Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
File: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft (raw, json)
Hash identifier: qSEFsxLkoePHfvE5Yozcg6Beo4+7wTmJ8dbCAAsai4Y=
Subject key identifier: EE:C6:4F:E0:FF:CC:71:5F:25:E6:F9:D8:5B:AC:36:2B:6F:95:02:AE
Authority key identifier: E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
Certificate issuer: /CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Certificate serial: 0194BBCDB209FE3B976461CF400C9AB74D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:00:07 +0000
Manifest this update: Fri 31 Jan 2025 10:00:07 +0000
Manifest next update: Sat 01 Feb 2025 10:00:07 +0000
Files and hashes: 1: 4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl (hash: fUUNygkY2ak2BSri53C3paNDP5KVWeJ30Pq2SRIHPiE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:b2:09:fe:3b:97:64:61:cf:40:0c:9a:b7:4d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2aee5a592b3a7ec73b5494424996f7ebec68fbc
Validity
Not Before: Jan 31 10:00:07 2025 GMT
Not After : Feb 1 10:00:07 2025 GMT
Subject: CN=eec64fe0ffcc715f25e6f9d85bac362b6f9502ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:9b:d0:46:a5:90:9c:0f:78:1f:e6:f7:a6:
83:b0:74:37:9f:9a:00:dd:74:41:2d:cd:cc:a4:c0:
6c:8e:fd:ed:76:21:8c:d2:b1:b1:bf:ad:6e:37:0f:
47:2b:80:06:09:2f:86:70:af:25:cf:a1:9e:84:89:
04:58:a3:8a:29:2f:db:fe:97:46:14:76:41:bb:6d:
1e:52:c9:cd:b3:e9:84:28:23:fc:c9:f4:6f:30:52:
b7:1f:e7:6d:9c:e2:cc:13:a9:70:65:2c:dc:51:51:
fc:b3:0f:73:5a:e2:fe:f3:ff:24:f1:64:7c:f6:40:
b4:a8:49:22:ac:71:ea:07:09:22:78:ae:67:b1:0a:
e0:fb:19:99:f5:fc:1c:f2:3b:b7:5f:0d:b2:eb:ca:
e7:ca:57:38:2b:5d:7a:52:41:77:2a:49:50:d9:bd:
58:2d:eb:9c:d1:1a:38:c9:22:91:60:3e:1c:64:69:
0c:19:7b:e3:3a:2d:f2:da:19:2b:25:e6:b7:f4:2f:
04:0b:05:ca:37:4b:78:88:33:fd:e6:b8:1e:f9:40:
c9:ce:b0:2c:ba:15:a6:f2:69:0c:db:62:de:fc:e3:
02:7f:7a:c5:51:9f:f1:82:5f:a9:d4:af:b6:97:ea:
27:3e:40:61:5f:26:9d:22:c0:47:e8:eb:fa:6d:17:
cf:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C6:4F:E0:FF:CC:71:5F:25:E6:F9:D8:5B:AC:36:2B:6F:95:02:AE
X509v3 Authority Key Identifier:
keyid:E2:AE:E5:A5:92:B3:A7:EC:73:B5:49:44:24:99:6F:7E:BE:C6:8F:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q7lpZKzp-xztUlEJJlvfr7Gj7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/17e936-1630-4a85-a93b-3955e0786092/1/4q7lpZKzp-xztUlEJJlvfr7Gj7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:36:b3:e9:77:27:35:dc:bf:90:6c:88:6b:ba:6c:fc:07:64:
89:97:2e:50:74:36:a5:34:ea:1a:4b:3c:74:41:9c:03:71:e5:
86:da:7c:60:e0:ba:87:70:a5:d4:2e:9e:a3:aa:f6:04:af:c3:
e7:c6:08:6b:dc:4b:3a:d0:8e:bb:db:8a:36:26:ff:63:f3:25:
2e:33:84:d7:da:af:1c:e4:69:6f:10:d1:bd:16:03:7f:ac:97:
76:3f:2f:0a:83:de:79:1f:26:d9:3a:b6:31:f5:1c:4e:d1:9e:
3c:91:fd:1d:f1:66:2f:a0:d5:3c:a6:cc:95:34:e5:8c:99:b8:
39:f0:55:48:00:82:4c:a5:6a:f2:a7:1b:89:e4:18:d1:bb:c0:
1f:10:88:b5:85:9e:94:52:d9:82:ff:7a:38:8e:a3:2f:5f:2d:
ed:78:6e:fb:6a:af:d2:d3:0c:c4:9e:4e:4b:f0:a1:b5:57:2b:
36:2b:c1:ea:6b:f0:b8:be:18:da:51:41:9e:f9:33:d2:0d:f8:
99:de:21:a0:84:9c:37:63:30:4d:6b:01:fc:c1:c9:bf:d2:55:
5d:b1:da:d6:20:e8:31:4e:55:a6:82:cf:a2:ae:fe:17:e4:7c:
e3:b4:39:d4:f4:93:5b:b0:bd:e9:1a:c4:66:57:f1:c0:28:d8:
1a:7c:f3:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:14:48 2025 by rpki-client