Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
File: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft (raw, json)
Hash identifier: 3LfqfjfLUoKPdVnksghVz96NpjmlhNmLGGbd0OAFEio=
Subject key identifier: AD:96:57:99:7C:25:EF:5E:31:95:E2:74:8C:64:CD:9B:BB:AE:30:5F
Authority key identifier: E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
Certificate issuer: /CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Certificate serial: 0194BC3C3E92AEDF587995B571A9DEE0E351
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
Manifest number: 0AE6
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: 4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl (hash: fo8oGFvTq8PdYaHyJQCyLQ4cWS+JKtio9wxvmrufScY=)
2: Q8-T8rHgFoT7CVxsMFqUQCc8JdY.roa (hash: RshmXbtDnZ3rOqJWlQSI0/TW/t+laA0v6rWUW/sLLhQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3e:92:ae:df:58:79:95:b5:71:a9:de:e0:e3:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e10fbb9b3cd1c216adc699e5edad5f531d9afcb6
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=ad9657997c25ef5e3195e2748c64cd9bbbae305f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:8d:44:46:d5:d1:82:9f:72:f7:49:95:b9:
44:ff:f9:7b:cf:e7:bd:d1:72:f2:f2:c8:eb:d9:7e:
a3:82:67:a7:86:02:b4:0d:d4:83:8c:ec:30:d6:d6:
76:4f:83:39:23:81:31:dd:86:b0:12:d7:cf:c3:92:
5a:60:f6:63:4e:f8:a0:25:9d:f4:f5:61:f8:db:f5:
d7:fb:24:13:9f:9d:51:b4:d9:35:bd:d7:ca:a3:72:
33:03:d5:07:8e:de:55:b9:1b:16:6e:c2:18:5c:f7:
87:e5:39:d9:ba:af:2e:34:ef:b3:1a:0a:66:b3:01:
b2:0e:88:4d:d7:a8:f3:5d:22:a7:1b:ae:b5:ba:40:
0f:29:c7:86:47:a2:94:16:c4:8b:12:c6:84:cd:49:
45:02:86:3f:95:00:a5:77:fd:60:b3:e3:ae:a6:f2:
32:a9:72:cd:23:e0:cc:6d:b5:3e:aa:3b:4e:0a:8d:
f7:cd:47:ab:e5:25:cb:06:d2:25:9f:4b:00:3d:24:
a6:12:5e:3a:b8:97:fd:b4:3b:ff:50:2d:a6:97:98:
f5:bd:de:53:9b:e3:b9:af:4d:9e:5b:51:b0:d9:c7:
cf:45:22:fc:68:50:df:65:a0:76:60:a3:29:43:0b:
2e:97:5c:a3:07:61:ef:7d:36:be:04:42:7c:38:f3:
26:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:96:57:99:7C:25:EF:5E:31:95:E2:74:8C:64:CD:9B:BB:AE:30:5F
X509v3 Authority Key Identifier:
keyid:E1:0F:BB:9B:3C:D1:C2:16:AD:C6:99:E5:ED:AD:5F:53:1D:9A:FC:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q-7mzzRwhatxpnl7a1fUx2a_LY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/83ff8f-16ca-4249-b774-62a28f3e001c/1/4Q-7mzzRwhatxpnl7a1fUx2a_LY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:02:2b:00:1c:62:8e:6d:60:82:f5:0f:37:2f:b7:b3:1b:bf:
a8:85:f6:ff:19:1a:61:78:d8:81:0d:a9:0b:71:aa:ca:14:c8:
5d:5d:36:e7:f6:5d:30:df:90:65:77:2e:2e:03:70:10:aa:d1:
6c:c5:9a:a0:0b:a2:42:fa:39:5a:4a:94:57:c5:a7:6d:c0:2a:
d2:6c:88:57:4f:de:3b:4a:39:23:55:b5:48:c5:45:c4:a7:59:
51:88:d0:df:cd:31:5e:95:58:8a:a9:95:3e:67:54:eb:de:67:
ef:66:69:bc:21:3c:9a:9e:e4:38:af:dc:bd:f3:2b:0b:aa:97:
ed:e7:b3:0f:87:e3:22:0d:87:a9:48:03:80:0d:64:cd:c5:4d:
e1:9b:1c:95:84:fa:f1:e7:3b:c3:06:fe:6b:67:26:e3:07:aa:
28:f8:a1:15:21:a2:15:dd:62:91:53:ba:76:4f:77:86:e7:e7:
68:3d:c5:a0:01:ad:03:6a:88:50:42:c2:3e:a7:49:5b:61:6b:
08:c9:b4:5b:dc:27:6a:34:22:c3:c7:c3:df:f4:b2:eb:d5:00:
1f:47:ed:1e:98:a2:ce:39:24:39:4c:cf:a5:7b:7e:b2:f5:24:
73:d3:59:e5:47:54:cf:0e:1f:bf:36:b2:a6:62:a0:ff:59:3e:
f9:13:f9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:24:36 2025 by rpki-client