Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
File: 4Zd4WdBx9xUIN7KstDU_8z79gxw.mft (raw, json)
Hash identifier: M6s0WSijkhVUmMWfIT96eBWmYxjWzlW0rfX2t9Ry7+w=
Subject key identifier: 0C:03:70:CB:DF:94:49:3C:66:B6:89:E2:50:ED:DE:58:11:37:0B:E8
Authority key identifier: E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
Certificate issuer: /CN=e1977859d071f7150837b2acb4353ff33efd831c
Certificate serial: 0194BD4EBE68A4947ED6830665FD7CA198F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
Manifest number: 11FB
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: 4Zd4WdBx9xUIN7KstDU_8z79gxw.crl (hash: KGECRlr7Jo7BL3keFE7BGX1KCuWCjVnKIaIXh6DMPB0=)
2: yF44GfEIvZjG1b-fqxz7IcsVaik.roa (hash: Nr6aX1S4xhUfVJHe+PzjETZYUXFy6RKCIH4m44as1jw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:be:68:a4:94:7e:d6:83:06:65:fd:7c:a1:98:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1977859d071f7150837b2acb4353ff33efd831c
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=0c0370cbdf94493c66b689e250edde5811370be8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c6:cf:f1:2e:ce:76:dd:f1:c5:ae:f7:7a:4b:
88:c4:32:e3:a0:80:c2:e1:29:be:93:2e:b0:57:04:
d7:69:c5:90:b0:69:18:30:23:a5:66:d0:e5:65:3b:
09:14:4c:dd:61:5a:b8:d3:08:f3:da:07:12:dc:ad:
a7:18:0f:d7:3d:0b:dc:07:95:af:22:69:18:82:9a:
70:da:63:45:f2:0d:81:68:8c:e8:16:71:ea:10:00:
8d:3d:bd:ff:e6:81:7e:a4:b7:9b:4d:e9:70:03:0a:
be:4d:21:d0:09:ff:ff:db:07:a9:d0:4b:04:38:1a:
76:3c:f4:4c:da:75:9d:9c:c0:08:83:f9:b1:c1:d6:
32:24:78:56:42:17:88:dd:87:b3:77:ca:93:7b:da:
ad:26:19:0a:d4:15:27:7b:51:d2:b3:a9:15:19:b1:
d3:ca:0f:38:57:59:b1:2a:e2:a7:5a:df:b6:ba:68:
2d:cc:bf:16:85:8e:84:6a:aa:c0:31:9f:4f:86:83:
ac:27:77:1c:e7:68:16:1a:01:82:4d:52:08:85:d1:
c2:0b:ae:d1:e9:21:07:c2:0b:4d:3f:cb:db:dd:41:
12:aa:39:1f:32:85:7a:4c:0a:f4:d3:ef:e8:75:90:
13:95:26:d5:0a:33:58:5e:68:22:e7:8a:f9:a1:a3:
ae:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:03:70:CB:DF:94:49:3C:66:B6:89:E2:50:ED:DE:58:11:37:0B:E8
X509v3 Authority Key Identifier:
keyid:E1:97:78:59:D0:71:F7:15:08:37:B2:AC:B4:35:3F:F3:3E:FD:83:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zd4WdBx9xUIN7KstDU_8z79gxw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/9d7cd7-ee63-4886-8fe1-b5ce6b6fd4d1/1/4Zd4WdBx9xUIN7KstDU_8z79gxw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:d0:73:9b:9f:f0:40:9d:38:08:de:a2:d2:5d:5c:4d:4b:f3:
5a:89:89:e6:34:71:53:17:ad:fd:5f:ca:c5:df:16:36:e4:53:
c1:66:70:96:7d:1a:e9:c9:81:83:d2:17:bc:2c:18:f5:d3:6d:
d9:ab:17:fb:a7:78:d1:33:6e:b1:9f:f5:27:03:f9:20:a5:20:
4a:d6:6d:b8:6d:66:29:a3:e3:4b:35:a5:9c:59:32:da:81:6d:
ba:ea:5c:78:2a:6d:53:7b:5d:65:db:80:b4:43:15:03:e8:da:
f8:f8:7c:5b:de:6d:31:a5:8d:1f:86:ff:b5:24:52:e0:6a:cd:
a6:7f:37:41:b9:ac:66:64:50:75:cd:e9:ad:01:54:0b:01:42:
af:53:d4:00:45:bf:4c:cb:7a:8c:32:81:6d:60:79:4d:86:d4:
a5:45:47:bb:30:1e:80:8d:30:d8:e7:57:c8:15:0e:db:94:d1:
03:ad:b8:5f:22:cd:8a:cc:91:59:a9:a2:b4:73:ba:6f:48:ec:
57:45:82:5e:4d:20:c5:fb:0e:8d:3f:94:0a:d1:13:e5:c3:1d:
a1:b8:de:3a:8f:56:61:ba:00:c0:be:28:e9:18:81:36:1b:c7:
85:42:bc:b5:17:de:b6:dd:26:40:11:ca:e9:44:4d:27:9c:7a:
42:6a:27:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:45 2025 by rpki-client