Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
File: 4f9iX0oY0E1ZCludc7JVGkNbcXI.mft (raw, json)
Hash identifier: 1/u2C3019BBn3ay/A9msHqR00wP2HjAfTIFlQlSyZlM=
Subject key identifier: AA:BA:4F:64:B1:06:95:CC:84:69:FE:15:E4:A8:EB:8D:95:F7:0C:A2
Authority key identifier: E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
Certificate issuer: /CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Certificate serial: 0194BC3C32C8D972CE9C762F63DD752FDE17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
Manifest number: 0DE8
Signing time: Fri 31 Jan 2025 12:00:49 +0000
Manifest this update: Fri 31 Jan 2025 12:00:49 +0000
Manifest next update: Sat 01 Feb 2025 12:00:49 +0000
Files and hashes: 1: 4f9iX0oY0E1ZCludc7JVGkNbcXI.crl (hash: OqNCHjJei4NohNlzOOjpAv06md0KkmgqKwiVWuUZ4So=)
2: v-UIauQZjW8hDMdx3w3tSE6IDRc.roa (hash: uCYTkmd7Ahc37aZdyBrq8T1Px2W2MX7+A97XE/19qf0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:32:c8:d9:72:ce:9c:76:2f:63:dd:75:2f:de:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1ff625f4a18d04d590a5b9d73b2551a435b7172
Validity
Not Before: Jan 31 12:00:49 2025 GMT
Not After : Feb 1 12:00:49 2025 GMT
Subject: CN=aaba4f64b10695cc8469fe15e4a8eb8d95f70ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:cd:64:21:cb:b3:f3:f4:de:93:7f:70:9a:db:
6e:7f:4c:f1:60:55:19:2a:e1:0b:91:ef:09:4b:7f:
d5:67:7a:37:05:b2:12:a5:ae:58:e2:1f:da:ce:c2:
34:8b:49:bd:84:88:af:e1:7e:c9:d2:fd:10:73:7e:
6a:9b:03:94:1c:8a:2a:19:87:3d:b1:10:c7:c1:a0:
3e:07:a8:98:fe:36:e7:f7:93:7f:d4:74:45:c8:39:
5f:22:85:43:e4:90:34:b1:1a:2d:dd:94:e4:3c:f0:
bf:f0:d2:28:7f:18:46:8a:95:56:aa:cd:87:d6:08:
61:91:75:3d:3a:c5:65:0b:60:30:2c:09:a9:9b:1d:
89:05:10:bf:72:de:4f:eb:04:a2:68:c7:c6:ad:ee:
28:f3:c6:4b:51:ea:29:8a:84:74:c8:15:18:a3:c9:
fd:9f:5c:27:03:61:26:6b:31:ee:b8:5a:3c:ad:6c:
6a:ae:83:7b:bd:5f:e1:52:e6:5d:bc:6d:74:c0:31:
91:b4:8e:42:81:55:a2:89:a6:04:4d:49:76:96:3a:
1a:2e:9e:46:70:64:4f:f6:dd:c3:cd:db:68:b0:96:
31:a4:4b:92:d4:dd:df:c3:7f:cb:9a:8d:90:da:1d:
ac:a6:d1:08:28:7d:6f:e4:14:86:ea:c2:32:59:f1:
04:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:BA:4F:64:B1:06:95:CC:84:69:FE:15:E4:A8:EB:8D:95:F7:0C:A2
X509v3 Authority Key Identifier:
keyid:E1:FF:62:5F:4A:18:D0:4D:59:0A:5B:9D:73:B2:55:1A:43:5B:71:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f9iX0oY0E1ZCludc7JVGkNbcXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/8f90a5-c878-4dd4-b2db-4e5861187c4f/1/4f9iX0oY0E1ZCludc7JVGkNbcXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:66:77:95:7a:7a:2f:ed:84:5f:86:67:b4:02:39:9b:b3:4b:
a0:1e:8b:8c:58:31:50:b9:dc:94:51:3a:a9:0d:cc:b6:0a:c9:
64:cf:6d:6c:94:2f:04:7b:05:db:89:2b:23:4b:fb:ed:2c:17:
ab:65:90:22:b5:f3:fa:80:79:ed:6d:9c:b1:16:77:3d:a6:f5:
57:5d:5d:b8:44:34:89:0f:de:66:14:86:a0:20:e4:66:99:92:
53:43:49:37:37:a1:5e:ec:9e:2f:22:b2:26:7f:75:d7:1c:34:
75:b4:e3:7d:21:5e:87:a5:c9:7d:b9:af:98:56:b7:be:ba:6a:
55:99:f5:ab:35:63:c6:a7:95:4a:b1:e3:ef:a8:2e:5e:4a:43:
9a:28:8f:fb:72:38:4a:54:91:ca:e3:7a:1f:48:87:85:64:00:
f4:a9:9d:4e:b8:4a:e6:65:b9:13:bb:e2:e1:09:32:48:c3:a6:
8e:45:22:ea:9b:96:a0:2f:66:a1:43:e6:4d:48:72:dc:f1:01:
90:55:a3:11:56:b4:f3:1c:85:77:7b:43:d7:0c:54:54:48:29:
e1:07:62:4c:5d:c1:36:15:ea:d7:7a:bd:e0:a0:ad:8c:4b:4e:
23:db:3e:cd:9f:7a:75:55:22:ec:bf:02:fe:82:e2:22:aa:07:
fc:e1:a6:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:32:42 2025 by rpki-client