Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
File: 4ndTjewu_NLxHMY3GX0dmm_a6dk.mft (raw, json)
Hash identifier: neVLC4hhoJ5kO/1r+qG60N7Wx8/glqZDwiYubLYByRk=
Subject key identifier: 51:C1:A3:C4:C0:6F:85:DE:53:C1:27:DD:35:33:EF:A6:56:BB:4C:BC
Authority key identifier: E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
Certificate issuer: /CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Certificate serial: 0194BD855491B28D77BBF2C548C89F63C87B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
Manifest number: 10DA
Signing time: Fri 31 Jan 2025 18:00:19 +0000
Manifest this update: Fri 31 Jan 2025 18:00:19 +0000
Manifest next update: Sat 01 Feb 2025 18:00:19 +0000
Files and hashes: 1: 4ndTjewu_NLxHMY3GX0dmm_a6dk.crl (hash: c2DLzcSRzcRSMoGrVEo2H9zPMYsaPT9S1UVtaDVd5QQ=)
2: xpTjGvaDmrE51vBsvZPkhJnSBAA.roa (hash: zPC2S238OrSTlovYBC2pTJz8g2QgXZ75DzJUT+2Pm+4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:54:91:b2:8d:77:bb:f2:c5:48:c8:9f:63:c8:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e277538dec2efcd2f11cc637197d1d9a6fdae9d9
Validity
Not Before: Jan 31 18:00:19 2025 GMT
Not After : Feb 1 18:00:19 2025 GMT
Subject: CN=51c1a3c4c06f85de53c127dd3533efa656bb4cbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:88:4c:5e:53:8e:d0:d2:43:c7:03:c5:ec:ed:
c2:3d:3c:f3:f4:78:7f:3a:62:3e:0b:b7:10:f2:98:
dc:f4:d5:74:a7:d8:68:ee:81:42:57:35:7a:be:a8:
81:02:a4:3d:10:6c:bc:ab:f8:95:86:6b:cb:c4:23:
d9:9a:6d:7a:75:82:4f:f3:f0:58:b7:a6:32:ff:8e:
85:56:07:86:a4:f0:15:68:dc:75:a3:5f:67:59:66:
61:d0:0e:81:d9:69:58:0b:47:9c:ad:7f:26:57:a4:
52:90:91:3c:2b:07:8f:11:6f:93:21:03:a5:78:a9:
e8:69:c2:fc:a4:90:c5:c1:c3:d3:50:e7:d1:ed:f6:
84:cd:0a:54:c4:0a:e8:17:e3:80:9a:69:f3:49:68:
27:5c:a2:23:40:49:46:94:ec:9f:25:40:1c:cb:5f:
36:cd:bc:39:2e:19:4c:f3:dc:5f:9a:88:14:eb:34:
be:a7:03:82:06:a0:d1:5f:48:84:a8:84:4b:c1:24:
71:00:20:55:ce:16:53:e4:78:2d:10:fa:60:5c:02:
05:e8:1e:a3:d9:a1:d9:45:7f:ce:5c:de:36:5f:61:
80:35:61:fb:63:8a:9c:8e:e6:81:2b:3d:25:e9:75:
30:e4:50:2f:ba:5c:23:e6:b4:3a:0f:41:1d:3b:55:
26:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:C1:A3:C4:C0:6F:85:DE:53:C1:27:DD:35:33:EF:A6:56:BB:4C:BC
X509v3 Authority Key Identifier:
keyid:E2:77:53:8D:EC:2E:FC:D2:F1:1C:C6:37:19:7D:1D:9A:6F:DA:E9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ndTjewu_NLxHMY3GX0dmm_a6dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a31ddb-1fd2-461c-bfeb-82ee2d2b4289/1/4ndTjewu_NLxHMY3GX0dmm_a6dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:46:9f:76:4c:67:1f:35:70:50:88:57:4f:c6:e0:3a:a1:ac:
47:88:d0:14:43:0a:40:5e:e0:79:40:4d:6b:fe:f4:2f:fb:43:
f9:89:24:03:48:1f:d7:ec:03:ef:5c:d0:4f:fd:0e:d0:ca:59:
d0:8e:14:2f:07:f8:47:ce:be:74:06:20:34:19:1b:80:a1:64:
2d:37:e7:b2:73:e2:97:3f:55:39:9b:22:7f:0f:25:e7:de:a2:
ec:d7:a7:94:14:92:02:03:66:d9:92:a3:7d:e7:9b:82:ed:02:
8d:b0:c8:ac:03:f7:29:98:45:71:c5:5f:af:68:2b:19:07:99:
71:cc:0f:6d:95:84:5c:7e:13:bb:03:27:98:91:f4:c1:44:9b:
d8:bb:dc:68:d8:a7:4f:a3:37:7e:f8:35:d9:86:ab:d1:7c:a6:
14:cb:14:8e:de:4f:f7:b3:7e:31:c7:49:10:b3:6f:5c:a3:94:
55:5c:ed:e6:2f:ce:02:76:39:52:a3:88:f4:bc:15:61:2e:35:
fd:b0:03:be:e8:f8:77:07:69:23:4d:02:e4:ab:14:54:fe:88:
c3:92:3b:3b:64:72:84:0d:32:b8:0f:16:ab:28:39:80:db:99:
ff:a0:9e:50:f4:c0:ad:49:2d:18:bb:47:f4:0d:f8:c1:3e:7e:
83:e0:dd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 01:28:40 2025 by rpki-client