Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
File: 4XsQ_WB62ScAbGLONWkeuqjwGLU.mft (raw, json)
Hash identifier: GILCGIc0VkUXJWv33dySRJ3F6iqrBksJ0fyKf+9cawI=
Subject key identifier: 2B:3C:5A:D1:04:6D:23:E0:91:34:CF:58:F6:1A:C5:43:C8:C1:CB:A5
Authority key identifier: E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
Certificate issuer: /CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Certificate serial: 0194BD8556982BD62477D36B5FE9EF16B5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: 4XsQ_WB62ScAbGLONWkeuqjwGLU.crl (hash: zYNCjnYgPBwA3ARIDhaJQeQlEk2Jt6/OTP6yTFhwoK8=)
2: AG6ksP0tzcHHRqcuNe-hk9nPNdc.roa (hash: 4Pxy9edWR16JJVWSm9ebgWIqidAnxsMd1sHHOAlque0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:56:98:2b:d6:24:77:d3:6b:5f:e9:ef:16:b5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17b10fd607ad927006c62ce35691ebaa8f018b5
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=2b3c5ad1046d23e09134cf58f61ac543c8c1cba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:be:61:6b:fc:18:d4:5e:69:3a:1f:5a:9f:9c:
f1:d8:7c:59:5a:15:1b:19:19:b8:09:c4:07:e5:b1:
eb:29:de:69:c5:3b:f5:a5:b4:e6:6f:8a:0d:40:36:
8a:47:64:eb:45:c2:b4:02:6e:d6:67:34:1b:98:04:
59:2c:98:b0:74:0b:c2:14:a9:4d:52:f4:63:54:27:
35:e4:00:53:c9:d9:3c:46:77:b6:ad:5b:2a:98:57:
5e:cf:90:97:00:50:0b:9a:e2:71:c6:cb:f8:d4:2c:
d5:f8:42:b4:70:93:ea:34:6c:ad:66:fd:ef:eb:c1:
50:cf:91:1b:74:e7:68:59:bf:82:c1:19:45:84:d5:
23:38:d2:cd:67:6b:7e:38:22:68:dd:82:a5:04:74:
f0:66:d4:82:0a:39:62:2d:0f:dd:81:c1:20:9b:49:
66:05:66:2a:ee:e9:04:63:ef:f7:a9:2b:56:6e:04:
35:96:ff:fe:92:72:61:45:30:5c:6b:05:76:80:f1:
90:20:08:a2:31:91:ee:6f:26:6f:b6:8a:d6:39:38:
68:66:16:d7:00:86:81:66:ff:39:d7:96:60:19:63:
da:d4:6a:89:ec:31:cc:62:c1:b5:e3:86:5b:e5:8f:
c5:ab:17:ff:c3:11:84:a6:93:f6:86:99:34:bb:be:
f8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3C:5A:D1:04:6D:23:E0:91:34:CF:58:F6:1A:C5:43:C8:C1:CB:A5
X509v3 Authority Key Identifier:
keyid:E1:7B:10:FD:60:7A:D9:27:00:6C:62:CE:35:69:1E:BA:A8:F0:18:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XsQ_WB62ScAbGLONWkeuqjwGLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8432ed-2c97-41d3-926a-6a4d04ba5898/1/4XsQ_WB62ScAbGLONWkeuqjwGLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e3:52:99:92:aa:57:66:f7:0a:f0:c3:78:cd:07:60:28:50:
d5:90:1a:02:3f:66:b9:1b:89:37:56:a7:45:08:11:4d:36:73:
6f:97:0f:05:5c:6e:02:25:92:86:88:2d:87:1b:ba:5c:3d:e4:
35:8c:d5:93:d9:88:6c:01:ae:c1:ac:1c:c3:94:ea:aa:38:3e:
62:df:4b:a4:88:61:8d:08:ac:43:ba:f0:c9:15:29:52:8b:44:
bd:f6:b7:b8:a1:06:85:64:c0:e0:e5:a3:88:be:a7:49:eb:fe:
88:c8:3f:d6:10:40:23:fc:f4:22:48:a5:9d:6e:d4:89:88:25:
8e:56:f5:39:c4:fb:35:b9:e5:9e:6f:70:5e:7d:42:36:b1:10:
92:74:f0:dc:5e:12:24:8e:7b:c7:f1:6e:87:58:96:c3:4b:d3:
9d:f8:a3:9c:2b:c0:a0:81:53:3b:a9:e2:44:83:9f:f1:a1:ed:
45:43:e5:9e:0a:ae:04:0b:57:f6:f2:a0:f3:eb:c9:3e:13:a9:
c3:81:2f:4e:51:49:47:14:ce:70:9d:71:21:6c:28:3d:71:ba:
48:2d:5c:81:9c:89:69:cb:f3:9c:a0:a1:27:05:2e:6e:e2:a3:
99:57:48:11:d2:de:96:36:a8:f9:ec:e4:68:cf:3d:22:6f:2c:
43:3b:45:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:59:10 2025 by rpki-client