Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
File: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft (raw, json)
Hash identifier: s8uHCewG1wjwxBvcq47LZPtYSWXR5/vvpbeBW5OjFT8=
Subject key identifier: C3:31:B2:5E:3C:5D:3D:ED:08:8C:F1:13:50:52:D1:55:23:8E:FA:DC
Authority key identifier: E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
Certificate issuer: /CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Certificate serial: 0194BC3C5084E99BB711C2CE3D330223FEDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: 4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl (hash: P4bURPHdzjIRa0MX+G9kePfQkyzbec4aI62J2KZ6x6Y=)
2: 8eT8mItdm-eFNRvcC95AKoGdkEY.roa (hash: V3x7HEHI2C6TpwyRaJQsDy3CR99xipPFrG4gu0IK5ZM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:50:84:e9:9b:b7:11:c2:ce:3d:33:02:23:fe:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08aadc069555a1abe031fd0a028069c8fb89b2b
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=c331b25e3c5d3ded088cf1135052d155238efadc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:9d:28:37:07:95:ba:c1:2a:fe:43:9d:1f:
ea:a8:7f:7d:8e:17:dd:25:e0:31:52:d3:f9:34:85:
e4:d5:d0:31:ea:43:7c:5e:3f:f0:5a:36:1a:4e:98:
94:a5:cf:29:03:36:34:7c:4c:a9:dc:e2:ae:58:55:
cb:b0:c8:9f:1e:26:5a:5a:92:d8:98:5c:b9:46:75:
c1:02:ff:a7:36:19:0d:95:8c:aa:73:ba:b8:9f:9b:
09:a2:18:9b:ce:99:cd:3a:2f:49:b7:fd:07:5f:f9:
36:80:1b:9a:69:9b:8f:e0:4f:22:6b:87:bb:76:f6:
dc:19:b4:60:43:d0:ec:0b:dc:16:da:2d:17:93:78:
35:ac:99:ee:0a:12:6d:0a:7e:f8:af:7c:bc:60:80:
23:b3:8e:64:db:a0:f9:2f:48:0a:60:f1:56:e3:dd:
8b:05:75:0b:ae:5d:91:97:b7:35:a0:d0:03:9b:a3:
06:51:49:c4:f2:4b:35:19:c6:17:6b:2f:a5:d4:e8:
f5:c7:84:64:a6:56:e5:ea:92:1a:a0:b4:0a:b0:6e:
3f:f4:ff:83:d6:6a:8d:d7:ed:df:dd:4a:22:0c:bb:
41:03:9d:d0:d3:41:c4:31:fb:81:3b:a8:4a:3f:11:
ef:d3:6a:4b:5c:c2:be:50:82:71:af:fc:8c:20:20:
f1:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:31:B2:5E:3C:5D:3D:ED:08:8C:F1:13:50:52:D1:55:23:8E:FA:DC
X509v3 Authority Key Identifier:
keyid:E0:8A:AD:C0:69:55:5A:1A:BE:03:1F:D0:A0:28:06:9C:8F:B8:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IqtwGlVWhq-Ax_QoCgGnI-4mys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/852221-d616-4e12-8fa4-9a72d9903eb8/1/4IqtwGlVWhq-Ax_QoCgGnI-4mys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:05:e6:51:f0:15:ac:39:fc:9d:29:5d:a4:3b:9a:4a:d0:db:
2e:c1:f2:ab:e7:95:4b:97:14:33:9d:5b:01:1a:7f:62:5f:4b:
61:f8:1a:fc:92:a8:c0:4f:31:aa:ea:f4:00:fc:72:08:6e:91:
e8:07:0a:60:0a:26:2a:d0:34:8f:e3:20:e8:a2:ba:46:45:e8:
62:98:90:5c:8c:a5:f9:df:f6:53:9d:65:03:92:47:88:97:47:
61:df:b6:0e:f0:50:e5:69:a7:3d:28:d4:34:7f:ad:dd:2c:f6:
b4:31:04:db:20:bf:60:01:88:9b:5d:50:40:29:60:a5:b4:26:
ce:60:f5:2f:f0:b9:3c:01:f6:02:8b:dc:59:ce:4a:79:a3:36:
8f:bc:41:33:44:2c:32:72:1c:ee:00:f7:31:53:ce:33:82:16:
1e:04:70:2a:f8:31:cd:48:6d:6d:40:8c:2e:a8:47:bf:50:4b:
1c:ca:7e:2a:9e:5a:a4:d9:91:bc:dc:47:9c:0e:88:18:91:e4:
2f:24:d2:1a:04:a4:de:d6:c4:06:46:75:14:a6:a0:2c:46:3c:
a2:87:98:39:49:22:3a:9d:e1:12:42:fe:f1:c9:60:90:35:02:
02:5c:32:b7:76:3b:6a:8a:e5:98:6b:4b:5a:28:b1:7e:65:e7:
f4:67:c7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:00:32 2025 by rpki-client