Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
File: 4qKrCidaLQTx4mNassd-s65gOMw.mft (raw, json)
Hash identifier: QKJPJCmmU5jr7MMrRuXVukKK1SHS1KHEe9YCANfuzL4=
Subject key identifier: 4B:AF:51:54:AC:8A:35:79:47:8B:A3:1D:4F:63:D1:21:E3:CC:2E:D2
Authority key identifier: E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
Certificate issuer: /CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Certificate serial: 0194BC3BFF32916121FCDFC16F3D68A6BF7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
Manifest number: 076D
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: 4qKrCidaLQTx4mNassd-s65gOMw.crl (hash: BUCGYG1GsGzWMhVGpZUnVDrwUUciSaT/YOjh52ginZI=)
2: r-_fYxsQeAAnWT8K8BN3aabue4c.roa (hash: vX8iAlHxAeCaWnzF37mIFqPFZYMuvvYEyZXEicfJpc8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:ff:32:91:61:21:fc:df:c1:6f:3d:68:a6:bf:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a2ab0a275a2d04f1e2635ab2c77eb3ae6038cc
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=4baf5154ac8a3579478ba31d4f63d121e3cc2ed2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0e:98:d5:4f:37:df:c8:41:d0:b3:82:c9:1b:
cf:fc:a1:79:e9:74:27:a5:30:b4:f3:90:27:b3:36:
21:a2:90:f7:51:06:d8:14:c0:db:e6:c1:51:0c:e8:
99:c1:d4:60:2b:6e:40:b5:c7:3b:ef:1f:0e:8a:5a:
38:5d:3e:de:e8:76:9d:59:3c:66:d9:79:dc:d1:91:
92:d3:29:f1:f3:05:2f:42:bc:c9:9e:ea:19:c0:da:
07:40:08:74:66:78:81:e7:90:49:7b:88:6b:8b:dd:
00:93:6d:0d:45:20:d1:fc:bf:27:fc:bc:3d:b4:97:
94:54:1d:20:c7:fb:8a:c3:51:88:cf:a8:64:a5:b3:
b8:be:9c:aa:81:67:fe:59:a2:42:57:bc:7e:cd:80:
a9:2e:85:07:c6:77:45:9a:a4:ac:71:7b:41:be:33:
b5:13:13:0f:47:06:68:a8:d0:3d:03:a4:38:52:2a:
b1:7a:fc:f5:96:fa:ca:c5:af:61:e4:6f:13:74:fc:
11:ad:d0:fb:e7:f6:da:30:d6:c9:e8:a4:fb:98:ef:
47:6f:5f:7d:c0:36:9e:69:4a:0f:26:0d:80:01:ce:
ed:01:07:c0:89:2c:44:d2:12:77:06:c8:84:bf:d1:
8c:5b:14:22:4a:a9:2d:1c:34:fa:77:4e:4b:3c:8b:
8d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AF:51:54:AC:8A:35:79:47:8B:A3:1D:4F:63:D1:21:E3:CC:2E:D2
X509v3 Authority Key Identifier:
keyid:E2:A2:AB:0A:27:5A:2D:04:F1:E2:63:5A:B2:C7:7E:B3:AE:60:38:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qKrCidaLQTx4mNassd-s65gOMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/55d92c-d3e2-4da1-8d53-7e47da1ce406/1/4qKrCidaLQTx4mNassd-s65gOMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:09:68:36:cc:5e:41:47:bc:6a:92:35:f5:f8:67:43:4c:70:
8d:03:b2:86:48:cf:07:a2:0a:e7:55:56:ad:28:2a:86:00:c0:
99:dd:be:4f:0f:5b:4f:c8:e7:ba:a2:d3:1c:76:75:52:f9:82:
1b:54:e7:fa:eb:bd:f6:df:1a:e7:d0:14:e6:00:f6:27:4c:0f:
50:cd:bb:2e:ec:06:33:28:85:ad:1b:22:4f:28:ea:51:a4:f1:
60:94:24:00:05:03:27:97:3e:97:4d:25:53:02:e9:44:7b:a1:
60:66:c0:9a:62:0c:4c:06:64:f3:42:5a:b3:57:57:39:5e:13:
87:4a:ee:b9:54:03:2f:b3:2a:79:61:5c:b5:f4:bf:dd:a8:c6:
4d:c5:25:7a:a6:be:5e:fb:b2:b7:1d:f9:85:f4:48:94:04:53:
89:58:69:7d:c5:04:f1:a9:3c:8d:04:68:05:3a:47:cc:3d:06:
36:6e:f0:13:84:8f:a1:77:92:4d:75:41:b5:6d:57:e0:e4:3b:
5f:49:bc:82:6c:14:6a:b2:cb:db:2e:e9:a2:82:ce:b2:be:bd:
b4:bd:fa:73:5c:08:ab:d1:8d:c7:03:7e:89:2f:d3:56:d3:b9:
8d:b6:a4:62:53:7f:8c:9d:40:b3:8f:e1:7f:79:a0:85:82:5e:
63:04:b4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:22 2025 by rpki-client