Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
File: E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft (raw, json)
Hash identifier: 2NI7fOaRJsxcgi1CuD7sofC7DTUXKPRWfhvc7pzDles=
Subject key identifier: 4C:C6:5B:35:15:8A:0C:F5:26:DE:42:6F:0F:DA:F4:90:07:F6:D2:79
Authority key identifier: 13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
Certificate issuer: /CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Certificate serial: 0194BBCEBA3A783120095D4BABC81E41049E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl (hash: WR7TLWRhWArHfY4ZpREkA56pf2xMDwGdRLDEtdFbAjc=)
2: YUczG5dGYRQf7s0wy9SzxbyGN1c.roa (hash: AUrq9hAikj9WxxWS78u0ChjSuDjwGem9EdzmHLzSliw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ba:3a:78:31:20:09:5d:4b:ab:c8:1e:41:04:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13c9fd37c7431ce6aa3c93a6952c67f0f0c9846e
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=4cc65b35158a0cf526de426f0fdaf49007f6d279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:72:52:b4:a6:f5:4d:c3:4f:59:92:05:1e:3c:
44:84:8b:c5:0e:c6:ff:9d:fa:52:98:6e:e8:77:c8:
e3:bc:ef:3b:6e:b3:ce:08:38:b1:99:84:0c:3e:c7:
fc:db:cf:d6:44:a7:40:b5:18:67:b9:1f:53:09:5f:
28:87:c6:a8:9f:82:e0:30:49:3c:6f:90:ca:42:43:
45:bc:7e:b2:64:f5:a8:af:48:1e:48:d7:64:37:0e:
ff:46:2a:21:32:52:91:53:72:37:5a:72:1a:3e:9a:
ff:6b:66:ab:cd:ff:dc:91:18:ca:db:83:36:1a:28:
9a:28:27:58:bc:d2:8b:cf:75:65:f7:17:df:ca:73:
61:cd:19:76:ce:70:6a:ff:a4:13:b9:2c:23:19:12:
48:29:8f:49:44:ed:7a:47:db:41:41:5b:6a:e5:9d:
b5:f0:41:86:74:52:6f:28:d3:93:33:07:fc:32:e9:
91:17:84:f4:5d:c1:2e:24:52:4d:a0:1f:94:4e:85:
d4:52:8b:6e:20:c0:3c:3e:f1:08:42:d5:87:f1:f5:
c1:2f:77:f6:4f:31:c6:47:f8:49:9b:fd:a1:d3:48:
6c:5c:24:d2:cc:f9:1d:aa:38:21:5b:45:3b:22:9a:
d3:ce:af:16:03:5a:9c:de:47:e5:7e:5c:58:04:b8:
79:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C6:5B:35:15:8A:0C:F5:26:DE:42:6F:0F:DA:F4:90:07:F6:D2:79
X509v3 Authority Key Identifier:
keyid:13:C9:FD:37:C7:43:1C:E6:AA:3C:93:A6:95:2C:67:F0:F0:C9:84:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E8n9N8dDHOaqPJOmlSxn8PDJhG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/8e8227-cd20-4db8-a40e-6a3dfb47f8c4/1/E8n9N8dDHOaqPJOmlSxn8PDJhG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:17:31:83:af:6a:19:b1:5e:72:db:80:f9:c4:19:b5:c4:eb:
d1:3c:cd:b5:d5:b7:19:a4:a4:af:61:34:09:02:24:a3:f1:87:
45:5c:44:b2:06:b6:03:df:97:26:cc:ba:ee:59:80:78:bb:0e:
32:78:5d:4e:c7:0f:b0:4d:94:b7:1b:ac:1c:eb:3a:e3:af:4f:
04:14:db:5e:61:94:4b:46:12:b8:69:0f:83:88:e9:7b:5c:04:
da:7f:93:5e:5b:88:f9:ae:10:35:a6:37:8c:8e:b0:46:bc:3e:
d2:6d:69:f2:43:f1:72:39:db:56:f6:22:6e:56:21:02:fe:75:
de:f7:b1:e3:5b:ce:cb:95:5c:a8:41:54:54:4f:64:e8:84:e0:
ce:be:f4:b0:2d:b8:b6:ee:b6:38:19:26:74:5e:bc:48:cb:c8:
09:6e:32:03:46:cb:00:1c:01:f3:41:1c:87:b2:09:02:b7:d1:
76:4d:60:3e:50:bc:a1:ac:bc:5f:24:82:05:38:db:57:1c:41:
ee:47:65:5e:6b:bf:7b:cc:1e:e1:1c:d2:75:db:90:5b:bc:d2:
78:c5:22:82:65:9c:3f:8c:2e:24:fa:b3:69:2a:80:cf:a1:28:
25:e0:d6:e0:27:31:ff:74:f2:9e:4f:bf:58:80:0d:b0:64:b3:
c3:e6:70:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:17:04 2025 by rpki-client