Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
File: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft (raw, json)
Hash identifier: uYdFonJ0eZl/cJfCJ9STGt7hdlszfyUluGOEDEQZzZk=
Subject key identifier: EA:EE:34:10:64:57:A9:5F:B7:A2:E1:C0:F3:D6:7C:30:48:B2:0A:10
Authority key identifier: E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
Certificate issuer: /CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Certificate serial: 0194BD857EB0938137E7071451098D1B5A0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
Manifest number: AA
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: 4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl (hash: P+tRg5kZs/BgOnTBZhgySdLxVHXVMYkyXwCC+BD5AKY=)
2: 6ppH0TTYhzfLzHV3xSzl4LSdV6c.roa (hash: OehC5Yx+JGVn7qI8wxptwUUS4CQUtx99kzGyWmtybhI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7e:b0:93:81:37:e7:07:14:51:09:8d:1b:5a:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23f8f5c52425df62b4445433aacfd8ca5bf2e9d
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=eaee34106457a95fb7a2e1c0f3d67c3048b20a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:87:36:09:f7:24:ea:2f:fc:8e:e2:4f:20:3f:
8f:32:99:a5:05:4f:aa:d6:47:94:db:f4:4c:29:45:
e2:b4:73:77:d0:b3:c8:06:09:26:85:5b:bc:84:de:
05:96:40:04:d6:01:a8:a7:98:c7:d4:c6:a9:bb:f8:
46:c0:b1:2d:1a:98:9d:e8:34:eb:81:a0:d9:26:a0:
dd:7e:ab:ec:59:88:fc:f6:ae:b8:99:bf:39:38:6b:
b6:55:c9:87:86:c1:0b:52:89:9f:4c:1f:e3:85:3f:
f3:f7:89:06:e4:ec:8a:93:77:ad:87:10:2c:44:ae:
e0:3f:83:9b:1b:c2:76:40:60:df:23:e9:fe:ed:dc:
34:c9:2a:05:d5:bb:00:f2:8d:2e:cb:9d:cf:b8:8a:
be:a9:77:2c:8d:df:14:b1:94:7a:eb:25:41:26:f1:
2b:52:b2:6e:ea:15:87:e5:a3:ff:5d:3e:f0:a4:99:
dc:d8:4b:c3:6a:62:4f:c3:84:cd:07:1a:26:f4:29:
b7:6c:f5:1b:76:0e:69:0a:a9:ce:8e:69:ef:88:5e:
63:d6:e5:74:bf:6a:4f:f1:e1:11:c2:47:d6:6e:11:
5b:5f:8b:4f:9f:fc:d5:c5:e3:c0:47:49:a1:fb:2f:
4d:4a:82:6f:25:a0:00:f6:b5:a2:d3:c9:d8:f0:f4:
ec:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:EE:34:10:64:57:A9:5F:B7:A2:E1:C0:F3:D6:7C:30:48:B2:0A:10
X509v3 Authority Key Identifier:
keyid:E2:3F:8F:5C:52:42:5D:F6:2B:44:45:43:3A:AC:FD:8C:A5:BF:2E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4j-PXFJCXfYrREVDOqz9jKW_Lp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8f8e84-ff35-49be-8fa2-b6b7481bec9e/1/4j-PXFJCXfYrREVDOqz9jKW_Lp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:c4:4a:99:08:9d:01:82:8a:96:73:5d:47:9c:52:a8:94:7e:
f2:37:fc:90:05:53:fa:6a:d5:68:e9:6d:7b:e6:c5:13:ed:4c:
e4:77:2d:2f:d0:fa:65:2f:df:c1:20:c2:12:09:64:c1:e3:68:
e6:01:98:f5:6d:0b:26:ca:8e:12:a6:ac:65:bb:cb:89:c5:6c:
92:ac:a3:55:09:b7:e5:fe:87:c0:4f:de:66:8b:82:0d:80:e5:
b0:a0:60:e1:5f:92:dc:08:28:b2:d4:a4:7d:76:7a:41:05:64:
34:40:05:8a:d4:f1:35:1f:0a:02:ca:4f:30:a5:6e:73:43:c6:
f4:a7:f0:fe:5f:46:03:69:a8:a3:2c:43:7b:28:8f:bc:f5:b1:
17:39:f2:88:80:d8:37:91:38:39:54:6b:e5:bf:b2:76:54:39:
33:c1:3e:da:66:09:d9:ce:3c:59:ea:5b:b4:f6:65:85:52:68:
f8:0a:53:73:8c:5d:1c:02:3f:10:9b:02:8b:35:1d:6c:a8:f6:
11:0c:7b:03:bd:93:6a:ae:74:fb:12:e2:9d:8c:dd:68:b5:61:
8e:11:08:ea:17:87:78:21:00:cf:29:80:80:00:ff:91:14:0d:
12:22:a8:8e:7f:9a:32:3b:4b:7e:72:66:3c:0e:e8:fc:75:7f:
6a:1c:43:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:36:33 2025 by rpki-client