Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
File: 4EHIW0dOi2wAiR2VQST_DIEgDYw.mft (raw, json)
Hash identifier: AkARNR/ZykivqOCPgQklr5A3tlqGZ4+zs0DJTIRUieI=
Subject key identifier: BD:81:7A:86:2A:5C:F6:9F:85:7C:EB:1B:45:29:1A:85:A6:7E:5B:A3
Authority key identifier: E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
Certificate issuer: /CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Certificate serial: 0194BD4E93869114B046A7DCF0235E3EB658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
Manifest number: 0784
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: 4EHIW0dOi2wAiR2VQST_DIEgDYw.crl (hash: DSiwdzyBc7Dc7GjFwSCdAdMjkxGLQUDY+aQGd4tz9t0=)
2: N3RhFZbfRfFlakkE1oKkv4idahs.roa (hash: S19WQvJ0cwuBe3l5agvGw5hBi9jlwv6QitA6NIAiWl4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:93:86:91:14:b0:46:a7:dc:f0:23:5e:3e:b6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e041c85b474e8b6c00891d954124ff0c81200d8c
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=bd817a862a5cf69f857ceb1b45291a85a67e5ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a8:1c:2c:7c:8e:64:80:80:9c:25:0d:d9:34:
43:39:13:60:a4:aa:b6:8e:28:ca:48:40:4e:e9:af:
16:98:96:4c:d8:f0:3b:e1:be:8f:13:c2:44:65:6c:
3b:c3:22:fa:c8:f9:82:c1:57:03:90:48:d0:d3:fe:
bc:38:a8:94:97:33:4c:51:f2:7e:c5:e4:30:76:b9:
c6:a0:89:9c:5e:d9:fb:83:7a:e6:95:72:dc:95:26:
43:b5:1e:83:5a:a9:48:a1:4d:02:08:df:a6:0b:d5:
11:e2:73:43:37:a5:b9:13:78:b3:51:66:95:09:2f:
ad:cb:23:06:77:bf:bc:9e:63:0a:2d:58:f9:06:bb:
41:ed:31:37:96:28:ad:4b:bf:f8:11:92:07:01:e1:
9a:c2:13:2b:25:b5:3e:11:fb:2c:6a:61:8f:75:e3:
09:9c:90:7d:85:5f:df:fa:35:cc:ef:38:e6:d6:0c:
52:2d:67:f4:e9:73:96:89:3d:d7:af:8b:e9:27:13:
34:97:fe:43:92:55:1e:c1:7b:87:99:8d:d1:94:07:
09:87:85:ef:2b:3e:e1:76:7c:7f:14:69:63:2a:12:
6d:df:0b:bd:8f:a8:ec:78:9e:58:5d:71:44:6e:82:
65:b3:60:42:de:25:cd:73:eb:81:ad:64:51:a9:74:
56:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:81:7A:86:2A:5C:F6:9F:85:7C:EB:1B:45:29:1A:85:A6:7E:5B:A3
X509v3 Authority Key Identifier:
keyid:E0:41:C8:5B:47:4E:8B:6C:00:89:1D:95:41:24:FF:0C:81:20:0D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4EHIW0dOi2wAiR2VQST_DIEgDYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/549e4d-8dee-459b-9283-46bb3fa28b00/1/4EHIW0dOi2wAiR2VQST_DIEgDYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:35:7c:c5:77:97:ba:bd:21:a0:07:24:a6:36:2e:7a:96:da:
38:ed:d0:58:e6:b1:12:2b:2b:f4:be:ca:f6:57:45:5c:3d:cb:
a5:5c:b5:d8:65:7c:a6:d2:ef:bc:04:26:a4:98:3b:65:da:21:
6e:55:3e:00:64:00:64:6e:4b:32:7d:cb:be:5c:49:b2:b4:f7:
ca:2c:9a:fe:5b:d1:07:2f:7c:a1:00:1c:04:91:a2:01:11:36:
4e:7a:a8:30:6a:09:05:bc:31:6a:08:27:53:77:71:37:4e:35:
a0:ec:0d:b3:34:8e:2d:50:d7:92:21:13:b1:7b:5c:1f:36:97:
b6:1c:5b:c6:ab:52:da:d8:72:ff:9b:30:4d:fe:9c:cd:28:31:
4a:29:9a:c3:24:6c:16:7d:ee:ca:39:2b:2f:af:db:84:16:96:
38:b3:cb:02:20:67:7a:de:eb:16:b0:26:0f:55:73:27:72:b2:
e9:45:a5:32:c3:fd:ce:fa:8e:39:9e:fd:ef:bb:13:75:35:eb:
b5:2a:11:34:02:1e:10:cc:9c:98:cd:12:03:1c:e2:84:07:fb:
34:58:c7:92:b4:a6:09:4c:d6:e8:90:52:8e:c5:14:79:c3:20:
7c:8b:4f:9a:94:8a:67:9d:9b:6c:c7:b2:2a:66:97:40:c7:d6:
be:52:41:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:27:28 2025 by rpki-client