Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
File: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft (raw, json)
Hash identifier: CcUfWXT37c7aiLqmpOzjuMJsSWHD4RdPulE2gYazKXc=
Subject key identifier: EF:4F:35:01:5A:F5:93:9B:1C:A5:0F:15:F2:C6:A4:B2:3C:0A:11:E9
Authority key identifier: E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
Certificate issuer: /CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Certificate serial: 0194BC3C8F8D65D8AC7CF56C5D0FECD15558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
Manifest number: 0EED
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: 3BfIScw6HImdI4whE_vk-buQO8s.roa (hash: G0gYam1RQRQrZL9flb7DmAGTR2cR1ZnF922oRZ/xNlg=)
2: 4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl (hash: Y5+Rg57YybyMtj2gDVeahAAXewZo5vHhFQnTSWX/aRw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8f:8d:65:d8:ac:7c:f5:6c:5d:0f:ec:d1:55:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a9fe3c8a69d50935a1f749666e08dc754594dd
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=ef4f35015af5939b1ca50f15f2c6a4b23c0a11e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e9:59:8b:46:5e:09:a7:3c:32:cf:b1:02:cd:
1f:cd:dd:ae:d5:c2:32:c3:1c:b0:1e:45:1f:30:1c:
99:9f:3c:46:27:93:c6:0c:b0:76:b3:5a:ef:95:c0:
77:40:9d:ef:24:dc:be:1e:8f:36:c3:1e:51:77:cf:
ed:17:2a:ef:ad:ae:3d:57:4d:88:1c:06:a0:5f:7c:
9e:85:4c:a7:2c:75:83:d2:3e:7f:53:b7:39:6b:ee:
41:9b:84:4e:33:a5:7e:04:78:b8:1e:25:96:eb:5b:
c2:3e:bf:84:23:1f:c9:92:d6:9d:2b:02:4b:4e:c3:
60:d3:a8:70:e5:40:88:91:0a:23:f5:73:d5:51:62:
eb:9b:d0:93:5a:7a:ff:8a:f1:01:25:e4:99:02:f0:
9e:00:c5:47:f0:ca:f2:60:8a:45:0a:d4:46:2f:5e:
ea:b3:f0:53:1d:ab:2d:13:1c:4e:43:43:dd:d7:95:
55:a8:0d:63:b2:31:c1:e3:9a:f5:af:99:d1:41:94:
28:8c:0d:d1:01:46:cd:bb:ee:18:5e:9d:32:1f:64:
df:c6:b3:86:b1:e0:90:cb:82:f2:1e:67:27:74:d0:
56:56:0a:1d:6a:9a:9f:34:13:c3:8e:e0:66:42:58:
67:79:e2:a8:3c:d5:69:05:8f:de:4c:61:a3:c0:0b:
aa:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4F:35:01:5A:F5:93:9B:1C:A5:0F:15:F2:C6:A4:B2:3C:0A:11:E9
X509v3 Authority Key Identifier:
keyid:E1:A9:FE:3C:8A:69:D5:09:35:A1:F7:49:66:6E:08:DC:75:45:94:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4an-PIpp1Qk1ofdJZm4I3HVFlN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/0e6f4a-fd57-411b-a94b-6b6fdb54ba31/1/4an-PIpp1Qk1ofdJZm4I3HVFlN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:f7:01:68:0d:e2:41:49:6b:a5:98:33:d3:ed:18:ca:65:b9:
04:68:4f:41:57:7b:ff:a0:1c:5a:6e:57:1b:5b:31:a7:14:62:
4c:e4:22:71:33:d9:72:cc:85:ba:00:55:9c:4e:9d:c9:d3:8a:
f9:0b:a0:86:3d:74:dc:65:0c:6e:71:4b:c9:0d:41:3d:70:24:
b2:51:90:23:0f:e7:c9:2e:ee:8c:e1:3c:2f:96:e8:e2:42:b3:
55:42:b2:42:6c:57:17:a9:0d:b7:5c:5e:ff:ba:c8:e1:60:6f:
75:9c:1b:4c:2e:c7:bd:f7:85:b5:e8:58:8d:6f:95:e5:e9:52:
4d:49:5f:43:42:01:38:34:20:2f:83:dc:41:68:2e:e6:d9:61:
43:16:90:dc:bd:91:ed:40:73:6e:27:15:c9:9a:6c:cf:42:74:
62:be:52:04:5a:b0:53:bd:cb:03:70:ca:5d:b4:f3:20:f4:15:
1e:38:b2:31:a7:d5:fb:bf:65:b0:65:c4:c8:2d:7a:f3:6c:7c:
f5:ba:ed:e0:fb:05:9b:c4:74:5f:bb:c2:e9:0b:f2:76:5b:62:
d3:96:47:da:e0:5d:dd:e7:db:1a:ae:e4:06:90:20:12:c3:64:
26:b6:a4:3e:e8:5a:e1:02:f6:cd:3c:46:aa:0a:e6:ce:6c:a7:
73:f6:95:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:57:31 2025 by rpki-client