Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
File: 4trBUISDJfD3JYcGT4q6N8X_N5A.mft (raw, json)
Hash identifier: xsWVafPhlyJuTk8ngK162gn4nw4nAY5LliH37jOgP+Y=
Subject key identifier: B4:26:ED:AF:83:1E:D8:00:7E:B0:1E:43:E7:E7:D9:33:8F:0D:6D:45
Authority key identifier: E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
Certificate issuer: /CN=e2dac150848325f0f72587064f8aba37c5ff3790
Certificate serial: 0194BC3BD9925D38027764313A7308322FAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
Manifest number: 1011
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: 1tSvH4RNSu7UD2qtT1EWm04Zry4.roa (hash: q0ebmJQY13NuleI4G7DugHjqGoG1SUVW7Ik+sEsmL8w=)
2: 4trBUISDJfD3JYcGT4q6N8X_N5A.crl (hash: TCtugMLkaWKCZVe+JtjBZikzQwKuj4Rt29+ipfu8ad8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d9:92:5d:38:02:77:64:31:3a:73:08:32:2f:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2dac150848325f0f72587064f8aba37c5ff3790
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=b426edaf831ed8007eb01e43e7e7d9338f0d6d45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:b9:04:2a:4e:f0:c5:31:c6:4c:0d:38:7c:
3f:b2:44:eb:f8:66:08:78:28:0a:de:d1:a1:75:b0:
b8:2c:56:db:23:82:86:94:27:91:50:32:4e:53:94:
17:15:28:55:63:cd:51:c4:d0:49:ce:bc:cb:34:85:
5e:61:16:55:9e:57:75:a1:bd:10:5d:28:2c:3d:02:
41:2f:f2:8c:98:d1:bc:42:06:43:65:e5:20:40:49:
5e:9d:86:fe:de:a0:8b:75:1c:d1:7d:99:2d:f3:b6:
fd:8c:fe:3a:9c:4b:21:4c:86:c3:dd:88:6c:7d:e0:
eb:5a:22:d4:3a:6c:5c:40:81:09:c2:2b:5f:24:50:
c8:1e:cf:51:51:42:83:2d:0c:23:4a:54:91:55:5a:
8e:7e:7e:e0:d3:39:94:dd:54:a1:50:a5:b0:74:08:
92:93:ef:30:15:34:b7:c1:a8:a1:d5:c4:af:de:67:
b8:23:8d:0b:24:d0:ec:57:64:55:62:8e:30:95:1c:
0b:d9:4d:07:b0:ee:cf:aa:bf:40:2a:78:86:6a:d0:
55:5b:d6:03:fd:aa:73:8c:06:c1:33:71:03:ab:2e:
92:fa:05:01:c2:37:e5:b2:38:71:a9:10:86:16:46:
0c:97:f0:51:4e:1f:10:48:75:24:e1:ca:10:1c:8a:
36:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:26:ED:AF:83:1E:D8:00:7E:B0:1E:43:E7:E7:D9:33:8F:0D:6D:45
X509v3 Authority Key Identifier:
keyid:E2:DA:C1:50:84:83:25:F0:F7:25:87:06:4F:8A:BA:37:C5:FF:37:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4trBUISDJfD3JYcGT4q6N8X_N5A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/f09759-6ceb-4754-bbe5-3b9e3c53bab0/1/4trBUISDJfD3JYcGT4q6N8X_N5A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:59:80:ab:66:6f:91:63:ff:e1:85:2b:dd:9e:87:8e:d1:90:
e5:a2:d2:2f:7a:6b:96:15:71:f6:b9:cb:48:70:ca:4a:9f:9d:
89:fd:ea:48:dd:59:44:65:93:2c:8e:98:e3:16:61:9b:28:88:
3d:da:07:7e:b3:2c:b8:0c:30:f2:d3:a4:b5:34:d8:05:38:64:
b8:ac:e3:15:71:1e:d1:c0:d7:80:f6:3c:2a:f2:cf:dc:91:da:
0b:34:4a:fa:77:c4:1b:b9:20:e0:d3:e9:68:09:19:e8:65:34:
0f:33:53:0e:f7:c0:4f:03:d4:13:3d:3c:4b:33:23:e3:af:35:
df:ad:87:44:3f:8a:2a:92:97:78:b6:b2:ea:5c:05:5b:da:d4:
6f:a0:6d:54:59:cd:dd:89:3b:00:53:41:d4:fb:91:da:32:84:
7e:35:c1:3b:ae:de:80:f4:f2:f6:35:ee:66:2d:25:c8:14:b3:
58:34:75:cd:d8:1c:cc:2a:05:18:05:dd:e7:00:b2:d8:8e:a4:
2c:ff:78:ad:a0:e3:b0:3e:2a:bd:0e:91:30:4a:4e:f2:64:51:
2a:05:78:29:46:a8:23:ae:ad:f3:e4:ce:e3:a4:23:e4:84:02:
37:cb:12:6d:64:68:0c:fc:4e:be:1d:4d:fd:84:ba:df:40:d9:
f3:5f:9f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:52:14 2025 by rpki-client