Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: 0JvLtNyLFV/vIJA4TgjFGMNLayAvbR7jXQnCZHreE3M=
Subject key identifier: F5:E5:C7:F1:1E:84:2F:12:A5:94:C2:36:5F:56:1F:BC:81:A3:8F:39
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 0194BCA97B54FA0353D31332446E9DAA1BD9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 03E0
Signing time: Fri 31 Jan 2025 14:00:10 +0000
Manifest this update: Fri 31 Jan 2025 14:00:10 +0000
Manifest next update: Sat 01 Feb 2025 14:00:10 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: dlT/6cj+nL86yTUvAF80nknXhlk4wvWFYqEwjdyXxu8=)
2: YqAFoc5kTd7Z4_KKDQIoEbzTXXs.roa (hash: 5bYNmgtpiY7zEyVHWvNikpnw6RjJjGyTau2g1VZIDwA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7b:54:fa:03:53:d3:13:32:44:6e:9d:aa:1b:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: Jan 31 14:00:10 2025 GMT
Not After : Feb 1 14:00:10 2025 GMT
Subject: CN=f5e5c7f11e842f12a594c2365f561fbc81a38f39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:54:7a:1c:e0:28:43:37:96:84:13:c2:a3:4f:
dc:78:e0:d8:17:16:dd:4e:1a:4a:f7:d0:b4:09:72:
63:95:d7:1c:70:a8:21:38:42:dd:c8:be:4e:2e:00:
56:d7:70:64:d4:ee:b8:24:54:91:7a:97:dc:c4:16:
f6:cc:af:57:42:d7:c5:58:e1:28:b6:0d:77:4f:45:
0d:b9:71:fa:75:2c:db:95:02:e7:a5:d0:77:1e:7a:
18:f0:f9:92:c6:03:3a:2d:4e:04:15:0e:ef:a1:a8:
f1:ae:36:d6:17:72:2c:1a:b7:91:13:14:5c:1d:b6:
e6:11:35:6c:db:7d:2d:c0:9e:be:a8:d2:b6:89:16:
dd:f3:5a:0b:7e:84:37:99:62:20:2d:32:ed:28:4d:
a2:98:aa:be:ea:dc:a7:df:89:f9:37:84:82:54:8f:
1f:0a:2e:33:e1:7d:f9:d5:6c:16:e4:cd:b3:48:48:
98:f3:4a:05:e8:b0:ac:65:92:2b:7b:1a:8e:3a:b0:
3e:54:33:d1:59:4c:f9:89:8f:4c:78:81:bc:d4:a4:
2a:fa:15:82:6b:69:fd:4b:db:c8:1c:6b:b8:4f:eb:
ae:93:47:d7:01:94:65:c1:6c:a1:48:21:12:80:da:
7b:26:49:29:c8:9d:a1:ab:8d:fb:32:d5:f7:a9:5b:
d9:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E5:C7:F1:1E:84:2F:12:A5:94:C2:36:5F:56:1F:BC:81:A3:8F:39
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:55:01:b2:be:53:54:c9:d0:ed:f2:db:7c:ff:9c:53:12:ae:
f1:dd:06:20:0e:4a:74:a6:68:de:f2:56:fb:96:5b:34:26:c5:
19:26:dc:03:61:cd:90:e3:05:45:21:4c:d7:9d:82:9a:53:27:
60:48:c7:b2:88:d5:ee:d8:c3:20:2d:f0:28:8c:95:dd:ca:76:
7a:66:9e:de:22:cd:50:20:d5:7e:14:13:83:71:8a:23:b7:b0:
35:9c:88:7e:d0:68:0d:15:f0:d7:48:c7:7d:8d:26:2a:e8:52:
c5:29:be:4a:7c:cb:aa:d0:26:78:3b:a5:27:28:99:4b:00:0c:
1a:9c:12:49:64:bd:6a:dc:71:0e:b5:1f:16:68:73:8a:ae:02:
ee:26:01:dd:b6:8e:7f:39:e4:64:47:fc:f2:12:0d:06:35:6e:
57:a1:ba:8f:66:91:1b:c2:90:9a:53:66:20:7b:80:2f:40:23:
01:0f:72:15:64:ac:37:50:43:aa:c0:fd:4d:bb:e5:4c:02:c3:
b7:c8:8f:da:2d:eb:99:08:8a:f9:14:3e:55:33:c1:cc:03:91:
64:36:a6:e3:62:4c:d5:d3:d2:b1:0f:07:56:9b:83:5f:90:1e:
f8:de:9c:85:ea:99:04:50:28:c6:0a:c3:75:fd:1d:9b:61:c4:
68:46:f5:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:53 2025 by rpki-client