Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
File: 4oNEKXdeZVXldCSSKGJUsdqfGQM.mft (raw, json)
Hash identifier: 3RwF+jQmoe0+HqzS97Zhzo4ma/E3UaZO+9DznZ0jNC8=
Subject key identifier: A6:8A:3F:BC:F9:48:4E:24:99:E2:CB:97:63:57:A3:3D:34:FF:5F:C1
Authority key identifier: E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
Certificate issuer: /CN=e2834429775e6555e5742492286254b1da9f1903
Certificate serial: 0194BD175A175016E8FBCBE3CD714BA56C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
Manifest number: 0CE5
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: 4oNEKXdeZVXldCSSKGJUsdqfGQM.crl (hash: u5WwFIPIWAFKzCLn4Gyt8xXsxFejjqfzuJ5M8RvVGqM=)
2: ZTmydTpXIXh_aFM6lIMP1nPGi4M.roa (hash: R6dO91YPQTwtwZipE8GfozYF7WvWuk+GMp9DghrSYmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:5a:17:50:16:e8:fb:cb:e3:cd:71:4b:a5:6c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2834429775e6555e5742492286254b1da9f1903
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=a68a3fbcf9484e2499e2cb976357a33d34ff5fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:3b:70:36:d0:39:6e:3a:90:09:8d:ad:25:9d:
a5:87:b9:95:1b:77:91:0c:be:8c:0a:48:08:a1:6c:
4e:da:a8:07:59:48:2d:c3:d4:b1:cc:1b:38:27:b8:
32:2d:84:d3:a2:b9:a6:78:0e:98:83:cf:c6:35:4f:
c2:42:33:48:fe:fb:7e:c7:cc:7b:c5:bd:6c:56:6f:
b2:59:be:d4:57:13:48:42:41:78:f7:2f:31:f0:2c:
22:64:5e:ac:75:96:be:f8:79:47:df:bb:1e:21:53:
8c:33:35:0d:8b:cc:fa:d6:5b:bc:59:66:79:c8:c0:
41:b1:72:ee:ac:7b:e7:7b:ad:1f:e7:26:8b:38:24:
47:e8:d3:cc:53:11:d5:d3:de:b3:f1:2c:9d:d4:4a:
06:90:ae:5f:86:bc:74:de:f1:38:72:ee:c2:15:17:
72:75:88:35:94:5b:f9:55:b1:8f:b5:83:6c:c2:fb:
35:16:48:11:32:e8:d1:47:39:d7:4b:65:f1:a0:de:
0a:5e:6b:81:ba:09:e0:66:25:29:84:d0:53:32:c0:
04:ec:cc:cd:e3:dc:ef:5c:ac:49:5f:3f:68:40:52:
21:64:f4:50:84:52:69:2e:b2:27:af:08:db:bb:77:
6f:a0:d8:c3:14:df:46:83:0c:57:a2:3a:4a:93:7f:
27:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:8A:3F:BC:F9:48:4E:24:99:E2:CB:97:63:57:A3:3D:34:FF:5F:C1
X509v3 Authority Key Identifier:
keyid:E2:83:44:29:77:5E:65:55:E5:74:24:92:28:62:54:B1:DA:9F:19:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oNEKXdeZVXldCSSKGJUsdqfGQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/b6468d-10ed-4d48-803c-ea97665c13df/1/4oNEKXdeZVXldCSSKGJUsdqfGQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:ec:e8:0f:fd:31:13:75:83:55:23:a5:07:93:49:26:df:c9:
e9:b6:5c:01:66:07:e3:15:85:dd:10:91:08:d4:ad:bb:d5:66:
97:05:c4:80:b6:8c:31:29:e3:d6:64:25:4f:57:69:cd:52:fc:
0b:fb:a7:f3:c6:0f:68:8b:56:b9:2e:88:1e:a8:82:b1:5b:21:
68:4c:bc:21:48:13:47:c2:26:c2:10:d5:af:00:83:dd:8c:0b:
7b:ae:24:a8:cc:14:0b:18:59:80:fb:15:33:91:bc:c2:e4:57:
a9:4a:ab:92:a9:c4:70:4b:95:68:8f:8f:77:9a:32:6d:8a:87:
b3:94:0c:8f:cd:41:59:8f:03:7d:d2:94:4e:73:61:1f:e2:2d:
d9:d0:72:71:62:5e:1c:ad:01:53:80:19:05:48:be:e1:24:b0:
96:37:2d:06:e5:84:f6:a5:7c:6b:61:a5:67:e1:9b:d5:95:e6:
e3:27:46:83:41:78:e7:78:15:35:45:a8:4f:97:eb:b4:ad:b8:
3d:11:ed:d7:56:e2:4c:4c:0c:56:ba:41:8e:9e:25:5e:e1:f8:
36:ef:6c:43:64:86:a1:01:f3:5d:06:e9:f8:43:6d:27:ae:c7:
07:e3:05:02:11:67:12:94:43:7a:6f:96:38:3e:31:6f:f9:61:
5f:24:14:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:32 2025 by rpki-client