Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
File: 4tY8oFQoMuZCZPOssVYZki_s-Ds.mft (raw, json)
Hash identifier: SDpC9Wy4dMi3mjQFpZ4wtmW5CSX2NI9+V+hQ8S6Hwos=
Subject key identifier: 05:FD:E4:A8:85:0E:ED:6F:5B:79:44:39:C7:E5:76:E3:92:9A:B4:17
Authority key identifier: E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
Certificate issuer: /CN=e2d63ca0542832e64264f3acb15619922fecf83b
Certificate serial: 0194BCA9F5AEC0D085B5B02D6F8AE0D92FAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
Manifest number: 0D03
Signing time: Fri 31 Jan 2025 14:00:42 +0000
Manifest this update: Fri 31 Jan 2025 14:00:42 +0000
Manifest next update: Sat 01 Feb 2025 14:00:42 +0000
Files and hashes: 1: 4tY8oFQoMuZCZPOssVYZki_s-Ds.crl (hash: OWQWCVXOkCygjkWn/FQGJb2QHBVuN31T17AhH6Mb95E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f5:ae:c0:d0:85:b5:b0:2d:6f:8a:e0:d9:2f:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d63ca0542832e64264f3acb15619922fecf83b
Validity
Not Before: Jan 31 14:00:42 2025 GMT
Not After : Feb 1 14:00:42 2025 GMT
Subject: CN=05fde4a8850eed6f5b794439c7e576e3929ab417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:67:94:49:52:18:05:e2:8c:79:bc:96:fa:10:
21:ee:a3:9e:71:79:99:13:c5:01:fa:16:db:5d:34:
a7:37:c4:f3:37:e3:6e:49:50:40:53:5d:b5:81:1d:
17:fb:55:a3:dc:4a:d5:0b:b5:9b:3b:84:ed:c9:2d:
4b:39:16:0d:fb:bb:97:71:d9:76:da:d3:ce:a3:50:
5f:78:21:ad:88:2a:d8:9c:8a:eb:bb:2e:62:76:66:
65:e3:da:b1:ff:fd:6d:4e:38:6c:88:e2:c1:77:43:
2e:6a:4f:dd:ec:cf:8f:12:37:f1:12:f0:ef:cb:40:
7d:33:df:98:11:9f:19:67:49:fb:d3:4d:ae:4b:dc:
ff:52:ff:d3:07:69:bc:a9:8d:2b:e6:d3:96:49:34:
eb:2d:df:39:ab:26:ae:02:28:42:38:ab:91:34:d9:
b7:4f:9b:93:fc:68:a1:31:67:5d:59:f3:1b:e0:8f:
de:1f:89:18:9d:4c:51:df:b7:b9:76:c1:cc:3f:32:
a7:b3:c5:0c:62:0e:dc:94:f3:60:90:92:0d:d3:33:
e8:08:c2:ea:17:05:1a:11:ba:15:3e:13:64:0a:a2:
3e:65:1a:02:e6:b8:b8:78:b7:7a:a5:31:47:3f:dd:
1e:71:c9:02:7c:e2:4d:54:32:ce:5f:0e:7b:9b:d5:
d1:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FD:E4:A8:85:0E:ED:6F:5B:79:44:39:C7:E5:76:E3:92:9A:B4:17
X509v3 Authority Key Identifier:
keyid:E2:D6:3C:A0:54:28:32:E6:42:64:F3:AC:B1:56:19:92:2F:EC:F8:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tY8oFQoMuZCZPOssVYZki_s-Ds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/aba9d3-9912-4f5e-98da-c5b00cb8d914/1/4tY8oFQoMuZCZPOssVYZki_s-Ds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b3:b0:88:54:ba:54:97:5d:15:7d:5b:c7:64:df:5d:a0:d2:
bd:2d:f5:b0:6a:c0:42:49:59:b7:2b:93:fb:f8:8d:2d:7a:c7:
27:e8:9e:fb:3e:6c:d6:3f:7a:67:5c:47:a7:53:e4:b3:8a:42:
e3:cc:4e:80:f6:d9:df:e7:ca:1c:44:21:7f:da:43:12:da:6f:
e0:5b:6f:ef:9c:51:be:74:a9:c1:aa:71:21:df:4a:9f:b7:ca:
a3:6d:4a:4a:31:d8:e4:d7:31:3f:85:09:a2:94:82:18:6e:f2:
f9:87:60:d2:5c:f8:b0:28:83:ad:73:b6:fa:fb:0e:ed:6e:b6:
0c:69:7f:ba:39:2b:45:b2:b5:40:ab:a1:d7:a1:94:b4:d6:22:
da:62:2c:df:9c:da:b8:b4:de:7b:c9:cb:04:ed:14:40:b7:a9:
ca:5f:e2:68:8f:47:4f:f3:f4:d0:81:90:b5:94:47:cb:8e:dd:
25:f4:a0:09:44:b3:d3:75:57:91:6b:80:eb:d8:86:30:de:99:
2f:3c:84:a3:c8:ba:c1:74:c7:d8:54:d3:be:c2:9e:cf:f6:57:
4a:e5:82:72:8f:f8:a3:d4:05:af:c6:ea:39:78:72:c4:3b:40:
7c:2b:9c:f3:82:99:f6:35:26:c5:fa:6c:74:90:4d:d6:60:1c:
95:b8:9b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:21 2025 by rpki-client