Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
File: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft (raw, json)
Hash identifier: O7BvGe84dzYoduPaTgzY59iyuOVyz1YDB1tJHQUxRMU=
Subject key identifier: 89:05:22:68:40:48:C7:30:C8:4A:05:07:B3:5F:C2:01:A5:EA:1F:92
Authority key identifier: E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
Certificate issuer: /CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Certificate serial: 0194BC3C01DEB7F06AF16A3A0EE83892DE1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: 4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl (hash: Qix8fld5uvOxF/1u1iGI1mhVsug0uHOhYgDZiVwKwRE=)
2: 9wiAjxQ8cKdQoI4k97phXcqjm0U.roa (hash: aw34neSnWmkzi+er/oSuocGYd5WKHEhdmA5jFSEL7u8=)
3: VHke2dRAU413gG-qOq91BqFotnA.roa (hash: tCtViRscoxX/FUXZsRP79cmOS8/23LI5c9CHWFx8Vhg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:01:de:b7:f0:6a:f1:6a:3a:0e:e8:38:92:de:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2454c456ce68ba8fecad542aab9610b1ecc12e2
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=890522684048c730c84a0507b35fc201a5ea1f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:f6:05:77:d0:6b:57:2c:89:26:7d:61:fb:
86:5b:7d:4f:30:05:99:74:4b:de:4c:13:2e:86:49:
0c:5a:b1:a9:48:57:a4:ff:bd:a1:bf:15:33:c6:cf:
31:9b:e0:d2:ac:6a:d0:28:a1:ea:d9:b8:64:d6:04:
38:e6:1c:83:78:f1:62:18:e1:57:98:65:c3:93:c6:
42:3e:33:ad:50:b2:93:f1:82:5f:f7:a7:90:f5:a3:
f7:cd:e2:da:c4:54:3a:8f:f3:9d:6c:75:0b:f9:19:
42:4b:05:8b:3c:02:15:cc:ef:20:eb:44:8e:9e:84:
88:21:13:fc:55:d4:6f:87:15:d3:54:31:cc:84:15:
4a:f8:32:1a:59:05:c5:6e:fd:16:b8:27:f7:c8:11:
e2:a7:ab:4f:3f:cd:3d:17:ff:b5:20:c0:c1:58:18:
00:6c:b7:8b:bc:1c:c8:41:3c:71:e6:39:dc:e4:fa:
43:df:84:e0:53:90:ee:f9:83:e4:b5:f2:5a:9a:a6:
80:ba:bd:2c:d4:0c:40:e3:61:0e:fc:90:29:bd:f2:
bb:1b:b7:b2:f2:8e:ae:92:da:3b:e6:2c:0f:59:37:
bc:c9:1d:85:2c:02:02:fe:49:e6:60:23:33:03:b0:
09:3d:27:69:34:6f:13:62:76:e9:65:55:a2:71:1f:
89:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:05:22:68:40:48:C7:30:C8:4A:05:07:B3:5F:C2:01:A5:EA:1F:92
X509v3 Authority Key Identifier:
keyid:E2:45:4C:45:6C:E6:8B:A8:FE:CA:D5:42:AA:B9:61:0B:1E:CC:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kVMRWzmi6j-ytVCqrlhCx7MEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64ed62-a8ef-4802-a1b4-9f97b0fc4832/1/4kVMRWzmi6j-ytVCqrlhCx7MEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c7:d3:f1:ba:22:bb:2a:d3:03:80:e8:c1:16:28:ef:a3:38:
94:ad:6f:a5:d3:ea:5c:53:40:3b:d5:69:a3:28:88:79:77:f0:
52:42:93:c9:f4:fe:f0:f4:f0:35:0d:63:cd:5c:84:2c:b9:4a:
2b:aa:63:53:69:0b:be:e6:40:79:da:e9:69:8a:6f:76:15:56:
e8:e8:fa:c0:24:1a:ae:34:23:c7:c8:a0:01:96:ea:4d:b3:aa:
7c:fd:10:db:05:6f:bf:a2:f8:ee:59:60:07:93:a9:b5:7d:a9:
d1:bc:07:7e:30:52:01:79:4a:61:29:35:c1:9e:ed:7c:b6:82:
12:11:e8:d4:88:93:30:0d:f1:15:9f:cd:db:7f:d6:b9:41:27:
92:c5:a8:95:9e:ba:b6:a4:e5:7c:16:41:53:d9:db:0a:df:4f:
95:51:89:1a:59:1f:14:ce:d5:7f:89:36:2f:a5:6b:28:2e:e0:
c0:0f:b1:cc:7b:15:f9:1b:74:c9:56:0b:4a:ce:73:da:66:65:
8e:e1:c1:6e:35:9b:f8:fb:7d:d1:19:d4:5e:4c:6d:4d:56:0d:
ed:e0:27:90:d3:74:f8:eb:87:1c:e2:42:34:29:54:14:ae:34:
4c:19:da:ac:e1:8d:84:f7:b3:26:eb:3a:77:06:a4:72:dc:d1:
ee:1a:64:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:40:42 2025 by rpki-client