Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
File: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft (raw, json)
Hash identifier: 7XNf2M1KMlUGwT7rNCzj3Ixx7kX7bL0rT32DbNwitlk=
Subject key identifier: 59:4A:E6:10:07:79:6A:1B:5E:55:55:E7:57:90:B5:CA:69:68:4C:A8
Authority key identifier: E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
Certificate issuer: /CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Certificate serial: 0194BC3C5246818515DB6F6E5D56282D3027
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
Manifest number: 1062
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: 4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl (hash: vT+oW09L5ODDMBg7C2q92cAgwgJ+X4wpacqsWJvE7RI=)
2: mOT0OYFh_GTToGk2uZIA05IaKkw.roa (hash: GG4lCtM4E3X4xtxRGjZF0g1O2sssvUKDA/6mYRaIOI0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:52:46:81:85:15:db:6f:6e:5d:56:28:2d:30:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bd9276a6f78dac1002c3783a18d45ec14b5d43
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=594ae61007796a1b5e5555e75790b5ca69684ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:7a:62:98:29:3c:ba:05:0d:85:59:28:aa:
16:77:ea:d2:ab:48:9b:4d:30:69:19:b2:8f:d8:b6:
fc:c2:14:a9:a8:d3:bc:d4:b4:ca:28:2e:cd:57:cc:
36:72:f8:e1:c5:4d:72:0c:66:6e:03:43:9c:c5:91:
ae:b7:a0:93:aa:03:bd:48:21:93:93:09:02:2d:79:
9d:b5:84:38:2b:5f:c6:f8:1c:d8:6e:ee:e3:1d:c5:
a0:27:98:92:1a:48:62:63:41:4c:8f:58:7d:ff:03:
0a:4e:76:e4:1a:fe:7b:99:36:b6:ba:72:62:66:83:
89:c8:82:5f:49:18:b0:d8:58:67:fc:04:bf:ad:b2:
56:1b:86:44:4c:28:8d:6c:35:df:b4:7c:d9:d4:59:
b3:5b:03:3e:a4:83:55:f0:43:35:c3:e1:5e:22:13:
33:c2:11:2f:ce:aa:41:2c:83:d8:81:d8:bf:b0:03:
5e:d1:c7:43:ef:36:ff:f0:80:fc:05:99:52:45:17:
cd:f4:71:85:58:96:21:a6:60:3f:a2:c3:49:82:ca:
a6:29:ad:93:b4:77:82:ec:94:f8:fb:4e:08:55:ce:
6e:a9:92:e0:fb:64:79:b4:39:df:02:cf:d3:71:b2:
ec:0e:e4:b1:37:55:94:9b:23:ed:a1:6d:9b:32:75:
5d:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4A:E6:10:07:79:6A:1B:5E:55:55:E7:57:90:B5:CA:69:68:4C:A8
X509v3 Authority Key Identifier:
keyid:E2:BD:92:76:A6:F7:8D:AC:10:02:C3:78:3A:18:D4:5E:C1:4B:5D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r2Sdqb3jawQAsN4OhjUXsFLXUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/a5881a-98e8-4e45-bcb8-71eecf898d42/1/4r2Sdqb3jawQAsN4OhjUXsFLXUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:96:f3:66:b1:55:02:85:cc:e4:8d:e1:2c:e6:c0:27:df:5c:
21:89:e5:94:96:e9:30:e2:2c:8f:0d:51:ad:9f:72:05:fb:ea:
45:39:b4:2a:22:41:1e:ba:02:65:6b:40:2f:ec:3c:5b:c4:de:
51:6b:0d:b0:78:10:59:a7:3a:6b:c1:2a:dc:35:58:0f:1e:7f:
9c:aa:4f:2f:39:36:3a:b0:a6:07:c2:53:c8:ec:db:ef:f4:e8:
3c:93:ad:5d:fc:de:96:ce:76:c8:d8:61:a9:4b:3d:f7:b7:6d:
c8:45:ce:19:28:96:bd:02:1e:ef:0b:c3:11:42:0d:50:db:fe:
98:f9:8b:0a:90:ee:66:da:cc:c1:3d:b5:f3:73:ba:16:bc:51:
40:81:30:70:b6:53:77:0f:c6:a3:21:f6:46:bc:56:08:cb:8c:
b6:e9:1b:eb:8a:d7:a9:d0:91:59:d6:71:72:91:08:df:bd:2f:
61:45:41:87:a4:39:b7:46:fc:a5:36:e2:6e:4b:37:6d:e3:96:
e6:98:ac:5f:7a:c5:2d:88:b8:73:5a:96:6a:64:16:40:8d:e5:
b7:81:3c:3b:76:45:eb:d5:98:7a:6f:3f:d9:5e:82:91:e4:7f:
b4:e5:8e:0e:ec:1e:8e:ee:95:53:de:89:58:98:82:18:aa:9e:
3c:21:0c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:52:02 2025 by rpki-client