Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
File: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft (raw, json)
Hash identifier: p+Ll/k4VJpwKktENUglJhHd/YqsxkjbeyQKveI1flL4=
Subject key identifier: 1C:6B:33:A2:F3:0E:AE:D1:2F:82:FE:FD:A5:6D:66:7B:AF:CE:42:16
Authority key identifier: E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
Certificate issuer: /CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Certificate serial: 0194BD8555CF4473F8945722675D030E758E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
Manifest number: 0456
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: 4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl (hash: IOyh0veiZet0R5T+quRQHTVv78sRxmHBYJ6BAdfYOl4=)
2: HYom0-kciwsBpHtG02N8IppZ_kA.roa (hash: gd8Ptnlp+eybQYq2eGs8Iys0wttljsxiJW6GYdz0ar4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:55:cf:44:73:f8:94:57:22:67:5d:03:0e:75:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1151d489b36694192acbfcaa5e0bb46fc9e5be0
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=1c6b33a2f30eaed12f82fefda56d667bafce4216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:81:7c:13:c0:9f:2d:88:0c:42:ba:88:55:37:
bb:d0:08:0f:b5:00:d1:9d:8d:ed:07:39:e2:7a:a8:
e0:9b:1a:24:c3:f1:83:92:1e:b8:75:9a:37:37:61:
f7:9e:e1:b7:c6:72:f0:03:08:01:c9:76:42:d6:f3:
c0:90:72:9f:21:bd:36:f3:0a:85:e2:2d:eb:d3:6b:
c7:de:a3:da:b3:97:a3:6e:b0:c7:03:5e:a0:84:93:
23:28:37:b5:48:13:98:05:ce:4f:7b:c1:27:18:51:
73:18:df:0a:7b:e3:ab:d2:c8:fa:d1:f3:fb:90:1b:
0a:59:64:c3:bc:59:a8:43:b5:bc:ec:53:81:2d:53:
28:dc:8f:14:5d:ff:aa:76:c6:0a:ba:a2:a3:3f:d1:
a8:54:60:4f:78:f9:85:ae:44:c6:31:6a:7a:3c:ec:
51:d9:f5:54:da:cb:ad:04:3c:4c:8f:7e:85:98:26:
14:79:b3:35:71:61:89:72:b4:9e:5a:b8:44:60:10:
63:51:92:0c:e4:0b:85:2b:e6:35:4d:74:1f:d5:e7:
a7:82:95:b3:56:56:0c:09:7a:90:70:38:6f:8a:c1:
52:51:53:3d:d4:07:e6:79:e7:17:23:3b:00:0c:cf:
fe:db:e0:58:05:63:e1:c2:61:b6:5d:30:4f:fb:4b:
86:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:6B:33:A2:F3:0E:AE:D1:2F:82:FE:FD:A5:6D:66:7B:AF:CE:42:16
X509v3 Authority Key Identifier:
keyid:E1:15:1D:48:9B:36:69:41:92:AC:BF:CA:A5:E0:BB:46:FC:9E:5B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4RUdSJs2aUGSrL_KpeC7RvyeW-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e34cd5-011a-404a-9ad5-93b578d18c8c/1/4RUdSJs2aUGSrL_KpeC7RvyeW-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:bf:b5:3a:94:c9:3f:f7:46:8e:b4:09:35:67:69:b1:3f:67:
ee:dd:fc:78:fb:4e:39:48:77:e0:da:b9:a1:e1:f1:25:5e:9f:
39:20:d7:31:ee:d0:42:75:ed:c4:e9:df:54:3b:e4:2a:0c:87:
37:f9:b5:88:b2:d0:58:8c:73:64:3f:01:85:d0:ae:2d:b1:43:
3e:eb:de:4a:27:88:14:91:34:33:8e:b7:0f:43:c5:aa:51:92:
3b:8f:91:56:8c:d2:28:0c:16:ed:85:9d:6d:d9:3f:22:7b:8d:
be:b5:a6:64:a5:85:c2:ad:e5:5d:0d:10:f0:37:bd:cb:d5:a5:
54:bc:08:88:e7:95:53:7f:68:12:07:c8:1d:0b:4b:ab:d9:2a:
b1:c7:a6:59:3a:39:21:ac:33:c9:eb:ee:b9:1e:19:c5:b1:ac:
2d:8d:5c:44:e9:58:00:6b:94:26:4c:f5:34:34:30:c6:48:ee:
85:60:a2:e5:06:68:57:10:79:b5:11:93:2a:3d:df:96:84:42:
e0:a7:bd:86:ad:ee:6c:fc:e9:39:00:41:3f:b0:90:28:4f:60:
e2:7a:88:3e:dc:e1:89:88:2c:05:03:42:ed:98:17:ae:ab:84:
56:76:b5:5d:6b:3b:68:fa:b2:49:86:bf:55:5c:65:10:f3:6f:
6d:9d:f2:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:22:26 2025 by rpki-client