Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
File: 4tNxxKeqqFX4zDsa6oAilCCoDyA.mft (raw, json)
Hash identifier: ZpkkOmijpSecda4qkdBApBOIAELWGQf4GH5iqE3oMOs=
Subject key identifier: 1E:06:71:64:AA:AB:6E:4D:2A:04:4F:08:86:18:3B:2C:F5:B6:95:FE
Authority key identifier: E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
Certificate issuer: /CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Certificate serial: 0194BC04E5B42997589DE0CC18DC0A53543C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: 4tNxxKeqqFX4zDsa6oAilCCoDyA.crl (hash: gnCNJ12sCHUxm2mhtQtswc0OJOEss8bsYg8RpapoCyg=)
2: rXROEoL0RCunB-v1BM1XdpyinrU.roa (hash: aUwGAACJt+cfil/WYABgKI6j7Rtz2G2ubaoWnqYR4QU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e5:b4:29:97:58:9d:e0:cc:18:dc:0a:53:54:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d371c4a7aaa855f8cc3b1aea80229420a80f20
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=1e067164aaab6e4d2a044f0886183b2cf5b695fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f7:66:89:f3:96:36:f7:20:dc:9b:79:a9:ca:
42:f0:4a:ac:54:22:1e:ee:32:07:55:30:8a:07:e1:
78:e2:c0:0a:9f:fe:b8:66:a0:95:f3:f7:96:36:14:
03:37:ec:c8:ea:f0:15:12:a7:a3:a2:19:cf:59:26:
ba:a1:2e:72:45:7b:c3:39:64:6b:d1:38:1c:01:b5:
ed:a1:e4:46:cd:6e:95:c3:ef:89:41:ad:be:01:f5:
64:a6:3d:7d:d7:3b:de:b6:35:a5:8e:62:46:70:5b:
da:d6:50:ea:d5:d8:f7:b5:66:f0:4e:c4:2c:71:3f:
b2:eb:c4:e1:c5:3b:12:a2:d4:df:10:7c:d0:de:e7:
ff:20:62:a5:33:3f:e4:83:5a:1e:31:60:64:a0:e0:
8b:41:88:5a:9b:ac:96:7e:27:18:96:9d:a5:1a:8d:
97:0b:85:9f:33:58:87:09:2b:f1:56:9e:ff:ce:ce:
78:33:47:a0:53:86:0d:d4:12:8b:1b:4f:f8:a3:89:
b7:17:2c:8f:1b:a3:5e:1a:45:3c:cd:65:b9:3d:54:
b7:fc:01:de:86:c4:12:36:7a:aa:2b:2c:c7:f8:d9:
2b:4a:c8:e1:a6:3c:92:ee:9c:ed:dc:d9:a6:0e:b1:
2a:a5:f7:ce:c0:a5:8d:9f:5d:5e:f6:94:aa:49:dc:
9b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:06:71:64:AA:AB:6E:4D:2A:04:4F:08:86:18:3B:2C:F5:B6:95:FE
X509v3 Authority Key Identifier:
keyid:E2:D3:71:C4:A7:AA:A8:55:F8:CC:3B:1A:EA:80:22:94:20:A8:0F:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tNxxKeqqFX4zDsa6oAilCCoDyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/feaa30-142a-4fe0-aab9-907a58c994c2/1/4tNxxKeqqFX4zDsa6oAilCCoDyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:1b:8a:6d:0d:cc:23:f0:a9:65:95:3d:ed:d7:07:1f:0a:9e:
96:7f:bf:54:bb:73:3f:05:05:c5:12:51:01:4f:23:23:42:9e:
59:50:60:1f:26:be:42:a4:51:57:89:4d:64:35:d7:fd:f4:6e:
f2:9d:f5:ef:51:a8:dd:60:b5:4a:dd:bc:20:47:c3:98:44:94:
a8:a9:13:4e:23:c2:30:d4:82:8f:69:29:85:3a:21:d9:73:80:
f6:d3:62:92:ac:b4:21:df:52:24:12:cb:8a:da:a3:f1:28:f0:
a5:3c:05:7e:40:7d:1c:a8:64:d9:e9:70:15:62:ae:51:73:8d:
69:7b:b8:d5:c2:23:3e:c8:86:7a:05:5b:97:44:f2:98:5f:3b:
5f:be:24:9c:f5:e8:33:4f:e4:6e:0c:94:e5:9e:31:71:6b:25:
c7:6c:9c:90:3e:47:5d:ab:7f:25:6d:b9:ea:6c:f4:69:1d:63:
3f:de:86:4f:92:d9:d2:b1:f5:b5:77:01:44:6d:9a:6d:d0:d4:
8c:6f:d5:30:46:15:d1:56:1b:01:1d:87:a0:00:2c:a6:0d:ef:
98:01:88:2b:b3:b2:f8:73:b8:44:12:e6:c5:36:0b:52:9b:6e:
fc:c4:6a:e9:fa:87:7f:ff:53:1f:fe:08:f7:5f:c6:47:e5:ca:
61:35:13:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:14 2025 by rpki-client