Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft
File: 4C15LJfb1EguuBXMmk-59Uevegk.mft (raw, json)
Hash identifier: WWBHNOoJtZjZRcTazwYzkiNxevIROTR+bJ2Bv56jxfQ=
Subject key identifier: 0D:46:88:41:DD:8F:1F:F8:CD:38:FE:85:D1:D2:24:30:CC:1D:A1:B6
Authority key identifier: E0:2D:79:2C:97:DB:D4:48:2E:B8:15:CC:9A:4F:B9:F5:47:AF:7A:09
Certificate issuer: /CN=e02d792c97dbd4482eb815cc9a4fb9f547af7a09
Certificate serial: 0194BBCE8A96BA11E7135874423DBE31A8AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:01:02 +0000
Manifest this update: Fri 31 Jan 2025 10:01:02 +0000
Manifest next update: Sat 01 Feb 2025 10:01:02 +0000
Files and hashes: 1: 4C15LJfb1EguuBXMmk-59Uevegk.crl (hash: HA16FepYoGmW10qZH2lKUGyjvqw3ch03eutNCdANAWY=)
2: cWQ3FcXIpgayQfqlmppdKMwVQXo.roa (hash: psm2EXD7JYCfSDQE9D3Rxu9Bj66wyGfDywECDIfOm7Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8a:96:ba:11:e7:13:58:74:42:3d:be:31:a8:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e02d792c97dbd4482eb815cc9a4fb9f547af7a09
Validity
Not Before: Jan 31 10:01:02 2025 GMT
Not After : Feb 1 10:01:02 2025 GMT
Subject: CN=0d468841dd8f1ff8cd38fe85d1d22430cc1da1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:2c:53:07:ad:28:09:27:31:54:07:c5:40:
2f:a8:f3:76:e1:d3:d7:e5:c9:39:24:39:4e:a8:00:
7a:4e:9c:a0:02:fc:f9:7a:ca:8d:65:05:1b:90:ab:
59:c6:8d:34:ea:1a:65:af:b6:2f:14:3f:49:04:55:
17:4f:00:1e:ae:4b:27:75:e4:2d:b0:c4:84:fe:30:
d9:1a:e3:07:37:ac:ef:65:03:51:e7:e0:07:76:26:
4c:94:fc:63:94:02:83:b4:45:07:2e:ed:93:f4:4c:
46:34:3d:39:45:70:07:d2:0a:99:af:55:25:45:89:
1f:d3:93:09:02:4a:d8:ff:6e:8b:91:83:f3:9c:76:
57:1b:bc:95:41:9e:48:c0:a6:72:13:9c:54:9b:7a:
6f:1a:f2:43:6e:a4:9c:d4:1b:aa:f7:e4:e9:07:ae:
c1:57:f9:cf:90:fe:01:38:b6:ee:c5:12:60:d6:f4:
53:24:2d:ae:f1:44:51:2c:04:11:1c:07:10:e2:b0:
38:99:08:6d:45:b5:f8:10:2b:b6:83:cf:f2:35:d1:
27:67:11:31:aa:e6:75:bb:d9:f0:04:08:9e:c2:16:
84:ec:ec:a9:12:f3:cd:d6:07:f5:23:46:bd:c5:bf:
7e:c0:43:66:8e:00:ff:34:42:1e:1d:54:f6:1a:e9:
f8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:46:88:41:DD:8F:1F:F8:CD:38:FE:85:D1:D2:24:30:CC:1D:A1:B6
X509v3 Authority Key Identifier:
keyid:E0:2D:79:2C:97:DB:D4:48:2E:B8:15:CC:9A:4F:B9:F5:47:AF:7A:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4C15LJfb1EguuBXMmk-59Uevegk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/f7195b-dd00-4290-9f78-abd90f329c0c/1/4C15LJfb1EguuBXMmk-59Uevegk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:ed:1b:f6:f9:f2:27:22:2c:26:03:8a:7e:c1:04:2d:a1:33:
25:4b:ba:b1:42:1a:48:73:9f:b8:6d:2b:73:f4:47:17:0f:13:
0e:23:94:15:0b:c2:aa:b9:35:23:18:af:41:26:04:81:69:58:
c6:20:c4:69:f2:51:5f:19:6c:3b:b6:00:be:18:cf:05:45:bd:
1d:0b:c7:72:ef:20:af:fe:cf:da:4e:e2:d5:91:63:f0:09:47:
82:42:67:99:47:fa:94:26:37:c1:15:12:f5:26:3e:63:8a:9d:
28:52:1d:d7:99:ba:ac:b0:30:53:95:69:98:cc:7a:f1:ff:f2:
eb:24:0a:ff:a0:a5:68:2b:bf:68:90:b6:3f:42:d8:35:38:f8:
2b:7f:4b:55:67:1b:47:63:cf:c2:b2:a2:38:7b:84:30:ee:7b:
01:07:1e:40:0a:a2:89:a1:e7:8b:65:dc:d4:99:57:b1:83:24:
5a:e4:db:83:36:79:40:42:5f:cf:c9:40:62:76:47:04:9c:4f:
6c:e9:72:b6:0a:44:75:05:c4:65:28:52:e8:b8:ed:2a:bb:e7:
c1:bc:31:df:1e:f1:8e:66:7e:ac:0c:10:2d:35:32:d0:6b:8a:
3a:bf:63:02:60:84:19:dd:4d:b2:d4:e8:94:69:26:7d:c2:21:
51:a0:37:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:49 2025 by rpki-client