Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
File: 4GiTQCg3lEieQayGqvpEFPik1r4.mft (raw, json)
Hash identifier: 8rGBRd3+KL3wlBzqskT4nYGpo1mCYMp3POuRVlCG9lQ=
Subject key identifier: 20:46:A8:B4:CE:FC:3C:09:80:09:35:5F:EA:B3:CB:5B:42:F6:D0:DF
Authority key identifier: E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
Certificate issuer: /CN=e0689340283794489e41ac86aafa4414f8a4d6be
Certificate serial: 0194BCA9C20FDC12C0B11EF61C6A6B9240BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:29 +0000
Manifest this update: Fri 31 Jan 2025 14:00:29 +0000
Manifest next update: Sat 01 Feb 2025 14:00:29 +0000
Files and hashes: 1: 4GiTQCg3lEieQayGqvpEFPik1r4.crl (hash: QnmamjAtrgXMIAWBn82za+2BJo5vH1Jd6chsK3QXjvg=)
2: URa5fH07dVIqF3IJwFtjDdus5xo.roa (hash: bQ7L6PdzuMotAJCcbvlg+nm2FLpujqZUwsr24eILLiQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c2:0f:dc:12:c0:b1:1e:f6:1c:6a:6b:92:40:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0689340283794489e41ac86aafa4414f8a4d6be
Validity
Not Before: Jan 31 14:00:29 2025 GMT
Not After : Feb 1 14:00:29 2025 GMT
Subject: CN=2046a8b4cefc3c098009355feab3cb5b42f6d0df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:36:c5:c1:cf:05:15:31:93:81:f4:e0:be:48:
eb:74:f5:27:90:cc:f1:eb:30:87:1b:b9:2f:65:b7:
72:f6:23:68:8e:de:b1:3b:3d:17:d7:a0:f3:4c:23:
e9:e6:61:ed:5d:62:b3:77:03:f1:3d:65:9a:02:31:
5a:51:e8:4f:95:b4:4c:71:77:82:0d:7a:d1:65:fa:
ff:52:68:cf:b4:73:77:b0:ca:8a:e9:3f:f8:f4:07:
51:67:10:d6:6c:4c:f1:10:2b:14:0b:a3:50:23:8f:
98:26:57:62:27:e2:5e:af:ea:aa:0a:7f:e7:c6:98:
d4:a9:c8:d0:f1:2d:77:f9:e0:bb:a4:2f:ee:11:9b:
ef:d2:a0:7d:99:3e:2f:c3:04:1e:2e:dc:91:f3:3f:
e2:77:d7:1b:bb:59:1f:9a:11:e1:bf:aa:0a:3b:18:
ea:c8:69:24:1f:39:e4:1c:76:04:5f:c3:5f:13:59:
89:cf:dc:19:2c:88:5a:ba:98:86:ce:17:1b:39:46:
b4:b6:a1:c3:ef:c6:4a:28:fa:c3:a5:cc:ae:f5:0b:
45:0d:e5:7e:b9:ae:70:fe:21:89:50:db:55:41:a8:
b7:ae:dd:1c:74:de:37:4a:43:78:c9:28:b5:8e:72:
96:be:91:a0:15:37:56:3c:8a:c9:a1:d9:c8:07:45:
97:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:46:A8:B4:CE:FC:3C:09:80:09:35:5F:EA:B3:CB:5B:42:F6:D0:DF
X509v3 Authority Key Identifier:
keyid:E0:68:93:40:28:37:94:48:9E:41:AC:86:AA:FA:44:14:F8:A4:D6:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4GiTQCg3lEieQayGqvpEFPik1r4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/05ab60-dea6-43a3-87ef-7bfaeb195445/1/4GiTQCg3lEieQayGqvpEFPik1r4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:18:bb:69:32:89:a7:13:eb:1b:c5:68:d4:46:6a:d1:8f:db:
03:e9:f4:04:a7:3b:c4:3f:9b:e5:59:f3:3c:7c:39:00:ce:99:
f3:76:e6:72:af:d0:2c:64:5b:a0:09:7d:f3:96:07:2e:0e:cd:
fc:8d:41:37:0b:57:1e:8a:bb:95:64:2f:ba:17:36:8c:9e:3f:
ef:28:04:5e:cd:bb:08:ec:71:41:3f:e4:6c:3b:65:8f:b3:a6:
60:4f:67:a3:43:5e:c6:a5:d6:02:7f:46:e1:2c:de:a4:4e:54:
e9:cb:7a:89:ec:58:df:d2:76:2e:e0:07:3d:c3:d7:3f:15:9b:
e2:27:57:ba:2e:0d:2d:1f:b2:1b:da:1a:ec:0d:58:e4:85:80:
3b:3c:c4:26:db:1c:b1:4d:b2:f4:ec:90:1b:60:82:3f:b1:6b:
c6:f5:cf:94:97:55:32:5f:09:45:3d:ae:b0:c4:cb:1a:a2:ce:
b5:85:88:05:ad:0f:ec:73:aa:35:82:69:53:b9:51:1b:99:18:
e6:c9:b2:fc:8b:9d:7b:d0:00:a0:d2:34:39:f9:1d:fe:73:ab:
0c:1f:51:95:65:b0:7c:0b:55:7e:fa:c8:e1:b3:e1:58:ef:3f:
40:4b:f8:57:5d:f8:48:b2:8a:ed:8c:b2:24:28:f1:0b:41:72:
6e:ae:44:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:32:40 2025 by rpki-client