Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
File: 4aWhf1DBNbGFHOwsdrD9cPncx54.mft (raw, json)
Hash identifier: Tlq3ZAF256EVAisphKwXOWlfW9lpw8/jwVPKYpFIU2E=
Subject key identifier: 20:F1:8D:C7:6E:AC:DF:2E:49:49:AD:04:27:2B:83:5B:8D:33:52:B2
Authority key identifier: E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
Certificate issuer: /CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Certificate serial: 0194BBCDC94B4931EDC946188DBB5C606747
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
Manifest number: 02A4
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: 4aWhf1DBNbGFHOwsdrD9cPncx54.crl (hash: +r6GbO8ypldmNqQgHsNX0v8UXfxASPsWss7PnEXkw1I=)
2: hfRFZKITz5hu-gPvGNJloOjkOMc.roa (hash: D3UvYF9mG8nUIanHUFk48MzJyJwGvptN1rrytDvh8Eo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c9:4b:49:31:ed:c9:46:18:8d:bb:5c:60:67:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a5a17f50c135b1851cec2c76b0fd70f9dcc79e
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=20f18dc76eacdf2e4949ad04272b835b8d3352b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:53:2c:5e:f8:58:03:c0:dd:16:72:c8:04:
da:86:b0:c7:b6:71:53:89:67:08:4e:9e:05:3f:14:
42:6d:d2:40:39:92:e8:e1:e9:a7:97:14:91:d3:1a:
10:04:16:ea:a3:eb:c3:80:68:90:a3:8d:8b:d4:36:
5d:3d:cb:f8:2e:8a:48:a6:d1:5d:46:b2:98:6b:40:
21:97:eb:74:62:64:f7:02:a9:5a:6f:d3:12:33:5c:
d6:ba:93:de:38:7e:11:47:c1:72:cd:2c:ed:bd:88:
c0:f2:81:b2:39:44:c7:39:4f:7a:8e:a8:62:9e:cb:
92:d3:dd:ff:70:30:15:7b:5a:a7:73:15:8e:a0:8d:
1c:ce:67:5a:13:4c:53:bc:fb:f7:a6:11:86:73:3b:
03:3c:17:63:87:b1:40:99:1e:27:14:b8:3a:41:c2:
e9:1a:f1:b3:71:11:4a:3e:95:ed:4f:b1:38:09:a2:
59:f6:29:d0:48:07:43:f3:e5:81:fd:f7:38:6b:86:
07:fe:df:ca:9d:04:d5:08:b2:04:0e:8e:8c:a0:52:
1b:48:e5:59:97:e0:88:9e:f0:b9:fe:ed:5f:86:37:
d2:31:3f:c1:e3:4f:32:43:65:dd:b5:ef:59:71:92:
55:82:4c:b7:54:f8:54:73:27:20:3c:2b:53:bf:1e:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:F1:8D:C7:6E:AC:DF:2E:49:49:AD:04:27:2B:83:5B:8D:33:52:B2
X509v3 Authority Key Identifier:
keyid:E1:A5:A1:7F:50:C1:35:B1:85:1C:EC:2C:76:B0:FD:70:F9:DC:C7:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aWhf1DBNbGFHOwsdrD9cPncx54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/f9f8fa-2988-445c-be94-913575c58f4a/1/4aWhf1DBNbGFHOwsdrD9cPncx54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:5a:58:05:ec:86:4a:5f:9a:eb:1b:34:5a:a1:32:ab:47:65:
84:56:04:87:fa:34:28:6b:bc:97:d6:66:97:76:7b:b4:fd:c9:
ba:9e:71:2a:ee:c5:15:d6:f5:b1:7b:c4:3e:d8:ec:5c:8e:a0:
9e:c7:83:76:4b:6e:9c:cc:56:c8:7b:f0:1b:d9:c3:9e:f8:a7:
1c:3f:0b:79:60:c1:88:08:37:37:9f:63:7c:27:49:a6:14:a8:
4b:87:ef:7b:cb:80:67:5d:52:3e:34:a7:da:fb:20:72:59:95:
6b:93:dc:a3:8c:8c:0c:9f:92:40:9f:fc:d6:a0:42:37:68:c6:
7f:c7:70:ac:24:3b:62:43:18:47:c6:33:52:10:b6:cf:b7:89:
00:ca:83:c4:75:68:70:37:42:c9:b0:a7:02:eb:c3:82:ab:d9:
a2:77:00:fb:1b:b7:e2:23:75:72:94:3f:6f:02:e5:49:d4:8e:
05:f9:54:e4:d8:fe:b1:6c:91:73:99:29:af:e2:1b:d5:2d:1f:
46:54:b6:40:59:9a:aa:4b:3c:b9:9e:57:89:a5:c0:5d:44:e0:
fc:b7:9a:2d:3b:ad:e4:e2:03:df:f1:85:67:56:f2:e4:ce:6d:
35:61:22:6c:70:09:4f:43:85:ce:7d:a3:c4:d0:1d:36:fb:08:
04:2b:ea:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:03:03 2025 by rpki-client