Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
File: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft (raw, json)
Hash identifier: J/zl+qZT8vRGxwB8aFp+huEMBVJJ2WHfLCFQMF7rj6w=
Subject key identifier: D4:B1:BB:92:37:2A:EF:56:BB:82:61:C2:EF:61:78:F0:77:E5:E2:61
Authority key identifier: E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
Certificate issuer: /CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Certificate serial: 0194BC05135348DE09255E5AFDF3BFD59AAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: 4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl (hash: KuPHCHNa3aC1CXDY9DfIgJXb1+kV8HuRmo1PWUN3Wzk=)
2: MCauzdzhAV-eC2FQCIe1KmEfC3E.roa (hash: qyelRqdJ6kSMtNhACvHl/U5TJ8kn8s3czDwjuibAJCM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:13:53:48:de:09:25:5e:5a:fd:f3:bf:d5:9a:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e338cd6811dce2ed4f426143c3fc8457b1b434bb
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=d4b1bb92372aef56bb8261c2ef6178f077e5e261
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5a:08:42:7c:27:b0:90:b5:a7:39:5e:5a:2b:
bc:06:32:27:37:bd:d2:2c:a5:69:45:4f:f9:3e:c2:
d7:2c:65:e4:25:39:2c:9a:29:af:30:c4:cd:c0:46:
2d:7c:f8:f5:07:b5:f3:ad:21:47:5d:b9:f1:18:6d:
b7:6b:b8:25:15:89:9d:92:50:76:1b:5e:2b:ca:20:
4e:f2:f3:29:f8:28:05:71:c3:86:6a:c4:6a:14:53:
c3:ad:94:1f:64:da:cd:b4:df:84:b2:ef:a1:f9:b6:
de:98:c7:0c:74:4d:3c:32:a4:d5:34:e9:26:c6:4d:
7f:60:fb:62:f5:86:3e:02:b2:83:ce:63:b6:f0:88:
cb:aa:b0:55:25:2f:ac:65:03:eb:51:9e:13:29:60:
29:15:2d:0a:aa:8e:a0:47:d7:e4:ff:4a:02:a9:df:
71:ef:0c:21:fb:f6:72:a1:72:fc:6f:79:78:4f:81:
4e:07:53:56:a3:88:5e:22:35:45:28:75:c4:99:fa:
3f:34:80:a9:11:e5:8e:59:4d:86:ec:37:41:a1:65:
df:4b:c6:b4:20:c1:e1:b6:ce:fa:0f:29:a2:0b:25:
f2:cd:6f:f7:3e:5e:4c:dc:98:a0:c1:98:f7:10:6a:
6b:f8:64:0e:67:6d:74:4a:22:a7:8e:b3:3c:6b:34:
96:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:B1:BB:92:37:2A:EF:56:BB:82:61:C2:EF:61:78:F0:77:E5:E2:61
X509v3 Authority Key Identifier:
keyid:E3:38:CD:68:11:DC:E2:ED:4F:42:61:43:C3:FC:84:57:B1:B4:34:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zjNaBHc4u1PQmFDw_yEV7G0NLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5ea4b4-9ed7-444e-86bf-2eb0af3ac781/1/4zjNaBHc4u1PQmFDw_yEV7G0NLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:5a:26:82:56:f5:11:57:3c:80:86:4a:0f:8a:87:d2:6d:0f:
84:b5:ff:73:36:81:7e:63:20:9b:82:45:cc:18:ee:2f:ba:e9:
83:d0:aa:2a:16:f7:f4:12:86:60:7b:f0:74:9a:2f:7f:5c:07:
63:98:36:20:3e:43:3d:12:b5:e0:e0:c8:f5:d5:a7:9d:17:ad:
ab:69:3b:3c:6b:36:e2:03:2d:49:61:22:17:b2:e2:26:3e:d1:
c5:8d:2b:dd:f5:9e:be:55:2f:f8:c8:b2:8a:eb:16:dd:15:8f:
6d:81:67:1f:49:a3:8f:df:86:69:4d:ba:37:62:81:66:60:5a:
ad:af:5e:bc:cf:eb:e1:9c:32:8f:a1:7d:00:ea:59:83:ee:67:
03:94:fe:8e:7b:80:4b:34:b3:17:f2:f7:b6:d7:69:4c:15:e9:
87:3d:6f:06:78:c6:58:24:5d:bb:fc:ca:67:b8:bd:0b:b1:a9:
a8:21:fb:90:1d:84:f9:ba:85:75:12:a7:34:4d:ec:b0:90:24:
44:d9:2a:2d:4e:cc:c9:c5:6d:b7:d3:e6:d6:18:54:b5:e3:80:
53:67:c6:1b:89:aa:11:db:5c:6b:ff:44:fe:36:7b:3e:43:2d:
c1:fd:84:e0:20:72:94:82:f5:91:7c:e0:c1:45:0a:1c:b8:7c:
da:2d:0d:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:32 2025 by rpki-client