Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
File: 4g-H2rlrUPdu6kmxgeqU0mogUyc.mft (raw, json)
Hash identifier: SNbUV/ZmlnRyILafOS+3RIEf3GjTGxoTA1KpUvPqFOo=
Subject key identifier: 3D:3A:7A:B1:11:8E:CE:05:D3:15:F0:48:3A:B4:4E:28:18:F5:96:2C
Authority key identifier: E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
Certificate issuer: /CN=e20f87dab96b50f76eea49b181ea94d26a205327
Certificate serial: 0194BD174837086A937612F7806BE656FE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: 4g-H2rlrUPdu6kmxgeqU0mogUyc.crl (hash: xWUwy05fvg1quQNqUWejYNQAvuIfABqIQfVQghryHk4=)
2: 8e6EuYvdvJ1TbEt2w_l--VFTSVE.roa (hash: lEOGzvYRz251FXAafldpzBiZsWV7u1gV99thpvyYuY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:48:37:08:6a:93:76:12:f7:80:6b:e6:56:fe:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20f87dab96b50f76eea49b181ea94d26a205327
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=3d3a7ab1118ece05d315f0483ab44e2818f5962c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:42:31:03:2d:f0:40:df:9d:65:b3:72:22:
d6:f0:0b:c5:eb:e5:20:48:6b:80:38:64:79:93:e1:
b3:ef:c0:06:0a:f4:08:a1:19:e4:a9:c0:00:2d:48:
69:03:1f:99:d7:6e:5f:f3:ec:96:56:01:0e:df:58:
dc:d9:e6:ac:f1:58:19:6a:63:71:32:c9:ab:a2:23:
b7:11:59:0f:ae:48:09:9b:99:f7:e5:bc:aa:d9:47:
97:26:9b:16:99:92:dd:43:a8:30:e2:61:8d:81:e5:
cd:66:07:0b:5f:40:93:ae:e9:4c:90:c6:69:2a:a1:
1c:5b:39:ff:3b:f4:aa:ac:f4:5e:02:40:02:3a:38:
23:87:2e:92:5e:1a:aa:58:5d:6c:9c:0b:07:e9:27:
fc:15:30:84:40:b3:d3:e7:14:0b:0c:b3:c3:29:f0:
6d:33:f8:61:0e:fe:a9:7a:25:e9:a4:80:75:76:cf:
95:6c:76:4e:b1:d7:63:b2:6c:2c:6c:5c:2e:3a:c4:
c4:e7:94:53:a1:c0:14:70:8a:21:ae:96:5f:9f:cd:
da:61:6e:b2:e1:75:6b:b9:2d:0b:b8:fb:3b:0c:f9:
4e:ce:ef:e6:d2:b1:2d:3f:81:89:78:2e:29:c7:ab:
2f:6f:33:91:a4:8c:b0:ad:e5:7a:a5:3b:51:88:c3:
a2:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:3A:7A:B1:11:8E:CE:05:D3:15:F0:48:3A:B4:4E:28:18:F5:96:2C
X509v3 Authority Key Identifier:
keyid:E2:0F:87:DA:B9:6B:50:F7:6E:EA:49:B1:81:EA:94:D2:6A:20:53:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4g-H2rlrUPdu6kmxgeqU0mogUyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/3fba05-daed-43b7-b870-fa02c1265d5e/1/4g-H2rlrUPdu6kmxgeqU0mogUyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:69:f4:86:77:27:ac:34:da:ca:fd:7c:e3:1c:0c:5a:db:7e:
06:3a:7f:3e:88:99:21:91:12:72:7a:3b:1a:43:7a:1a:cc:c0:
b4:ae:7e:8b:21:25:60:be:c6:60:8d:63:90:0a:9d:22:87:22:
7f:69:78:7f:85:87:8b:b7:b9:e8:15:07:62:3c:66:9a:b9:a6:
20:cb:54:be:12:98:a4:89:ef:46:a7:63:ac:2b:bd:55:5b:73:
89:68:99:64:af:78:99:2e:2c:a1:86:e1:9c:4b:5b:59:09:eb:
cf:a1:71:3a:68:63:5c:eb:87:d1:84:e4:b2:71:7d:6a:db:82:
07:f1:79:e9:b1:49:00:19:21:5c:6d:c4:ff:6a:71:d0:c0:33:
2e:a3:fe:99:ad:8c:58:a6:95:25:5c:af:58:60:65:56:7a:c1:
18:54:52:00:2e:38:16:19:7b:4f:0a:8f:1c:4c:4c:72:9d:22:
6d:61:e3:1e:06:a1:2c:74:30:1c:fd:2d:43:56:d0:e9:fd:62:
11:90:0e:de:66:21:ec:f1:b4:b2:c4:7b:fb:4b:98:f8:e9:58:
ce:60:4a:60:48:65:18:30:e4:f8:c7:3e:31:32:e7:4a:5b:5c:
8a:21:5a:8b:b7:eb:4a:af:57:a2:fb:59:31:18:ed:64:95:72:
3f:5c:2c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:07 2025 by rpki-client