Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
File: 4HDNq3OhLa82gGsOFgLI2vuQk7s.mft (raw, json)
Hash identifier: oP+JZJ1uwgrFW/iiY9rfc71sKpLp6DTx9IBV0tFtDxY=
Subject key identifier: C7:99:40:95:5C:D3:9E:70:59:E7:2A:68:6B:D2:9C:27:23:9A:3C:3F
Authority key identifier: E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
Certificate issuer: /CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
Certificate serial: 0194BBCE0D14F1E19A8A711F15E08759C20C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
Manifest number: 0974
Signing time: Fri 31 Jan 2025 10:00:30 +0000
Manifest this update: Fri 31 Jan 2025 10:00:30 +0000
Manifest next update: Sat 01 Feb 2025 10:00:30 +0000
Files and hashes: 1: 4HDNq3OhLa82gGsOFgLI2vuQk7s.crl (hash: gAUMvlJx9IysCqUwCh7XfMJrBRum+HrI2SaBrijEwR8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:0d:14:f1:e1:9a:8a:71:1f:15:e0:87:59:c2:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e070cdab73a12daf36806b0e1602c8dafb9093bb
Validity
Not Before: Jan 31 10:00:30 2025 GMT
Not After : Feb 1 10:00:30 2025 GMT
Subject: CN=c79940955cd39e7059e72a686bd29c27239a3c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:3a:11:32:47:b5:e5:af:7a:a3:45:b3:66:7f:
9c:ab:9c:c3:65:2c:b7:14:d1:d8:a7:8d:74:17:e5:
ad:a1:c7:1d:7a:a6:64:0b:0d:a1:db:16:b5:f3:73:
47:2f:99:2d:cd:32:6e:3f:f5:d9:3f:76:02:06:35:
f9:e6:f0:e8:4e:74:11:43:35:5b:7e:69:dc:88:60:
18:a2:fc:56:a1:e0:c1:da:56:ec:3a:ef:bb:83:8d:
6e:73:6f:09:ae:df:5c:37:7c:53:e0:00:a1:f3:22:
15:36:01:f8:b8:25:52:01:24:ad:1f:b4:c6:4c:fc:
90:8f:ee:15:84:f2:5a:e8:27:b6:d8:fc:ec:5a:7b:
bf:cb:91:ab:80:f3:1b:1f:4a:6c:e0:ff:42:4b:06:
f8:55:2a:b5:89:85:98:90:18:df:bf:e7:2b:2f:c3:
92:97:19:1b:fb:fb:7f:24:89:56:91:2f:b8:1a:f0:
c8:03:be:82:92:b6:9d:aa:c1:92:17:5d:0a:a9:81:
4e:62:16:fe:3d:e1:64:7b:11:54:65:bb:56:42:37:
46:00:65:8b:f6:5a:42:2d:76:4f:04:15:8e:d5:fa:
84:f9:39:8b:eb:6b:f7:5e:2d:f3:f6:a0:f4:fb:13:
90:ba:6e:72:22:1a:b1:ea:57:44:16:9c:75:e5:4f:
78:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:99:40:95:5C:D3:9E:70:59:E7:2A:68:6B:D2:9C:27:23:9A:3C:3F
X509v3 Authority Key Identifier:
keyid:E0:70:CD:AB:73:A1:2D:AF:36:80:6B:0E:16:02:C8:DA:FB:90:93:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HDNq3OhLa82gGsOFgLI2vuQk7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8e01ca-2ccf-4912-914b-9168826cd355/1/4HDNq3OhLa82gGsOFgLI2vuQk7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ec:03:f1:e1:96:85:c7:b8:02:2f:ac:da:50:bf:fb:28:4c:
37:b6:08:e9:45:f7:a8:d7:c8:3f:39:6f:50:d3:a2:14:2f:ea:
dd:91:73:ab:03:84:2f:7a:80:54:1a:d1:db:63:13:bd:26:e8:
e7:54:95:33:5c:4c:6d:dc:f4:d1:f2:4c:9f:be:06:1a:47:5e:
29:92:90:52:26:fb:54:ba:00:a8:4a:0a:3a:8e:cc:7e:db:01:
48:b5:c7:ff:69:e4:1d:36:d4:a8:75:37:93:7e:9f:7b:93:9c:
15:4e:ae:14:cb:1d:3f:fd:37:85:9f:b9:86:e4:bf:0c:8d:0f:
87:c0:3b:41:68:35:91:f8:ea:ad:18:11:e7:91:b4:16:e1:05:
1a:e6:83:f4:dd:06:9c:f7:04:04:7e:12:62:62:a2:9c:50:6c:
da:31:95:33:ed:e0:a9:c4:dc:ec:41:c6:1f:c4:37:64:56:e4:
2f:88:93:4b:21:01:0a:56:0d:86:5b:91:5f:79:29:52:89:12:
e2:e1:10:d9:cb:ae:84:3d:35:d1:0a:aa:c6:43:fa:d3:b8:83:
b7:45:f8:5d:3f:e6:e3:b9:46:3b:14:61:b9:96:be:22:81:af:
8f:79:8b:12:d8:68:af:74:57:ea:b6:07:89:02:fd:6e:8f:2d:
ee:f2:4e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:36 2025 by rpki-client