Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
File: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft (raw, json)
Hash identifier: wtLEgeMl21LTGKaP5KOPUoOHWqskk4SItaG4fsLU9yw=
Subject key identifier: 4F:25:86:4B:0D:75:D8:6E:6A:35:15:AB:1F:25:96:54:3E:74:2D:92
Authority key identifier: E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
Certificate issuer: /CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Certificate serial: 0194BC72B04081146D04562867FE1B15496E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
Manifest number: 0D69
Signing time: Fri 31 Jan 2025 13:00:20 +0000
Manifest this update: Fri 31 Jan 2025 13:00:20 +0000
Manifest next update: Sat 01 Feb 2025 13:00:20 +0000
Files and hashes: 1: 4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl (hash: L32MGP+ZkJ1lHjDYRUUfblW5a/2OX0rbLvhxFHm8dbQ=)
2: GLpHbmgk_HKZm99_6XW1zFhPnQ0.roa (hash: L9ftFB4BS92bIq/ClzkGPs+4wSqKQ5UFQA3ipP2ayPk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b0:40:81:14:6d:04:56:28:67:fe:1b:15:49:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3ea14d1343b992506bee6c3d90e19a69798b018
Validity
Not Before: Jan 31 13:00:20 2025 GMT
Not After : Feb 1 13:00:20 2025 GMT
Subject: CN=4f25864b0d75d86e6a3515ab1f2596543e742d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:2c:08:41:31:48:da:7e:10:ed:c4:dd:7d:7a:
87:e7:2a:cf:0f:bc:9c:a6:c8:cd:66:e1:f3:30:82:
f5:15:eb:08:5a:71:d2:be:d4:c1:b7:d1:ad:da:6e:
2b:11:27:3f:33:ea:47:77:52:dc:2e:08:94:a8:2e:
31:41:b3:d8:39:4c:7c:f4:e8:09:fb:f7:38:b1:ba:
04:b9:08:50:76:08:78:85:97:1a:91:2b:53:b7:96:
33:8f:c8:34:f2:7f:05:e3:91:dc:8f:85:c7:7b:f9:
73:7a:11:8b:44:88:c3:9e:72:cf:a9:b1:a6:e8:d1:
1f:a3:16:ab:62:e4:ce:a6:c2:bd:e3:5a:77:9e:29:
d7:78:1d:fc:91:a8:85:4d:85:46:97:8b:10:5e:1f:
79:80:a1:12:2b:48:89:b1:f4:46:eb:7f:75:e6:39:
b8:be:c2:c6:18:8c:e3:2d:81:a6:2c:69:d9:b8:da:
14:17:a2:e3:97:20:21:ef:78:16:54:5a:8a:e0:63:
54:2c:a0:db:9f:b1:e9:c9:ea:9c:ec:f2:59:c7:7e:
6a:94:da:91:56:db:60:ef:88:6a:ee:aa:a1:c3:2f:
95:77:8b:9a:13:f7:db:bd:75:62:15:89:64:85:5a:
7b:e8:a7:94:91:29:64:79:d0:fe:2f:65:d3:ec:86:
53:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:25:86:4B:0D:75:D8:6E:6A:35:15:AB:1F:25:96:54:3E:74:2D:92
X509v3 Authority Key Identifier:
keyid:E3:EA:14:D1:34:3B:99:25:06:BE:E6:C3:D9:0E:19:A6:97:98:B0:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/971558-ed66-4b83-8fa4-d4a4f34717f0/1/4-oU0TQ7mSUGvubD2Q4ZppeYsBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:9e:8c:76:2f:b6:11:5f:6c:f3:b1:57:72:9b:e8:a3:f8:aa:
89:db:a7:8e:40:1a:cd:ca:85:6d:a3:d7:00:77:5e:14:16:67:
74:e2:98:8c:d6:61:c1:94:d4:29:54:45:f6:08:6b:6d:2f:ab:
87:a5:b4:a1:f4:0e:8d:6e:dc:52:83:1b:e4:34:02:03:3c:ff:
7d:01:36:a2:b3:a3:b1:c1:46:50:b1:a5:e2:d4:ee:95:3e:ad:
d3:10:e8:85:bc:68:51:02:e4:8e:94:c3:6b:a5:59:0b:07:98:
2d:49:de:a9:a7:3a:49:e5:45:25:3e:72:59:81:eb:cf:a7:b2:
dd:a8:b8:88:f1:1a:c5:4a:3a:5f:fc:16:c4:01:e2:bf:d9:76:
f6:91:7a:f3:83:ae:93:79:2b:89:f6:48:8e:1c:1b:1b:30:fc:
71:3c:12:f6:35:38:8e:25:ab:76:de:7a:09:f8:f2:e2:2a:ed:
45:ec:f9:1d:f1:96:a6:1b:ab:f9:f7:c0:4a:05:9d:66:84:6c:
37:43:e0:6b:ca:e7:53:3c:76:a7:ed:6e:91:6e:49:a8:0a:26:
6c:ea:f3:5f:16:bc:0e:29:01:0d:d3:14:50:cc:28:2d:d8:55:
35:13:40:39:34:0e:01:96:4f:42:9e:ad:3c:af:fc:d6:59:00:
1d:b4:5b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:48 2025 by rpki-client