Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
File: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft (raw, json)
Hash identifier: VpodZnwDbqeh9wqYqoqnm92Ll5sxmPXgHP47w8F79zs=
Subject key identifier: AD:51:9B:F4:6F:C0:E0:8B:EB:5E:CA:AC:34:03:3F:5D:0C:60:0F:30
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 0194BC04F905DA0FD15838E1821DC3303584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:29 +0000
Manifest this update: Fri 31 Jan 2025 11:00:29 +0000
Manifest next update: Sat 01 Feb 2025 11:00:29 +0000
Files and hashes: 1: 4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl (hash: xbph4inRAJeEwtvG2WGRK4i0DydQr/WhJ6ephrrwyrY=)
2: E3bOWVadiTMoov1haUFyRTwduJA.roa (hash: sxYsSioAFV3M4+urFT6FLkeq4ts+IfaNfTA80Mu3sng=)
3: qBf7Ld8e0ZEc7SC83qsc-EpQ6wo.roa (hash: 1F0G1lB8+dsYp3xA4GqGoykNUR9+r6OUzve6mTfWaFI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:f9:05:da:0f:d1:58:38:e1:82:1d:c3:30:35:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Jan 31 11:00:29 2025 GMT
Not After : Feb 1 11:00:29 2025 GMT
Subject: CN=ad519bf46fc0e08beb5ecaac34033f5d0c600f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d0:f5:b0:82:c2:67:6b:50:dc:8e:6d:e0:c4:
4f:1b:29:51:ea:8d:9b:75:93:ea:63:12:2d:be:ce:
98:ca:2b:50:54:85:4c:b2:00:d5:90:6b:93:1c:5c:
71:15:56:e0:54:ce:b0:12:33:45:31:50:56:48:b4:
d9:0c:fe:58:f3:c1:c4:f6:63:4c:c2:34:5d:85:e3:
3f:6c:a7:73:42:c3:26:da:76:c0:00:26:f7:0e:02:
bd:37:a1:2c:de:fe:c7:ab:ed:8a:fe:b0:55:7f:ee:
4a:2f:23:c1:93:53:72:39:d3:dd:5b:c8:e6:28:6d:
a0:89:01:bb:3f:d5:2a:ff:6b:7a:d2:f8:f1:79:90:
20:99:8e:28:b7:10:53:53:26:ab:45:b4:d8:5a:ec:
c9:2f:b6:1c:ac:e8:1a:9d:93:c3:7b:48:84:7e:a2:
37:bb:68:85:cb:8c:9f:fc:35:86:2c:d6:8d:df:7a:
9f:37:57:cf:4f:b3:b2:04:4c:8d:8c:e7:57:b2:64:
61:d0:f5:0b:ee:03:e1:6d:92:40:6c:91:47:3f:a9:
c6:45:76:ce:34:4a:51:4a:61:9b:c3:96:68:bf:9a:
41:d4:73:55:8b:21:7b:63:bf:6e:dc:44:1e:89:68:
89:c7:af:b3:10:74:b3:70:6e:7f:bc:f3:3a:79:0f:
22:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:51:9B:F4:6F:C0:E0:8B:EB:5E:CA:AC:34:03:3F:5D:0C:60:0F:30
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3c:fb:96:ba:ba:ee:ff:f9:ae:c4:8f:e5:21:c2:32:eb:be:
02:e6:60:70:80:b0:6f:35:fc:ab:7d:88:98:74:b0:1a:58:47:
ee:3f:c0:62:12:5c:5d:d9:77:84:de:54:46:41:7d:44:9f:3f:
cd:9c:88:55:71:76:bf:f4:53:34:0e:ef:cd:44:6b:a5:6b:73:
e7:b4:42:70:5b:38:de:f4:a4:fd:cf:83:66:ab:74:ad:cd:fa:
97:df:25:86:34:47:ed:3b:92:c8:db:2b:75:af:59:aa:4b:1b:
ba:08:c0:0d:08:4d:5e:2d:96:42:f2:dd:45:1c:ac:da:41:4f:
bc:ba:54:7f:cf:14:bd:6b:32:62:28:a4:1b:db:d1:e0:1e:05:
9e:4b:9a:96:eb:34:69:45:96:38:50:d1:9f:c0:51:1e:f6:b9:
67:b8:88:ac:c3:9a:5c:37:88:42:bb:ec:31:5c:74:be:9d:44:
c4:be:90:f7:75:fc:b8:75:f9:30:f4:f1:44:f9:20:d4:cb:54:
39:c7:15:34:18:37:b2:91:8c:4b:8a:9f:6d:cb:d1:9b:e0:f9:
af:2c:4a:90:97:b4:95:4d:3f:d0:ac:2d:76:c4:67:e8:be:f0:
ff:40:d5:95:e8:a9:13:0f:5e:35:40:89:78:60:0b:34:a3:08:
5a:b6:ca:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:31:49 2025 by rpki-client