025 17:00:14 +0000
Manifest next update: Sat 01 Feb 2025 17:00:14 +0000
Files and hashes: 1: 1-HjAvExmkGaxksSqn85_Dy6VvJM.roa (hash: 8D5kTAs24JEFoR1NyKeFUo+R/Y6CsZUzK26/NpwtHaw=)
2: 4fR8EaOjyuBqGShgqWxQU-wEtdw.crl (hash: dADSitWCR8yKBTCJLkpQRZbOncLe98i0TW9TF3gBd70=)
3: UBam_LF0XAef-2xohQdZlRl7HBg.roa (hash: 7WO0S2f70pIralvylysZjQGv/GwrHdv9TmJ840KoDXo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:53:16:2e:77:64:a0:40:46:e4:ed:f5:3e:5a:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Validity
Not Before: Jan 31 17:00:14 2025 GMT
Not After : Feb 1 17:00:14 2025 GMT
Subject: CN=c70e4e0c453ff599bd05467cbc7b8012c49cba4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9a:da:a6:ea:7f:b4:2e:98:6d:a4:31:5b:f7:
a9:6f:53:a7:5f:90:e5:36:77:3a:57:87:73:42:ff:
81:c7:89:26:f3:89:e8:4f:3f:b0:27:61:72:01:a0:
53:e3:a3:c6:ad:56:8d:18:98:7a:4b:ca:d7:f0:db:
51:70:1c:bf:22:6b:a6:63:4d:02:f1:fe:f3:9d:05:
9c:30:51:d3:e2:2a:dc:ca:5a:5a:6a:5b:41:01:96:
e1:d5:dd:1a:9a:90:b2:8c:97:cf:37:40:f6:73:cf:
30:7e:c7:f6:3c:28:53:3e:6d:f0:15:94:c3:d0:b5:
28:97:5d:8c:2e:0f:eb:45:fd:ad:6c:04:49:6c:fe:
3d:58:65:16:9a:84:b8:1e:08:b5:27:c3:ec:35:0b:
32:d1:ca:7a:1e:d1:ae:07:fa:fa:5d:b4:0e:54:d5:
32:00:ba:a2:8b:f8:95:4c:6f:54:01:d4:ec:aa:71:
af:bc:1b:70:94:b6:d4:c1:74:9b:1b:77:f3:6f:f8:
e7:80:77:3a:5b:2c:bb:8a:be:a9:b6:60:73:5a:c2:
e0:f2:55:61:f2:21:2d:82:40:41:01:e3:8f:3f:ed:
bf:25:3f:61:51:6c:5d:d0:69:7b:6f:c0:c4:fd:ef:
a5:b0:5e:48:99:a0:f0:0c:c6:40:ad:0c:31:fc:09:
bb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:0E:4E:0C:45:3F:F5:99:BD:05:46:7C:BC:7B:80:12:C4:9C:BA:4B
X509v3 Authority Key Identifier:
keyid:E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:c4:7f:f6:66:e0:18:48:d9:3e:32:7b:1a:1b:1d:4d:3c:f0:
af:b2:79:cc:47:f9:d2:0a:79:60:c6:10:5b:f5:5e:81:bf:c8:
85:aa:cd:51:ac:f0:9b:c4:80:b2:bd:90:70:f6:b0:37:5d:18:
37:46:bb:9f:6d:6a:75:43:29:5f:6b:d9:2d:13:20:69:28:12:
d4:bd:aa:1f:14:c8:3a:79:65:cb:5a:1e:9e:1c:14:bd:29:96:
a3:4c:25:86:ce:bb:a9:fe:d5:e2:ce:c8:a0:8f:eb:87:29:69:
1d:9a:cd:28:c2:fe:a2:fc:df:61:c8:e5:17:7c:3d:8b:b4:88:
f3:b2:a1:3e:19:c5:c4:11:6a:ed:74:21:44:b5:6f:89:b3:2b:
a8:dd:2f:c1:12:dc:11:35:5c:f7:00:e9:ce:c8:10:95:10:1c:
55:06:c5:0f:61:be:71:da:03:da:0c:88:fd:52:5c:65:e6:50:
90:fa:72:f8:a7:fb:29:fa:aa:e2:82:2e:e5:40:ed:7a:c2:60:
2b:fb:61:8a:dd:7c:77:77:a0:24:e2:d8:29:e9:bd:3e:d4:9b:
6d:ea:62:ac:9e:1d:9a:af:3b:cf:93:75:b3:9e:af:ed:ff:fc:
42:86:28:dc:f6:55:2d:62:ac:81:b7:0d:dd:e2:da:19:1a:87:
d9:2f:e4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:56:02 2025 by rpki-client