Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
File: 4_oaCoi7tUs_gvwll9JSr_dhO8U.mft (raw, json)
Hash identifier: JMLvUUwxn11QB4jFJeTvwgSAmEpKEXGHJvzGfHYC5jY=
Subject key identifier: 53:CB:B0:5D:26:01:63:03:45:51:33:A2:1B:85:5F:2E:F5:23:34:1A
Authority key identifier: E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
Certificate issuer: /CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Certificate serial: 0194BBCF00AB5BF04AAAA38677F19E746AB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: 4_oaCoi7tUs_gvwll9JSr_dhO8U.crl (hash: blb9wQAGiJT/Q1qW4CbF1YwMiFwldI8gHCvU0eTyB3Q=)
2: zkyq_bkRmP7y8uEpa3W6vwIy36k.roa (hash: rvIkZjLBjiZPMwp1YJD6TUGI2vyzFxSQs2biVpfUSoM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:00:ab:5b:f0:4a:aa:a3:86:77:f1:9e:74:6a:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3fa1a0a88bbb54b3f82fc2597d252aff7613bc5
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=53cbb05d26016303455133a21b855f2ef523341a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:78:19:b5:b5:92:61:8e:06:76:fa:e4:3f:87:
8d:ae:b2:6c:f9:a3:03:c5:9f:be:57:25:ce:5f:ee:
46:1f:32:2f:0e:2f:0b:5b:8b:21:9b:64:97:87:fb:
c8:8a:c2:2f:55:4f:bb:18:63:0d:d3:8c:6f:f1:fd:
14:89:2a:a2:d7:84:cc:f0:d0:a9:3a:9d:f1:ce:ed:
14:92:f4:a6:a0:17:74:18:56:a4:a0:43:0f:db:20:
76:96:db:15:45:b3:9e:5e:d8:6f:f6:88:04:00:b0:
ce:0b:c0:e4:5e:ed:1b:98:ca:19:26:df:71:c3:ed:
67:da:ce:85:59:ce:79:82:b9:a8:6b:04:ce:fd:61:
a2:5a:da:83:52:28:89:be:6c:ed:cd:ea:1c:2f:e8:
21:c7:e9:82:3c:8d:b4:a9:bd:42:0b:3d:8f:d5:fb:
8f:f3:97:2f:6e:0a:7b:38:b4:a2:68:c2:a0:87:73:
4e:7e:bb:1f:b7:9f:97:0a:47:ae:ca:43:5c:a0:bb:
55:e5:a3:81:7f:7e:a8:3c:76:1a:14:5e:32:a8:66:
8c:e7:be:14:de:97:3e:c5:97:cc:e8:52:c4:cb:5a:
5c:ae:55:a1:f3:46:5d:9b:61:c4:21:6e:dd:3c:2b:
d7:d9:e6:d8:c8:91:fb:a7:cd:5b:02:dc:dd:8f:50:
22:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:CB:B0:5D:26:01:63:03:45:51:33:A2:1B:85:5F:2E:F5:23:34:1A
X509v3 Authority Key Identifier:
keyid:E3:FA:1A:0A:88:BB:B5:4B:3F:82:FC:25:97:D2:52:AF:F7:61:3B:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4_oaCoi7tUs_gvwll9JSr_dhO8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/27ac32-afcf-4e28-abfe-4683bfed0038/1/4_oaCoi7tUs_gvwll9JSr_dhO8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:38:90:fd:41:23:e9:ba:77:f8:f5:70:ce:76:14:99:d3:ff:
f5:e3:e7:c5:c3:52:e2:72:96:66:3a:a0:fd:45:1f:59:5b:79:
64:91:63:b1:93:87:26:f6:55:b2:22:00:51:87:91:d6:5e:06:
97:e4:82:63:bc:04:3f:64:43:a7:57:1a:13:e5:6a:e8:bb:11:
89:c0:7f:a5:8c:29:43:d6:5c:24:54:a1:9d:aa:1d:47:b5:a0:
a5:16:3a:41:74:2c:60:9b:8b:d0:3c:03:9d:16:35:cd:b3:8c:
62:3b:54:5e:e4:5a:a0:da:02:01:a2:94:f2:d5:ba:36:69:7e:
ad:61:fe:65:40:ba:18:1a:05:c7:33:89:ef:1e:5b:39:df:be:
3d:52:0a:06:b3:ec:f7:1d:30:2d:01:bc:57:90:a4:2d:24:10:
90:e1:31:1e:27:b3:13:c9:8c:87:1b:a5:bb:ff:08:0d:46:84:
22:69:c3:2a:a5:7d:2e:d1:2a:91:28:67:6e:00:5f:1f:3c:e1:
78:07:51:c2:0c:a9:56:a1:90:60:40:7f:f5:1c:9b:2d:3c:d9:
47:7d:cf:72:e9:99:40:e8:bf:5e:3e:a6:d7:d4:90:0e:7e:4d:
b1:6b:83:49:84:2b:d4:cd:95:0d:59:1c:ec:9c:42:5b:f3:11:
51:56:52:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:10:11 2025 by rpki-client