Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
File: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft (raw, json)
Hash identifier: pDebt+5xbCn/0RuQk14sPhCU8la/ECpyR5BmnxDKSw0=
Subject key identifier: 5A:D2:C5:B1:82:2D:DD:B1:F5:86:73:87:28:3D:B3:3F:9B:36:F8:46
Authority key identifier: E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
Certificate issuer: /CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Certificate serial: 0194BCE0B14F444AEA00D4F048F152B4A7D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
Manifest number: 0145
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: 4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl (hash: pez0cpbHKN7BBYZdoQ5RENeb1eu3vDbrBssOv8a4PT4=)
2: MVPwNZ1sWh_qT3u_yevkatHjGzM.roa (hash: C2EFQTV5AK3R2J2AxwzeI6jL/kPjrl3mk/7AjDMYss0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b1:4f:44:4a:ea:00:d4:f0:48:f1:52:b4:a7:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d362e48acbe0048e9d125a62b8d9b140cbfdd4
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=5ad2c5b1822dddb1f5867387283db33f9b36f846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9a:f6:38:73:61:92:ab:0d:7e:74:68:62:5c:
d9:f2:7f:18:c9:b1:e1:1f:16:f0:dc:4a:5e:e2:ac:
0e:1b:10:2d:82:39:0c:bf:1d:04:42:fd:84:73:a9:
e5:b6:2a:e4:2f:33:5a:34:53:da:89:72:d5:95:12:
c1:32:01:cb:f6:4b:8d:b5:78:b4:69:c2:70:a1:1a:
83:49:ee:be:2b:85:69:6a:44:59:4b:b3:96:a6:69:
d6:42:82:d3:5a:c1:50:12:86:2c:23:5c:07:39:49:
7d:09:cf:05:8e:8a:60:63:6f:63:10:98:ba:ee:89:
82:ef:c8:b3:29:ce:90:fc:37:ac:b8:1d:e4:be:49:
c4:b1:f8:18:fa:9f:56:93:6a:82:50:7e:28:90:13:
09:11:cb:47:fa:81:a6:ea:09:ce:e4:ef:7f:61:32:
23:21:e5:65:da:bd:28:94:46:ce:7e:08:41:82:38:
72:bf:d9:16:e0:18:62:ce:49:5e:c2:cd:3b:28:fd:
d9:52:da:9e:33:16:53:a7:b5:d8:5d:71:11:36:69:
a9:5a:0d:66:87:62:f1:57:f8:02:d6:fb:8f:e0:63:
96:67:d9:b1:55:2b:11:6c:0c:bd:af:d1:4f:e6:bd:
45:4d:89:fc:bc:8c:a7:91:d4:dd:6a:b5:d0:ba:92:
e9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:D2:C5:B1:82:2D:DD:B1:F5:86:73:87:28:3D:B3:3F:9B:36:F8:46
X509v3 Authority Key Identifier:
keyid:E1:D3:62:E4:8A:CB:E0:04:8E:9D:12:5A:62:B8:D9:B1:40:CB:FD:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8ae579-000c-4e73-9f68-3ada352652b4/1/4dNi5IrL4ASOnRJaYrjZsUDL_dQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:af:90:18:2c:a2:8e:da:2e:24:9d:1c:8a:c0:53:f6:e6:0c:
ee:6b:92:87:a4:f7:62:1a:67:c4:22:5c:e3:a1:20:d3:34:19:
96:ca:2e:bf:dd:c4:0f:01:9e:94:47:c0:39:16:cf:26:a0:56:
8e:84:75:dc:9c:00:f3:06:6d:51:16:7d:03:dd:e0:23:d9:96:
7d:52:05:ad:ce:07:79:b4:75:75:f3:e6:df:67:09:2f:f8:26:
54:5c:72:a4:b4:3f:eb:77:58:fb:55:40:e8:77:c2:f6:90:73:
8b:ce:9b:08:15:11:c5:ac:35:2a:c9:90:ec:1a:df:36:7a:30:
ca:05:d9:4c:35:05:65:ff:71:9d:08:2a:40:e8:a3:3b:52:a4:
ce:ca:1a:f1:2c:47:db:fb:b1:74:1f:94:9e:6c:94:3d:12:3b:
1a:d0:4a:2b:05:9d:c0:35:67:25:5b:cf:69:b5:e4:66:a8:18:
fb:e2:de:33:a4:9d:c6:0b:9d:1b:8b:c0:95:37:d2:36:7d:4c:
2f:78:69:ff:c5:8b:08:3b:a4:f1:5e:3e:79:7e:ab:9d:ec:55:
f2:49:b5:d2:72:95:ed:1b:aa:f9:91:81:41:b1:3f:7e:83:f8:
62:1e:c2:a8:7b:c8:7c:9d:f3:c5:d7:ca:7d:b9:83:7c:aa:63:
ca:b4:ed:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:57 2025 by rpki-client