Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
File: 4Sz8faj6dKFt04wXwgoBksuy0_4.mft (raw, json)
Hash identifier: JW8OXpEKD+sL7khWh59pUEVvvQf4iLMMlejeP+VcZ+o=
Subject key identifier: 40:82:AD:5A:19:23:B5:15:05:4B:EA:E2:BF:57:6E:25:FE:A3:1C:35
Authority key identifier: E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
Certificate issuer: /CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Certificate serial: 0194BC728AD6F4C36C84F9F1D1A05B640E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
Manifest number: 0AFA
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: 4Sz8faj6dKFt04wXwgoBksuy0_4.crl (hash: q19cgLQ2MUoavGUf3nWki/EDfp1jIOh51fyiKwnAMIw=)
2: CzgWRo2OrtBEMKgJ83rtq5Y3g98.roa (hash: 2xTrIXSTjNXzltKj7q0eYjRCvrpmaN3vPbRoQNYjpK8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8a:d6:f4:c3:6c:84:f9:f1:d1:a0:5b:64:0e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e12cfc7da8fa74a16dd38c17c20a0192cbb2d3fe
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=4082ad5a1923b515054beae2bf576e25fea31c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:61:7e:03:d3:88:74:a6:03:35:f8:74:36:76:
19:65:ea:29:04:6a:93:b7:cb:0d:28:a8:e1:67:81:
72:85:ec:e8:0f:75:51:4c:fc:5b:34:1e:6b:d4:c4:
03:7a:a9:ed:b0:fa:cd:8d:56:d8:65:1b:4d:9d:b4:
3a:b4:56:47:07:77:ae:4b:c6:96:16:7d:0a:88:f3:
06:a5:48:04:0c:60:b8:61:8a:71:bb:fa:8d:dd:ef:
cf:4f:1d:e1:3b:ca:3e:b3:2f:a8:71:9d:92:ce:17:
1e:59:55:e3:67:5d:44:03:ae:47:52:a3:8a:98:02:
a9:54:fe:a1:66:3a:77:2e:57:ac:fc:07:e0:a6:07:
27:be:60:01:59:8f:15:0b:4f:25:33:dd:9b:8e:33:
9a:3d:dd:72:e6:05:36:29:f7:29:63:15:de:4f:6e:
2b:a5:04:12:2c:65:60:2d:b4:f2:8d:f4:5e:09:33:
ee:1f:67:59:f9:97:14:d5:6e:52:0b:44:e6:f1:47:
8e:14:55:b7:95:2f:78:b8:36:86:60:e2:da:54:92:
e1:f1:88:d7:49:fc:e9:06:99:51:2e:08:47:f0:31:
d2:df:61:8d:c5:5f:22:3f:5f:4e:9f:24:cd:1e:9b:
f5:b9:73:37:52:44:3b:a9:bd:a6:3f:0a:0e:42:61:
b0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:82:AD:5A:19:23:B5:15:05:4B:EA:E2:BF:57:6E:25:FE:A3:1C:35
X509v3 Authority Key Identifier:
keyid:E1:2C:FC:7D:A8:FA:74:A1:6D:D3:8C:17:C2:0A:01:92:CB:B2:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Sz8faj6dKFt04wXwgoBksuy0_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/a6aeff-9b9a-4c18-9474-2272b4dbaa62/1/4Sz8faj6dKFt04wXwgoBksuy0_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:04:50:0c:eb:6f:fe:27:43:fd:38:17:8e:5c:21:7d:36:0d:
ce:33:9d:f0:28:fd:b8:6e:c4:e1:08:f5:5a:b7:44:e9:02:70:
e5:89:b7:95:d2:54:a1:76:14:31:ac:9e:c5:ac:2a:0f:59:56:
13:92:31:65:6f:c3:60:33:ef:a5:f5:7e:c5:ed:2a:2e:c8:0f:
b1:1f:71:af:32:1e:88:fe:aa:34:d6:63:76:22:9d:f9:f1:20:
9b:5f:39:6b:28:ef:39:12:e2:f9:e3:a8:5f:1f:a6:61:c5:38:
e4:da:da:10:ce:0f:53:07:3f:99:ba:7d:6d:c5:bc:f3:f7:40:
5e:93:33:3b:9e:30:71:49:ec:51:2a:67:68:5f:82:b9:b0:ae:
86:e0:a2:10:82:91:6c:b7:db:fa:68:85:1a:35:57:ad:56:fa:
da:18:84:37:dd:3c:de:98:c7:81:74:7f:9a:09:d2:38:e9:d7:
c4:02:05:ed:fb:6f:7c:d7:26:19:54:ed:1f:28:18:7f:2c:24:
53:1d:97:44:a5:21:f7:4a:01:01:7e:e8:be:d7:65:98:19:91:
1c:04:b8:60:bd:e2:24:72:7f:e9:44:65:76:3e:0c:ca:3c:f6:
1a:61:9f:1b:e9:b7:98:00:5c:83:8a:85:14:41:76:02:bc:2a:
7b:da:ab:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:23 2025 by rpki-client