Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
File: 4iC8RpRTmhUCbsVarRmhK8IUwV8.mft (raw, json)
Hash identifier: r2VYNxIZIz3VvKkr5KZ50o/O4UCwLJlTDThGxndazpc=
Subject key identifier: 5C:5C:50:DE:94:C9:01:DB:69:32:14:67:D2:26:45:09:B5:F0:B8:4C
Authority key identifier: E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
Certificate issuer: /CN=e220bc4694539a15026ec55aad19a12bc214c15f
Certificate serial: 0194BD4E5CFF0391C75FE513DB2DA4ADF102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
Manifest number: 1B
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: 4iC8RpRTmhUCbsVarRmhK8IUwV8.crl (hash: EOReJCcPVK7F4liQCx6MBqyCNv5DCbVsB8lzfpitYgg=)
2: TMvhro726OTEJJjht0Q0a4l2Qas.roa (hash: b1YiQQq/VY4mWfbYJYUD6kOtMlV+ZtaVCwcnWoNMuUw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5c:ff:03:91:c7:5f:e5:13:db:2d:a4:ad:f1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e220bc4694539a15026ec55aad19a12bc214c15f
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=5c5c50de94c901db69321467d2264509b5f0b84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:d6:d5:71:40:48:38:ee:79:6d:1b:a2:90:11:
2c:f3:68:23:30:4a:75:83:33:8f:a0:4d:24:2d:82:
24:84:53:41:1c:3e:d8:ec:cc:4d:f4:f1:f6:93:fc:
05:58:2f:c0:a6:2f:f8:9c:69:0a:ba:1a:81:20:b2:
15:47:67:30:65:69:55:73:38:7d:d7:2d:55:6b:f7:
f4:6d:99:ac:dc:64:fb:c4:d0:49:38:b5:3f:1d:89:
7a:54:9a:ff:d7:f7:50:b4:4c:52:e0:72:f0:94:e1:
c0:1d:2f:61:d9:93:da:c7:69:1e:3d:e6:a8:c3:2b:
9e:b7:22:51:93:c8:8e:54:b6:8e:a7:00:66:69:55:
bb:17:c9:c8:a7:53:fb:52:9f:b2:a2:59:8d:a7:87:
52:bf:76:8f:c6:65:d3:81:02:44:1c:67:ff:a6:20:
42:e5:28:92:fb:81:18:b6:76:dc:c4:a3:d2:5b:33:
7b:60:ae:51:16:5b:8c:f9:61:c5:86:18:74:c7:15:
dd:f4:e5:f9:e3:87:76:2a:94:d2:b0:c5:65:68:71:
18:e5:f1:62:58:24:93:e2:f2:88:c6:d1:af:d8:70:
c0:18:03:be:e5:76:a0:66:b3:02:31:f7:27:49:7e:
47:b0:25:42:f5:36:1b:55:42:f8:3e:8b:3b:94:ff:
bc:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5C:50:DE:94:C9:01:DB:69:32:14:67:D2:26:45:09:B5:F0:B8:4C
X509v3 Authority Key Identifier:
keyid:E2:20:BC:46:94:53:9A:15:02:6E:C5:5A:AD:19:A1:2B:C2:14:C1:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4iC8RpRTmhUCbsVarRmhK8IUwV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/bd343c-b839-4043-93e3-e8d515e4ce56/1/4iC8RpRTmhUCbsVarRmhK8IUwV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:d9:70:fd:1f:cd:e2:6e:d6:8c:e9:25:c9:30:7e:f0:6b:81:
c6:8e:3d:d6:2d:51:46:b8:2c:6d:fa:7d:39:98:7b:53:67:f5:
17:8b:26:9e:8f:67:4a:85:e4:b3:63:7e:86:5b:5d:1d:57:f2:
c2:ac:e8:f5:ad:5a:57:fa:b1:97:5a:15:93:fb:85:7f:59:34:
f6:ca:c1:b1:3a:a3:59:1b:5f:e0:90:ae:79:6e:6e:b3:a2:f2:
45:75:69:c8:2a:46:d3:dc:fe:0b:b3:5f:28:0c:0d:3e:8e:f7:
62:15:c8:f7:6c:3f:68:93:36:cf:69:6b:bd:83:68:2a:30:73:
53:9f:c9:9d:d5:15:84:11:eb:54:ee:04:71:67:f8:95:c2:e4:
3d:2a:0f:9a:2c:6c:4d:c8:08:50:70:9f:69:1b:a5:b3:19:05:
34:b1:d8:c7:4f:06:4b:77:36:1e:48:a1:8c:41:fb:d3:53:c0:
5f:19:6c:68:b4:ba:bc:9d:44:b3:f9:1e:ee:a7:b3:4a:7a:1d:
39:74:7a:ba:35:a7:25:45:a5:50:d4:46:3e:55:b3:9c:3c:d8:
62:45:da:a7:9b:51:d8:a3:e5:12:3c:7f:12:56:d9:a3:42:84:
83:5c:7c:27:b1:37:0d:78:45:de:c5:f1:8b:e6:eb:3d:9f:73:
bb:d2:91:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:09 2025 by rpki-client