Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
File: 4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft (raw, json)
Hash identifier: dDzJnE4Nm83m6yPubYMWY0PPX9BxSkKCWfao8xrcZGM=
Subject key identifier: 4E:11:86:CF:AC:8D:CA:C9:C6:50:D4:95:12:DC:A3:0C:86:96:8C:D7
Authority key identifier: E2:AD:1B:50:37:7D:7C:07:5C:64:D0:09:F4:0A:30:FE:72:90:68:7C
Certificate issuer: /CN=e2ad1b50377d7c075c64d009f40a30fe7290687c
Certificate serial: 0194BBCEFFAB277149C4D2785EE5E7886B86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
Manifest number: 11CF
Signing time: Fri 31 Jan 2025 10:01:32 +0000
Manifest this update: Fri 31 Jan 2025 10:01:32 +0000
Manifest next update: Sat 01 Feb 2025 10:01:32 +0000
Files and hashes: 1: 4q0bUDd9fAdcZNAJ9Aow_nKQaHw.crl (hash: pDjilKsoGs2ESRfz5hTJcNHNQ5x7dLD3TNo83kRRFL0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ff:ab:27:71:49:c4:d2:78:5e:e5:e7:88:6b:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2ad1b50377d7c075c64d009f40a30fe7290687c
Validity
Not Before: Jan 31 10:01:32 2025 GMT
Not After : Feb 1 10:01:32 2025 GMT
Subject: CN=4e1186cfac8dcac9c650d49512dca30c86968cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d4:5f:5e:d6:b3:f2:cf:a3:4d:0f:46:04:f7:
d4:67:e7:6e:4b:50:f1:b0:9d:55:60:9a:3b:3f:28:
e8:1b:b4:cb:80:d1:03:1b:3b:4f:1a:ef:34:15:8f:
29:8e:9c:4b:d9:93:45:c4:a7:6d:7c:b8:31:8c:97:
02:a8:32:ce:8f:19:3e:dd:ca:eb:61:c7:f7:9c:c4:
b7:d2:be:1e:4e:0f:ef:a7:0c:1f:15:95:33:99:e5:
9d:f6:2d:1d:d1:a0:cf:58:b1:25:a2:db:4d:0d:97:
71:de:d1:22:56:ef:87:9d:d2:a0:68:f4:d2:ed:2e:
f8:d2:eb:ef:b3:68:2e:b5:33:70:19:ca:c3:42:56:
a8:8a:ee:bc:5e:ba:be:cc:49:3e:9b:05:e4:d0:11:
0e:3c:01:a2:93:15:e9:34:51:a5:4d:d8:1c:bc:00:
95:5b:d8:46:9b:3f:27:f5:ce:ec:0e:51:4c:56:a1:
ba:6a:27:c6:dd:b0:71:b8:7f:e5:79:49:2b:6c:b0:
cb:58:4f:34:cf:1d:b1:c9:9d:91:ff:d5:f1:ed:b6:
8e:aa:e5:b4:a9:ec:40:e3:b7:7a:64:04:e5:64:74:
49:0b:4a:5e:42:c7:4a:cf:94:5f:31:24:db:49:d5:
b6:f4:0c:79:91:c6:59:0c:1b:c6:c1:ec:c7:0c:02:
ed:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:11:86:CF:AC:8D:CA:C9:C6:50:D4:95:12:DC:A3:0C:86:96:8C:D7
X509v3 Authority Key Identifier:
keyid:E2:AD:1B:50:37:7D:7C:07:5C:64:D0:09:F4:0A:30:FE:72:90:68:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8f597b-3928-4a4d-8325-73f1ab5cae96/1/4q0bUDd9fAdcZNAJ9Aow_nKQaHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:07:a2:1b:ad:72:76:c5:a4:f4:b0:8c:d7:3b:d3:f7:cf:39:
5f:5e:cb:85:08:6a:62:2f:b9:21:b7:d4:dd:ed:14:de:b6:36:
30:98:81:d6:2c:29:17:ff:70:ba:89:4c:0b:4a:2e:22:2d:6b:
a5:be:fa:7c:79:ac:95:0f:d1:3a:91:b2:55:99:18:89:58:c2:
61:4a:27:1a:07:fe:e4:d0:6f:bc:38:20:d4:06:60:e6:f3:b6:
21:70:41:5c:d6:b3:47:f1:fa:89:7e:61:eb:5a:8c:ca:5e:3f:
5c:a2:ba:31:6c:4d:16:c2:29:d7:85:16:37:0e:b4:09:ed:f4:
da:7b:55:fe:56:36:ef:72:b2:96:a0:d2:0b:c3:58:95:bd:a4:
83:e3:f7:1d:77:12:34:b5:61:ec:cb:ce:dc:9c:01:a9:2f:18:
26:af:03:e5:c0:de:f9:f9:d4:42:f1:7d:f5:63:f7:2d:8c:65:
42:f8:25:b5:28:80:6a:0e:56:20:0a:f2:72:e6:1b:ad:fd:6d:
33:48:4c:6a:03:2f:40:a1:c1:77:37:41:5b:4f:60:b7:86:2a:
d8:17:11:86:f8:18:1c:1d:fe:17:b5:6a:c9:88:73:55:77:ab:
bf:2a:e7:0a:8c:c0:31:ee:8a:cc:81:74:11:14:c2:13:d8:42:
8b:00:04:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:27 2025 by rpki-client