Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
File: 4iUB2aQBcJg48z0a4nm85xALPM8.mft (raw, json)
Hash identifier: Oz8SWvO0MM9iOcDhwXANXhXzC2YsHRrIF/QvU0uk0LA=
Subject key identifier: FE:19:FA:C6:AA:C9:7E:3F:7F:C7:3D:C6:1E:4A:2C:4D:63:12:EB:37
Authority key identifier: E2:25:01:D9:A4:01:70:98:38:F3:3D:1A:E2:79:BC:E7:10:0B:3C:CF
Certificate issuer: /CN=e22501d9a401709838f33d1ae279bce7100b3ccf
Certificate serial: 0194BBCEE3BE8C6173E496C94084D408F4F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
Manifest number: 0EA1
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: 4iUB2aQBcJg48z0a4nm85xALPM8.crl (hash: gPocqA11A3gvw+pybRsI1FX7f8VFUZr6k+vrpoZWESo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e3:be:8c:61:73:e4:96:c9:40:84:d4:08:f4:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e22501d9a401709838f33d1ae279bce7100b3ccf
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=fe19fac6aac97e3f7fc73dc61e4a2c4d6312eb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:b7:ba:d0:40:f7:f2:69:c0:b8:33:03:4d:
66:df:fd:1b:70:9f:be:46:a3:58:a1:70:5b:ed:03:
27:fb:e9:ff:66:f7:ff:2d:91:07:ea:67:64:9d:03:
d7:0c:0a:63:27:ce:f3:67:cb:93:5c:8b:55:7a:f4:
35:ce:10:c6:80:b8:73:ea:90:46:5e:1b:7c:69:2b:
d8:4a:00:dd:f8:4b:71:af:99:a0:31:0b:8b:c5:88:
e3:7d:3c:97:db:06:e8:7f:25:48:20:d7:42:e3:b4:
b9:dd:e8:bf:c6:dc:ad:a1:bf:e3:0f:2e:a8:10:36:
07:18:78:1f:4d:b6:06:6d:09:01:ac:cb:53:e1:3d:
42:09:f5:19:06:72:39:86:bd:f8:19:a0:45:0a:50:
29:53:f0:08:37:31:ea:8d:5e:98:6c:86:7c:d1:9b:
af:97:70:b4:19:47:e7:42:41:51:6a:55:d6:cb:21:
3d:39:c5:2f:3b:52:d1:0e:53:d9:5f:dc:9e:b5:d1:
c0:c9:5d:0d:e8:ac:40:0f:72:7b:cf:bf:86:85:fa:
51:18:c5:f4:d1:c4:77:f2:a1:da:1a:bf:b9:f9:53:
73:4d:bd:12:c7:4d:93:d7:67:14:55:53:76:cd:87:
d9:2a:34:fc:a7:4a:41:f3:5e:28:aa:30:71:67:b0:
af:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:19:FA:C6:AA:C9:7E:3F:7F:C7:3D:C6:1E:4A:2C:4D:63:12:EB:37
X509v3 Authority Key Identifier:
keyid:E2:25:01:D9:A4:01:70:98:38:F3:3D:1A:E2:79:BC:E7:10:0B:3C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iUB2aQBcJg48z0a4nm85xALPM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/63fae9-499f-43d5-8768-f9811ee3fa87/1/4iUB2aQBcJg48z0a4nm85xALPM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:c2:c4:e0:2b:e1:b2:90:e0:bc:3d:b5:27:2c:1d:9f:1f:f6:
0a:3d:6a:91:58:8c:ab:74:38:ab:ce:24:2a:1f:4a:ab:6a:12:
43:71:98:0e:43:46:32:9c:84:63:93:d8:4c:34:b2:2c:48:7e:
13:b0:5d:8e:6e:6f:68:a5:98:23:b3:a0:05:c3:81:a7:43:fc:
03:ab:3b:f2:3e:02:28:6c:ad:5e:21:de:b7:40:7e:6e:dd:26:
19:a0:6c:7c:b4:ed:42:fa:c0:3b:07:b5:17:0a:27:69:24:c2:
55:9c:7e:7d:9c:1d:79:6c:c7:09:dc:97:10:f5:32:30:b4:4d:
ea:fa:69:7b:09:29:ab:4d:2e:29:6b:d2:a6:70:1d:80:07:8a:
84:02:f0:21:2e:5b:a6:a0:ad:9c:e5:f9:a0:21:3d:4e:de:d9:
b1:5c:e8:15:f0:2e:23:ac:59:66:51:5c:47:e2:6c:5f:3e:ab:
0e:1a:6b:87:71:89:13:3d:1e:d5:4c:69:ff:7c:91:65:d9:f6:
24:5a:19:89:a2:05:32:82:f4:ef:85:57:99:5f:a6:93:5a:f0:
44:47:8e:c6:fa:b3:46:83:a1:d9:0b:5f:19:b9:5c:9a:63:f4:
d8:cb:d6:77:06:74:4c:41:4a:89:b6:b3:f6:e0:59:5b:dd:eb:
5a:ae:50:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:26 2025 by rpki-client