Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
File: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft (raw, json)
Hash identifier: QIU9/O0wmaB4SQ2yGlMFTEgKx6x4Si2vUdXfpEhQ0T8=
Subject key identifier: DB:73:22:8B:EA:BA:AD:1E:E4:09:8E:2C:2E:42:78:1D:0B:3F:35:19
Authority key identifier: E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
Certificate issuer: /CN=e30f8894f308172ace92fbe6052eec23853eadad
Certificate serial: 0194BC72B8AC60BE8578F4B5E09E633DC2FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
Manifest number: 0526
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: 4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl (hash: DD+Itzj34jVeOX2lrLOzRXi4li9kxlRVy8Li6EtHaME=)
2: c0fBmj5scO5bGyjJUPNEWoiJiz8.roa (hash: ysAxrF+4k0JvJ+yBQRYBZ/441fP/ZB0AQyNUuEBiB+Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b8:ac:60:be:85:78:f4:b5:e0:9e:63:3d:c2:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e30f8894f308172ace92fbe6052eec23853eadad
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=db73228beabaad1ee4098e2c2e42781d0b3f3519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:c3:c2:bd:95:7b:dc:e1:e1:4f:de:65:1c:0c:
f0:17:86:81:82:7e:17:4b:a5:d0:ee:57:7b:b8:5a:
36:5b:25:95:0e:49:c7:a1:46:67:73:69:60:f8:c2:
79:0e:7d:0c:c1:10:e2:07:1a:fa:4e:29:92:7f:ae:
02:88:cb:4b:48:31:4e:45:f1:c6:92:ba:ac:ce:d5:
45:f7:90:02:80:df:8b:a6:cc:a3:a8:66:9b:53:e8:
99:ab:fe:f3:15:bd:01:95:b6:6f:1f:01:aa:57:5e:
4c:a0:01:2b:f9:e0:c2:73:0d:0b:a7:e3:ce:05:e0:
9e:63:e4:5f:3d:c6:a2:a4:42:66:12:ae:4d:af:15:
ec:95:93:b7:4a:94:24:c6:dd:8c:91:87:d2:85:34:
05:4d:e4:bc:be:c7:a6:50:af:6d:f4:32:dd:89:19:
e4:c0:3e:66:9f:32:8c:74:13:2f:34:5b:ff:52:da:
80:01:fb:d9:a5:67:1a:84:ca:4c:8d:7b:ce:a3:7b:
9a:7b:5e:9b:e1:97:60:23:2d:38:96:9d:46:89:95:
60:c4:a6:6e:58:f8:e7:d1:9a:57:9c:81:95:25:cf:
92:83:e3:84:c6:09:2a:79:24:af:2f:3d:1e:e2:71:
39:ef:83:c3:96:74:a2:d8:14:a5:f0:b9:0f:b2:ca:
1f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:73:22:8B:EA:BA:AD:1E:E4:09:8E:2C:2E:42:78:1D:0B:3F:35:19
X509v3 Authority Key Identifier:
keyid:E3:0F:88:94:F3:08:17:2A:CE:92:FB:E6:05:2E:EC:23:85:3E:AD:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4w-IlPMIFyrOkvvmBS7sI4U-ra0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/587460-eab7-40d9-a512-3e660d0252db/1/4w-IlPMIFyrOkvvmBS7sI4U-ra0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:5c:de:c5:42:ce:26:1e:f6:8b:c8:44:64:1e:5f:4e:19:64:
5c:88:bf:df:b3:2e:a0:d5:52:dd:39:2d:4d:ab:7b:07:f3:78:
d4:97:24:61:76:82:48:64:ea:ca:b7:0e:65:4d:21:07:ef:8c:
e1:37:5d:3c:4e:41:9a:c5:dd:1c:eb:23:a8:c6:27:50:3c:cb:
ee:c2:64:e7:95:5d:56:8c:27:f3:83:11:f5:5a:b7:4d:49:a1:
19:63:b1:f1:b8:49:3a:cd:aa:ff:9c:7e:73:de:ea:11:ea:50:
6b:43:82:7e:a1:48:30:97:3e:71:2c:24:71:58:05:6c:ef:64:
38:c4:22:0d:b7:84:e9:51:ff:19:7a:e0:0a:9e:ae:48:e1:e6:
49:29:20:6d:2a:a0:c4:31:4b:7e:7b:34:bc:e9:b2:e0:2b:e1:
b5:60:8c:b5:0f:83:25:89:5e:06:b3:79:d9:a2:51:4d:0a:b6:
c3:85:1c:2f:e9:46:e7:a2:7b:f0:1a:e8:7a:5f:66:b9:b4:3f:
9c:81:8f:60:83:e9:c7:bf:28:d0:4f:d9:23:e6:bf:e0:1b:d8:
27:24:0b:f5:f3:5a:b5:c2:e8:f2:25:76:1f:63:a5:46:4b:96:
0e:fb:ad:41:04:fc:5a:9a:e4:41:46:3a:42:ec:2f:df:ef:af:
87:b3:04:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:05 2025 by rpki-client