Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
File: 1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft (raw, json)
Hash identifier: MTNB6MGF0xOBQ8HNPWQd9Jle4AvCtyU/Nzj2ZofExBc=
Subject key identifier: EB:1C:AD:6D:CB:F3:22:6E:6E:93:11:A5:46:84:5F:02:77:34:B4:F4
Authority key identifier: D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
Certificate issuer: /CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
Certificate serial: 0194BD4EB62FC59BDDECA98ACF7A35A63A1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
Manifest number: 0A3B
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: 1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl (hash: WM8p2kBsr+iIZIJGOK3YBjM3o808iEf7wlKcS4pnSxw=)
2: pW4NhKTVrfPynXbLPF5CI2MPfYk.roa (hash: WbDzY2pHEiq4FLUx3TIlRUMJrlB0Z859NRUEutTDHyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b6:2f:c5:9b:dd:ec:a9:8a:cf:7a:35:a6:3a:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d70e0c4b475010a5b42adef333c39bdc1adb9611
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=eb1cad6dcbf3226e6e9311a546845f027734b4f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7f:6b:45:dc:ed:2e:06:1b:70:6f:e3:00:d2:
89:51:a3:61:f8:b1:05:ee:c9:ce:b7:82:de:9a:e9:
00:d9:79:26:6c:02:27:10:c3:d1:62:1a:d0:a0:90:
e7:9f:df:dd:d2:e4:09:bc:cd:f9:f3:e5:f1:8a:82:
25:83:0f:b9:1e:97:0e:89:6c:f0:7a:0a:00:11:16:
5a:03:df:5c:a7:83:ad:cb:62:13:aa:f3:ce:9f:2c:
33:4a:d7:9a:e4:1d:d1:ec:52:8a:78:fc:08:ea:4d:
43:b4:4a:bd:3d:4f:73:e3:1b:05:0d:de:26:da:69:
82:0f:4c:b5:e2:bc:6c:91:48:29:75:83:b4:0f:81:
32:56:3d:83:ef:4f:ac:9d:67:ed:a3:6f:9c:ad:f6:
c1:38:c1:d9:e3:df:c1:d7:c5:56:ca:d2:ff:aa:15:
b4:52:9b:dc:a8:f9:15:da:d5:d4:62:2b:00:4a:46:
73:71:f8:64:2f:15:25:95:9a:bc:d6:7f:a2:62:ed:
b2:17:1b:d9:a3:ad:4e:c0:a4:aa:fe:77:50:83:be:
95:fd:eb:54:ee:d7:e8:cc:57:9e:8c:e1:80:65:8a:
8a:ba:f4:b3:0e:63:04:c2:52:2b:82:ca:78:77:5d:
2c:75:64:63:9e:34:4a:b2:dd:a2:bd:9b:08:1a:b0:
3b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1C:AD:6D:CB:F3:22:6E:6E:93:11:A5:46:84:5F:02:77:34:B4:F4
X509v3 Authority Key Identifier:
keyid:D7:0E:0C:4B:47:50:10:A5:B4:2A:DE:F3:33:C3:9B:DC:1A:DB:96:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e521bf-f8fd-4e39-b6ea-c9738ce5baef/1/1w4MS0dQEKW0Kt7zM8Ob3BrblhE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:c6:bc:6f:be:61:b5:b2:5b:c6:31:01:04:d8:ae:7b:f1:43:
e6:82:1c:9a:cc:03:ef:bb:b9:0d:58:9f:c4:c4:71:fe:ae:c3:
1c:79:ee:c7:2e:5e:4e:06:bb:3c:78:40:ed:e6:14:88:a4:a7:
3a:97:42:66:79:ae:ea:0e:df:2b:65:95:d9:09:2c:84:0a:32:
83:08:d4:01:b2:98:98:06:4f:93:69:f3:a4:f2:ef:08:d4:86:
3d:8f:8c:4d:72:1f:ae:1b:ae:3a:45:47:5b:6e:83:a0:c4:b9:
bf:0f:8e:57:55:45:1e:84:2e:5e:0e:b9:1a:9b:10:a2:25:86:
28:98:1e:02:7b:f4:fc:84:58:19:71:bd:8f:c5:00:12:e7:22:
ab:c6:7b:e8:62:bf:d3:27:d5:b2:c7:f5:c2:1e:58:01:19:b5:
48:e1:c8:ea:60:52:48:9e:3a:04:58:69:c6:46:00:3a:53:e1:
cc:a4:88:55:f0:b4:a1:0d:68:3c:3b:0e:3a:f2:db:15:25:1b:
b2:fb:dc:31:00:0a:4a:00:8e:48:59:af:ef:d8:cd:13:42:7b:
d5:d3:a4:58:c4:69:26:f7:43:d5:57:af:71:23:ea:7e:8a:bc:
ef:5f:93:90:d2:71:61:e5:5e:46:b0:e1:9b:48:be:65:f2:6c:
0f:74:b7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:39:25 2025 by rpki-client