Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
File: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft (raw, json)
Hash identifier: 0gn2fsy2jnma+7Nezl65GTDTSkX5R+gbJBuQNUom3dc=
Subject key identifier: C8:0B:3F:D8:8A:39:31:06:BD:7E:22:A3:EC:DD:87:6E:87:B9:A9:F2
Authority key identifier: E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
Certificate issuer: /CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Certificate serial: 0194BBCEA957912A3DDD0FBACA9FCAC77436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: 4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl (hash: rduvvtZMzb7KEaVDwjjahpHefM2PPKYis6K+XU3m6kw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a9:57:91:2a:3d:dd:0f:ba:ca:9f:ca:c7:74:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b15bc5b902199eb86d6078c482ededd3dddeb4
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=c80b3fd88a393106bd7e22a3ecdd876e87b9a9f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:47:d4:40:cc:32:d1:3b:57:aa:fe:73:06:ea:
57:a9:ef:d1:0b:96:ec:5d:21:af:7c:a8:dd:d4:3e:
24:9d:30:da:a9:26:ec:8f:f2:51:8d:05:ec:80:2c:
b7:fe:1d:20:7b:71:8d:2b:2e:8c:ea:4a:35:cb:8b:
ab:64:bd:bd:10:13:eb:77:5b:75:03:d4:44:e2:3f:
b7:f2:9d:e1:2d:99:0b:13:67:a2:04:c9:02:0a:80:
49:95:d5:46:d2:7c:8b:d1:f1:b5:95:23:e4:3d:df:
4c:ea:38:7d:98:2c:26:7e:61:f8:b6:cd:02:23:4c:
33:f7:a0:df:32:30:3a:64:65:2e:6b:1d:16:cb:13:
2e:58:65:48:a8:9c:22:bf:cc:a7:c7:bc:ee:fa:9f:
16:1f:d5:85:c9:9e:2f:bb:88:c8:69:6c:04:0a:ec:
f2:41:38:96:c9:f1:35:41:39:5a:39:4d:2b:b1:1d:
b9:a7:9f:32:b2:e7:c6:8c:67:86:75:98:e7:c9:c5:
a2:64:0e:49:d7:6a:56:fd:00:2b:5c:3e:62:43:1a:
6d:8f:34:8f:b8:17:3e:77:9c:37:0f:aa:d4:c9:0b:
d3:e7:b0:f4:d7:e4:e0:be:d9:0c:87:be:bf:ba:b7:
40:24:36:7f:25:07:e8:68:05:08:a3:d0:53:81:5c:
bc:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:0B:3F:D8:8A:39:31:06:BD:7E:22:A3:EC:DD:87:6E:87:B9:A9:F2
X509v3 Authority Key Identifier:
keyid:E1:B1:5B:C5:B9:02:19:9E:B8:6D:60:78:C4:82:ED:ED:D3:DD:DE:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bFbxbkCGZ64bWB4xILt7dPd3rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f6d655-73ea-422a-a963-41a98001cf2b/1/4bFbxbkCGZ64bWB4xILt7dPd3rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:58:75:85:72:f6:64:a3:ac:d7:60:44:5e:af:64:90:b1:ce:
64:68:a8:f7:e6:ab:6c:7d:b4:3f:8b:ec:26:e9:3a:36:61:82:
fd:32:f7:47:13:02:74:ae:45:25:46:39:82:ba:22:c2:e2:85:
27:c2:0a:8f:ff:3f:70:07:b8:8e:dc:b2:cd:df:4b:4c:13:3b:
94:8f:f6:9b:01:01:cf:b4:ad:84:4d:c0:85:8b:bd:49:c6:99:
fb:8a:4a:08:9d:f7:e8:96:0e:1b:68:cf:fd:06:d4:45:a0:80:
03:8f:62:6a:32:6a:56:41:f5:74:5f:3e:00:81:99:e0:b9:2e:
8a:fe:dc:2d:58:f0:ee:3d:4e:8d:a8:d2:66:f3:f1:4f:5f:01:
c6:5b:11:1f:5e:12:b6:6a:50:73:3f:55:f1:07:6d:ba:79:b0:
7b:59:d7:fe:12:3b:12:d9:99:41:db:c0:90:93:a6:2c:6a:3e:
f2:cd:7c:d0:24:58:ec:7e:8a:61:79:20:6b:e8:80:d4:d7:fa:
bb:62:e3:46:24:9d:d9:ad:56:35:de:53:0b:1e:12:cc:f4:04:
da:75:72:e3:70:1d:25:d5:9d:e0:0a:a7:3b:cd:61:79:19:74:
e7:37:de:81:7f:d2:c1:e6:b7:8c:84:4c:6f:25:7f:cb:83:2b:
a4:cc:6f:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:33:40 2025 by rpki-client