Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
File: 4eHrAgq2pUL2C1hXaYctnwYXryY.mft (raw, json)
Hash identifier: owcBbwGk8QFUYhqm4rN9UwfEFqL+WqyNze97dFHZ85Y=
Subject key identifier: 2D:EB:A2:DD:65:90:B3:6A:14:C4:75:42:F1:A7:FC:86:AB:75:AD:D0
Authority key identifier: E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
Certificate issuer: /CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Certificate serial: 0194BBCE71D82E0FEC091F9AD6FADE41C2E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
Manifest number: 0639
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: 4eHrAgq2pUL2C1hXaYctnwYXryY.crl (hash: GXb12wEm+O2OXSGSUfCDGRxVQSOSj6oxbeRkaLmj2Wk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:71:d8:2e:0f:ec:09:1f:9a:d6:fa:de:41:c2:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1e1eb020ab6a542f60b585769872d9f0617af26
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=2deba2dd6590b36a14c47542f1a7fc86ab75add0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:b9:7e:91:79:24:20:05:7f:48:35:b0:85:
23:11:b2:0d:48:7a:7c:07:34:b4:d6:9e:78:d3:aa:
06:57:aa:2a:57:69:f9:5c:50:71:5b:e4:91:ec:66:
ab:4d:33:f8:48:06:06:53:fc:47:8e:ad:74:23:8e:
22:99:37:bc:87:a5:07:9c:c4:07:c7:78:eb:62:ba:
9a:c1:f7:08:11:ff:e2:cb:c0:9d:66:48:73:ff:2e:
e0:82:87:04:4f:7b:88:87:f8:2d:c1:e3:f7:59:09:
bd:f6:af:7b:79:a2:b8:44:94:a6:05:72:49:d0:32:
8f:b1:53:22:c7:1b:72:33:e9:53:5e:d3:5a:04:b4:
17:56:ed:74:e5:91:09:71:2d:b8:8a:0d:f7:8d:2a:
3a:b2:9e:a2:57:ea:b8:76:af:38:9b:c5:28:5f:46:
45:de:8d:92:1b:e1:67:95:35:49:ce:e4:ba:8c:4e:
98:dd:9b:cb:6b:69:d9:ac:50:76:02:1c:be:d5:1a:
79:ad:b2:f0:c2:0d:eb:54:55:ea:25:9e:31:a6:19:
d6:ab:55:a6:a4:95:60:40:31:f9:32:11:70:ec:d8:
1b:a0:80:79:72:47:4f:19:de:1e:c6:b9:f7:dc:21:
77:bb:bc:6c:7a:c6:4f:8b:c4:94:12:39:4a:de:2a:
19:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:EB:A2:DD:65:90:B3:6A:14:C4:75:42:F1:A7:FC:86:AB:75:AD:D0
X509v3 Authority Key Identifier:
keyid:E1:E1:EB:02:0A:B6:A5:42:F6:0B:58:57:69:87:2D:9F:06:17:AF:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4eHrAgq2pUL2C1hXaYctnwYXryY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/eef369-6b12-4786-97e0-c835e5daaf24/1/4eHrAgq2pUL2C1hXaYctnwYXryY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:79:97:f7:ae:2c:9d:4f:4f:53:bf:6c:f7:ff:a1:92:ca:5c:
b0:1d:3a:7d:40:44:44:d3:1d:07:ce:ea:73:9e:3a:f3:21:78:
23:8b:d0:35:ac:2e:d4:e8:2c:a5:b3:01:19:18:53:80:a9:52:
eb:47:19:ca:61:5c:a0:d9:53:40:bf:86:2d:8d:ed:3e:17:b0:
12:da:fd:c3:ac:de:b0:2e:a2:51:f6:6d:54:e3:6f:52:c2:98:
5d:77:57:a8:b4:49:ac:fd:32:c5:14:7d:46:14:cd:21:14:a3:
b0:94:57:30:7d:1a:65:89:65:3e:a3:5f:6b:b1:75:77:d0:7f:
b2:1e:a4:96:aa:d9:1b:14:fa:82:0a:fd:36:9f:f8:9b:64:06:
ca:f4:4d:98:0f:b3:b0:58:a2:99:90:3d:d4:ab:fc:b3:64:97:
8e:2c:52:d1:bc:bd:25:58:b8:14:7d:56:e8:89:21:cc:3b:14:
0d:1d:7a:c0:f5:c5:a8:39:4d:3f:ec:b4:0d:4a:6e:6e:b1:51:
a9:0b:e8:b3:d6:c1:ab:da:90:fa:ef:12:0e:1d:79:c5:ef:f1:
e5:87:2d:5d:a6:02:82:ca:c2:9a:d3:83:47:8d:9a:cc:2a:20:
24:16:ed:61:ff:35:25:aa:0a:86:c2:28:0e:84:91:1f:aa:53:
70:d7:4f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:59:19 2025 by rpki-client