Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
File: 4sFE7jL911AT5_G4wtgH09rti74.mft (raw, json)
Hash identifier: Y/G+S6KcJTuHgF6GwMUWWv4tKn9H5roxSCwgrWY0KIw=
Subject key identifier: 4D:FD:EB:63:B2:7E:19:23:A5:BB:15:08:62:79:1F:49:9E:E5:9D:B5
Authority key identifier: E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
Certificate issuer: /CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Certificate serial: 0194BCA9F8CB66AF51040B23854220CA8D8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: 4sFE7jL911AT5_G4wtgH09rti74.crl (hash: /+u/JIl3cZIbmLRO/onpus0ipEaTfqawaYSMKQZecb0=)
2: at7Oxyqw1YSxEoUOaW5RKvIjf0s.roa (hash: yOhpw2razZhrT29WlGA/CY3Yi3Lil58jkjnW17t8rig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f8:cb:66:af:51:04:0b:23:85:42:20:ca:8d:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2c144ee32fdd75013e7f1b8c2d807d3daed8bbe
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=4dfdeb63b27e1923a5bb150862791f499ee59db5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:3b:06:13:26:cf:d2:53:00:47:e5:5c:84:
bb:a0:f7:49:58:f1:cb:9f:e0:0c:38:ec:34:2e:24:
38:18:19:8f:7a:03:12:cf:af:01:e9:ca:4f:ad:d9:
d3:f5:d0:c8:31:72:be:b5:7b:ef:68:ea:e3:19:54:
09:6e:f7:17:e1:a8:b3:f6:71:67:cf:12:05:c3:3a:
1d:99:5b:f1:46:7d:1f:e5:da:e6:74:1e:87:1a:3a:
09:93:9f:d2:1b:1a:7c:44:40:50:16:45:ba:44:8b:
23:b5:a9:f0:f9:f8:f1:73:2b:05:a8:eb:54:a8:09:
81:20:2e:84:7b:5c:6e:f6:73:3c:0d:67:c4:29:1e:
e3:63:48:ff:e4:f6:29:7e:96:e4:df:c8:8f:39:e6:
35:c5:6a:02:82:9f:81:6e:c1:72:52:2e:c8:98:97:
6c:91:92:66:45:60:5f:1d:3e:94:cd:60:06:6c:e3:
ca:0f:31:3f:bd:63:2e:6e:cc:fe:bb:74:3e:4e:90:
2c:87:98:9c:67:ff:e8:9b:1e:e4:99:04:19:ca:80:
65:97:a3:4b:83:0f:2a:46:b7:e5:3c:d2:4e:b3:e2:
8b:1b:f0:35:6b:89:3a:d6:67:ea:31:17:90:51:09:
09:16:c5:5d:3b:19:1e:bc:b7:02:0c:7c:47:f4:f5:
89:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:FD:EB:63:B2:7E:19:23:A5:BB:15:08:62:79:1F:49:9E:E5:9D:B5
X509v3 Authority Key Identifier:
keyid:E2:C1:44:EE:32:FD:D7:50:13:E7:F1:B8:C2:D8:07:D3:DA:ED:8B:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4sFE7jL911AT5_G4wtgH09rti74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/59e14e-415f-401a-adce-e1df45980c78/1/4sFE7jL911AT5_G4wtgH09rti74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:0c:5b:d2:f0:6b:d0:ba:88:88:b1:53:0c:94:04:8b:d5:1b:
aa:e2:bc:d6:97:56:ca:ea:9c:b7:8c:29:6c:3f:44:6c:06:4f:
40:50:e1:69:aa:cd:da:c8:e6:a0:3b:61:ae:01:01:f8:5f:34:
d7:bc:73:57:c4:47:23:c2:28:12:b5:d8:2f:42:e1:5b:6a:57:
59:88:d9:b8:80:c0:7a:99:cf:a6:77:d7:34:cb:9c:b6:6f:13:
c2:44:ca:4c:8a:b6:72:3b:11:17:73:aa:e0:fb:2e:08:82:d3:
86:14:af:fd:b2:13:16:30:02:ac:95:80:4f:07:15:6b:31:a1:
70:91:82:ea:b7:44:ee:fd:29:fc:eb:7f:57:88:ac:e2:ea:2c:
b8:f4:a6:4c:00:69:55:d3:01:a9:36:56:52:4a:b6:d9:76:80:
80:4d:77:52:ff:4f:cb:3a:b7:b8:af:3e:41:7c:43:42:03:a3:
33:af:fc:70:b8:2c:b4:ac:46:e5:2f:f2:2d:58:7f:7f:33:5c:
c7:71:2d:d2:d3:46:d2:bf:3a:16:75:8f:34:96:4d:44:e8:56:
3f:4c:8c:74:de:95:31:de:d8:df:f6:3a:98:dc:e8:14:e4:ff:
fd:1c:d4:89:f1:d1:7d:4d:b5:e7:4f:2d:36:4f:ce:09:08:35:
44:01:c5:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:34:07 2025 by rpki-client