Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
File: 4I6QfA_lCJGna9mbKQhwCmrGLjg.mft (raw, json)
Hash identifier: 46cDrw2h2+/50W9z3tBcPkmLKJqIgb0+gsvwI5ISCa8=
Subject key identifier: 62:D4:A8:13:A5:01:26:6D:E7:D1:1C:9D:DD:F0:7A:FD:0A:19:C1:0B
Authority key identifier: E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
Certificate issuer: /CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Certificate serial: 0194BBCDEEF55BBCE3250B8370D77426D539
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: 4I6QfA_lCJGna9mbKQhwCmrGLjg.crl (hash: i+ME2ipiOL2gughXhPkpki6e3PRCdEjuiqwcO7nDmaM=)
2: STK2SAlRO7jYy3vcEqTR9ikjblA.roa (hash: k6oW+GQsDjU/vILzjfv+z+LTQhLzDJ0y7rBRC2wvlVc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ee:f5:5b:bc:e3:25:0b:83:70:d7:74:26:d5:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08e907c0fe50891a76bd99b2908700a6ac62e38
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=62d4a813a501266de7d11c9dddf07afd0a19c10b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:42:61:14:78:08:c4:77:d5:9f:40:42:14:9f:
95:a7:f6:c2:7c:3d:bb:df:42:bc:c2:30:99:8f:7b:
e6:8f:15:9c:71:3b:ba:8c:39:e1:2e:dc:d3:1a:fe:
43:34:d7:88:62:09:22:1d:7f:18:71:74:2c:db:0c:
17:25:58:57:26:ad:1a:52:d3:f3:25:81:2b:9f:ce:
02:79:0d:0b:00:c1:6d:7f:6f:c5:da:60:4e:1b:18:
fd:74:83:da:42:9c:15:70:31:6a:21:07:ff:5b:ff:
4f:ee:45:7c:fb:8b:b6:36:23:53:b7:8c:7b:8e:a9:
40:ea:10:8c:cc:80:7a:bd:d8:38:c7:b3:41:48:90:
25:01:91:99:11:1d:21:2c:cf:21:c5:e2:6e:93:4c:
89:8f:03:fd:64:e0:a4:a8:a2:55:0d:49:17:5d:5f:
87:4e:b2:9b:3e:24:5e:7e:8b:2c:db:05:b8:3a:be:
0c:47:54:f3:14:97:58:bb:d7:b1:c5:ac:6d:c1:66:
5e:13:34:26:fc:69:8b:cb:13:3c:9f:66:18:44:cd:
22:3e:70:e8:eb:90:e7:dc:79:4b:35:3d:d7:c8:9c:
8c:7d:11:dc:d6:f2:ed:fa:b0:0f:b3:ed:16:90:8f:
49:56:4a:a9:d4:72:91:53:65:68:fe:b6:b0:87:7b:
31:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D4:A8:13:A5:01:26:6D:E7:D1:1C:9D:DD:F0:7A:FD:0A:19:C1:0B
X509v3 Authority Key Identifier:
keyid:E0:8E:90:7C:0F:E5:08:91:A7:6B:D9:9B:29:08:70:0A:6A:C6:2E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4I6QfA_lCJGna9mbKQhwCmrGLjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c28e27-d05b-478a-9b0b-db97892a51fd/1/4I6QfA_lCJGna9mbKQhwCmrGLjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:02:94:13:44:ca:3e:c4:34:ea:2e:be:11:a6:b0:d7:ac:4e:
4b:79:70:41:a0:1d:af:10:2b:b1:66:6d:3f:66:6b:fe:dc:5a:
a5:d5:a5:68:14:bb:cf:d5:81:28:4a:21:68:ac:09:f3:33:5b:
ba:6e:58:22:07:00:c4:8c:71:d9:87:8d:b8:d7:2e:33:7e:43:
b7:b2:62:b5:d2:13:c8:12:cf:45:7b:a1:4e:3e:b7:a7:f5:88:
55:ea:4f:f5:f2:31:22:bd:ea:e7:38:de:21:00:de:0f:ac:16:
39:d6:68:d4:5b:33:19:ef:38:62:e4:54:7c:cc:64:0f:35:fe:
fb:0d:11:dd:da:8a:79:a2:61:cd:33:7e:98:ed:da:35:85:8d:
1a:5d:2f:b6:3e:2f:b4:64:62:3f:47:72:5b:be:8a:c7:31:3c:
43:7f:7a:6c:5d:a8:e5:93:0c:c0:ff:48:64:1c:e9:e1:4b:65:
40:22:33:18:d8:a4:e7:26:8c:5b:ca:f9:65:00:ad:6e:3b:e9:
a0:20:38:e1:84:60:03:16:29:77:19:3e:b0:1e:b4:43:15:72:
51:2a:e2:c5:6f:5b:07:17:df:7a:1c:6a:7e:dd:32:d8:e5:ea:
8f:8d:03:15:b4:6d:62:d4:5e:7d:25:84:fc:1c:6e:4e:96:d8:
c7:17:bf:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:36 2025 by rpki-client