Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
File: 4cg4iRtR4GfqLr-aRNloAUhWLpY.mft (raw, json)
Hash identifier: 0hW+oFX62389twkTUcVYU0RP59yYP1r5G7yM6uk0BwU=
Subject key identifier: 25:44:9F:20:80:90:35:19:E6:28:00:2B:B8:67:14:06:FB:5C:06:95
Authority key identifier: E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
Certificate issuer: /CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Certificate serial: 0194BD4E40B753CE7D1C5657D1B39876AC69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
Manifest number: 0D52
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: 4cg4iRtR4GfqLr-aRNloAUhWLpY.crl (hash: oWnRV2yRZ1Wip6/WSt274G30el+v30VcJF9BJvOOWJY=)
2: bmdi-xlLqO-hV5jpMLaaLmUh0MY.roa (hash: fx7rUOLjdEuqg3ZsveozXFH6Izun+R1RWfyBZEftQT4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:40:b7:53:ce:7d:1c:56:57:d1:b3:98:76:ac:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1c838891b51e067ea2ebf9a44d9680148562e96
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=25449f2080903519e628002bb8671406fb5c0695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:18:1a:61:37:50:df:90:5a:da:c5:c7:4a:6b:
64:36:01:38:dc:89:f1:59:83:b7:88:d7:99:c9:97:
96:1e:99:70:03:e5:90:a1:00:26:41:88:cb:22:76:
b9:6e:fa:c7:e8:ba:62:71:46:d9:95:42:d8:86:e8:
07:16:2f:ef:af:6c:93:bd:de:9f:ff:ae:0f:da:a7:
65:1b:49:08:bb:49:d2:7d:84:cb:9c:3e:81:9e:8e:
39:91:10:18:9d:37:25:9f:13:c7:0a:8f:b4:13:0f:
c7:62:18:86:b6:52:86:b8:6f:11:9d:ce:19:63:e7:
01:32:59:55:f8:4f:2a:fd:40:85:80:6e:36:6a:27:
e8:c5:66:64:9b:98:53:9b:8e:5c:ae:a1:d5:1a:04:
fc:5a:d9:bc:b8:21:76:6f:7d:82:b3:22:b6:5f:70:
fa:0c:d8:fe:b5:b6:23:b0:21:e7:d3:27:3e:b0:41:
db:56:0d:7c:aa:70:3e:5e:46:63:cc:b7:f5:01:89:
a6:c0:11:19:fd:1d:1e:66:7c:46:45:08:88:34:1f:
b5:6f:5b:57:9a:7c:cb:73:b7:4a:35:63:ed:06:d4:
84:7a:cc:99:22:e7:0d:3e:08:f8:04:dd:76:c8:68:
d6:48:16:1f:d3:46:8f:d8:01:9f:86:17:4b:72:61:
e7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:44:9F:20:80:90:35:19:E6:28:00:2B:B8:67:14:06:FB:5C:06:95
X509v3 Authority Key Identifier:
keyid:E1:C8:38:89:1B:51:E0:67:EA:2E:BF:9A:44:D9:68:01:48:56:2E:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4cg4iRtR4GfqLr-aRNloAUhWLpY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/45d3f3-7eca-4c14-aaf7-15b39134c41e/1/4cg4iRtR4GfqLr-aRNloAUhWLpY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ec:53:c7:ae:99:ec:c4:64:6d:cd:05:de:f9:1a:4f:56:a2:
e4:2f:13:ee:8f:6a:60:e0:ff:35:1e:dc:37:15:5b:f4:18:70:
e1:67:c0:03:06:f9:f2:97:0c:b2:aa:c6:b4:c5:37:16:70:a1:
ba:dc:da:e9:6d:04:39:98:d6:96:fc:cb:3b:ec:85:12:30:7c:
b8:f7:1d:a3:8e:61:85:b2:e2:76:5d:41:cb:b1:bf:fd:1a:e2:
39:f6:9b:8d:c2:65:4f:c9:b0:94:75:9e:49:32:e8:83:8c:37:
fa:10:13:8d:1e:54:29:5d:f4:6e:77:a5:ee:a6:8b:4c:d0:90:
b6:c9:8f:ee:17:9e:06:53:ae:38:12:0d:c8:96:15:04:58:7a:
11:d9:c9:b4:cd:c6:aa:2c:05:1b:3d:39:df:7b:6c:db:36:8b:
35:d9:f8:b5:08:8c:81:ca:ab:9b:70:64:4a:c7:e7:9e:3c:f6:
28:ab:11:2e:57:ff:9c:81:46:b8:e0:00:bd:60:cf:c5:ca:ea:
84:f4:d6:37:98:20:5d:1c:e7:93:74:9e:f6:38:a9:31:1d:b9:
df:63:75:e7:45:d8:31:04:c3:fd:85:3e:b5:ba:de:77:18:83:
46:cd:06:f2:2e:2d:4b:d4:72:b8:4f:41:6d:c4:ef:1f:f9:93:
9a:b4:6e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:29 2025 by rpki-client