Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
File: 4HG570GlOChYzZ7vmKf7nRJqpK4.mft (raw, json)
Hash identifier: K6FrNbRcsIpMI+EW+CprCefH/ijL997C6azASbk0nWI=
Subject key identifier: 72:2C:1E:3B:82:51:13:B9:67:F3:45:23:0E:77:73:98:59:86:04:D6
Authority key identifier: E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
Certificate issuer: /CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Certificate serial: 0194BBCEC32B7F8345C63E397A6A198362CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
Manifest number: 0153
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: 4HG570GlOChYzZ7vmKf7nRJqpK4.crl (hash: UekQhYHZowSDiGwnqxRBMLWc8HI4QyO95rtbnNGmPH4=)
2: YBfLAkuYURNDoMTvjD2hLc0uuNc.roa (hash: gM7Y+qrK9OGNkcbA31bQAYiigRBUM5Di4cIR3nOhPM8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c3:2b:7f:83:45:c6:3e:39:7a:6a:19:83:62:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e071b9ef41a5382858cd9eef98a7fb9d126aa4ae
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=722c1e3b825113b967f345230e777398598604d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:74:0c:31:46:ef:2a:22:58:a0:cb:c8:71:00:
ff:9b:64:03:25:d6:40:84:10:4f:c6:cf:81:72:b2:
28:e4:63:ad:8e:9f:e1:05:a8:d5:b4:88:be:04:a2:
54:56:2e:70:18:90:62:5d:81:6c:d0:4c:ab:c7:aa:
16:22:d4:37:b3:ff:f0:44:9f:f1:5e:64:ce:0b:c2:
33:27:b7:04:93:d7:72:38:f8:47:0d:31:13:a6:84:
eb:fe:cc:5b:94:4b:b1:b5:55:89:7a:4b:29:bb:82:
b7:3b:a8:5e:d3:63:73:b2:a9:41:fc:89:9b:28:f0:
8e:20:b2:b2:9a:1d:b6:c2:31:30:87:95:36:34:30:
fe:f7:00:f8:88:d1:c2:14:05:16:99:df:be:85:f5:
3e:ee:02:e2:dc:0b:66:a5:cf:35:ae:61:59:0c:69:
7b:2d:1b:55:dd:37:fb:e7:ea:26:54:99:74:82:65:
20:60:ca:09:04:82:a6:85:ac:3d:20:e5:5e:a7:6a:
07:aa:57:c5:3d:40:68:d4:cb:c4:46:58:5b:36:6d:
a8:8a:13:d1:2e:f4:16:29:2f:82:fb:dc:5c:36:73:
54:9e:25:e2:ce:f6:0f:31:cf:75:5c:36:19:68:21:
f3:7f:5d:25:c9:3d:b0:31:e6:3d:c6:ab:91:7c:0f:
c8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2C:1E:3B:82:51:13:B9:67:F3:45:23:0E:77:73:98:59:86:04:D6
X509v3 Authority Key Identifier:
keyid:E0:71:B9:EF:41:A5:38:28:58:CD:9E:EF:98:A7:FB:9D:12:6A:A4:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4HG570GlOChYzZ7vmKf7nRJqpK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/b81460-e06c-4352-ab1b-bb380bcabd28/1/4HG570GlOChYzZ7vmKf7nRJqpK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:ca:5e:df:66:bb:e5:29:f7:95:56:6a:4e:5b:66:79:25:d9:
02:3b:c1:cd:75:a5:4e:dc:6a:06:e0:e0:e3:00:26:1b:b0:26:
58:e0:09:fc:88:f2:50:67:e1:18:70:dd:93:9c:ef:45:59:44:
66:35:71:a5:df:7d:20:67:d8:fc:7d:70:db:be:31:57:38:61:
5f:1d:dc:e6:a3:2f:a2:83:df:71:43:e0:34:65:fc:b9:6c:51:
d8:11:3a:77:f2:69:23:37:f5:55:24:6f:21:45:2c:08:1a:56:
43:16:5d:ff:c7:9c:c8:10:53:e4:4d:69:51:fe:07:13:c9:71:
c7:de:7e:9d:5c:01:f3:db:6c:be:36:63:a3:96:f1:17:f9:9c:
9e:7a:74:77:0f:38:aa:a2:fb:3b:99:01:e6:e4:dd:04:3b:95:
0d:38:5a:74:44:ab:ec:84:57:1d:7b:f9:b8:05:7d:1f:87:a7:
a5:4f:7d:3b:66:22:73:cf:41:23:c1:7e:e7:71:f7:bc:f8:c1:
25:33:95:09:b0:f7:32:ee:4e:58:71:f0:f8:f9:88:cf:ab:0d:
a8:64:f9:54:2b:bd:4a:7f:0b:09:60:90:a4:6f:59:00:ad:84:
07:c3:58:4e:6a:33:05:6c:b1:2d:f7:ec:7c:a8:86:0c:42:2b:
59:43:4e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:14 2025 by rpki-client