Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
File: 4rRFsAqGALgzTB06rfHvcZFOaMk.mft (raw, json)
Hash identifier: Wif6ZgQ2a0Jg8ZcV843HndkUo7i/C2UqDywfywXaMFU=
Subject key identifier: 40:85:6F:3E:18:77:19:44:B5:68:60:41:57:A4:AA:02:28:F8:2E:F2
Authority key identifier: E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
Certificate issuer: /CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Certificate serial: 0194BC0515DD480CBB7AF6133E8A00F061D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 11:00:37 +0000
Manifest this update: Fri 31 Jan 2025 11:00:37 +0000
Manifest next update: Sat 01 Feb 2025 11:00:37 +0000
Files and hashes: 1: 4rRFsAqGALgzTB06rfHvcZFOaMk.crl (hash: FaQT3r2qZi67POR5kAEQtmL2pa31Fp9EsZHYuf2L2os=)
2: 8LUgcOoiwyxAy7v4r-Iu6BnRjQM.roa (hash: bhDJBeMXd7WyfIdgyXkUTipM9MJXycedE6ysXMdh0sE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:15:dd:48:0c:bb:7a:f6:13:3e:8a:00:f0:61:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2b445b00a8600b8334c1d3aadf1ef71914e68c9
Validity
Not Before: Jan 31 11:00:37 2025 GMT
Not After : Feb 1 11:00:37 2025 GMT
Subject: CN=40856f3e18771944b568604157a4aa0228f82ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:96:92:01:4a:7c:cf:74:b8:37:23:ae:6d:
71:e8:8f:16:61:f0:a8:08:6f:42:6b:14:74:9d:89:
e4:5c:9d:62:b0:33:dd:1c:05:d2:9e:c8:33:b0:e3:
e8:9f:7b:24:e4:40:56:1d:f3:e8:60:14:ad:52:43:
94:16:a4:5b:be:8d:1c:e3:bc:55:8a:e1:96:7e:f4:
b0:3e:6b:2d:ce:cb:ac:b6:1f:a8:64:24:57:f3:15:
20:4a:fb:1d:e3:55:34:e6:1d:2d:ca:a8:dd:a2:b4:
53:e3:29:7b:a1:21:aa:3f:c8:56:b6:86:08:a9:25:
07:ff:22:0e:77:dd:b8:c9:36:ab:19:d8:b1:dc:4c:
2a:a1:1c:7e:18:73:d5:ed:3c:7c:22:79:1a:07:a9:
8b:30:c0:5e:87:ee:44:85:e9:44:0e:9e:ef:1d:26:
a4:ee:25:6a:93:30:18:86:bb:77:06:6c:97:d6:58:
32:13:e2:60:99:dc:df:42:71:3d:3b:6a:fb:02:55:
a3:ec:e7:ad:7b:10:ac:8f:3e:1a:64:86:f2:ba:53:
bf:be:06:cb:26:5c:a0:6a:87:a8:97:b9:4c:6f:07:
f3:40:be:2b:45:82:1f:4c:a0:ba:06:34:cc:f2:d6:
e7:72:57:4a:a6:9b:17:0b:ea:27:05:00:96:e5:d7:
1c:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:85:6F:3E:18:77:19:44:B5:68:60:41:57:A4:AA:02:28:F8:2E:F2
X509v3 Authority Key Identifier:
keyid:E2:B4:45:B0:0A:86:00:B8:33:4C:1D:3A:AD:F1:EF:71:91:4E:68:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rRFsAqGALgzTB06rfHvcZFOaMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a91afe-9651-4de3-ad88-d8393e185732/1/4rRFsAqGALgzTB06rfHvcZFOaMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:92:d8:b0:42:63:b2:4e:eb:f0:4c:0a:2f:12:64:7a:b4:c8:
9c:31:89:5c:92:79:07:58:c7:d1:ea:24:64:27:d5:66:7e:55:
ab:46:20:2d:6e:b1:b0:f3:c4:62:d0:47:1e:57:ed:76:48:8b:
36:3e:5a:7d:4b:50:a2:bc:18:1a:9b:02:66:67:d8:43:f5:f8:
f4:30:11:62:27:4d:8d:48:38:1f:bc:03:88:87:6a:98:48:2d:
57:15:f1:1d:de:00:92:03:9e:e1:c2:eb:79:18:b1:4e:8d:a8:
92:28:97:f1:7b:a8:09:04:77:61:aa:f5:56:e0:7f:4d:49:0b:
d6:e0:41:d6:8c:e3:e0:f4:7b:fb:11:3c:66:f4:93:65:19:4a:
25:c5:61:45:c9:29:c1:5f:bd:a5:9b:a3:c8:6b:69:e7:ab:cd:
91:b8:53:47:61:b5:1c:d6:89:56:00:11:2b:2a:81:81:72:7b:
17:7f:5d:f9:e3:c9:74:a0:e3:c5:fc:06:42:74:5a:54:c6:4b:
5a:d5:67:0b:c9:ed:01:7b:5d:fb:5f:2e:e5:80:df:d4:2e:74:
9c:ae:41:7e:f3:15:bf:ef:5c:6f:87:34:b6:d9:2f:5f:a2:ae:
26:f2:fa:bf:da:32:1b:00:97:72:8b:e8:4d:c0:28:0c:fa:70:
ac:83:6f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:15 2025 by rpki-client