Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
File: 4KACksKhBiuzKYCjxEP_84OkEAI.mft (raw, json)
Hash identifier: V414gLgVv00oGkmGaiCwIDldTsx/tF8360AoLbDkvjA=
Subject key identifier: 1A:FB:06:16:FC:C3:C2:FA:2F:BC:84:3A:45:6B:1F:59:50:D5:74:83
Authority key identifier: E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
Certificate issuer: /CN=e0a00292c2a1062bb32980a3c443fff383a41002
Certificate serial: 0194BD175959E7B519005C44ED4FA39F66D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
Manifest number: 07EA
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: 4KACksKhBiuzKYCjxEP_84OkEAI.crl (hash: QrZLzQOUUvmwyzH7LWuStOfWjZKOZC/oxBciif14RJI=)
2: mSKL5dZ-DfhQmd3vDgNujHfDeWQ.roa (hash: kM0tftmTBoswJU9/17L/nHsaIm00B47zHx/WZDRsoCQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:59:59:e7:b5:19:00:5c:44:ed:4f:a3:9f:66:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a00292c2a1062bb32980a3c443fff383a41002
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=1afb0616fcc3c2fa2fbc843a456b1f5950d57483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3a:2d:08:eb:e3:cd:56:bb:4b:2b:e4:f7:b6:
bc:50:3b:55:de:d8:08:1a:18:91:d6:82:c7:f7:18:
c5:c5:23:ac:ce:ac:54:85:60:2d:f1:f7:71:7d:ae:
83:26:ef:41:d3:38:af:f2:f3:9b:b4:ec:2f:4e:2d:
c9:47:e6:5a:45:e2:cf:22:a5:5a:40:da:10:68:6b:
6f:91:b8:fc:77:9c:71:cd:27:be:68:c4:d8:68:14:
b0:53:57:a0:c5:91:38:1c:2b:da:07:57:0c:8f:57:
a0:9b:b6:2c:d1:22:0f:26:9d:fd:9f:69:f4:66:67:
dd:ae:a6:32:a7:84:2d:c0:20:9d:70:8c:bd:00:8a:
18:2a:a8:18:4d:74:48:b6:f1:55:c7:06:c3:84:0b:
93:b6:60:0a:1f:30:3a:ae:e1:b3:60:f4:09:b7:e8:
d4:c4:f7:98:a2:0c:0a:16:3c:46:93:38:2a:22:41:
d2:9f:c5:82:2c:48:77:ad:ef:1b:a2:16:a0:93:16:
12:63:67:0f:b9:19:c2:82:ee:bd:4e:ae:23:b6:33:
eb:d6:93:8c:0f:1f:6e:ec:7b:8d:5e:14:3b:9c:1e:
2f:eb:4c:95:45:26:cd:a9:67:80:d4:f2:79:c7:e5:
55:2c:2c:ae:3e:2d:a8:57:04:13:a3:e6:ae:c2:66:
21:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:FB:06:16:FC:C3:C2:FA:2F:BC:84:3A:45:6B:1F:59:50:D5:74:83
X509v3 Authority Key Identifier:
keyid:E0:A0:02:92:C2:A1:06:2B:B3:29:80:A3:C4:43:FF:F3:83:A4:10:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KACksKhBiuzKYCjxEP_84OkEAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6c0563-6a1c-4432-a58d-3b64cc336c79/1/4KACksKhBiuzKYCjxEP_84OkEAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:74:17:b9:e6:42:71:bb:76:8b:a2:59:0e:43:d4:45:38:a5:
9a:94:3f:d2:ca:16:76:42:2e:3a:a9:23:c9:63:1e:40:d2:3b:
16:2b:c3:a9:f1:62:98:3d:d3:6d:ec:fa:1b:3d:63:65:25:15:
c0:e4:4b:e0:37:88:43:6f:17:55:b8:13:ac:39:7b:74:9b:44:
ab:5c:1a:a0:48:b9:36:b7:3d:bd:a5:5b:3a:29:a0:6f:b3:5e:
44:ab:ed:cb:69:eb:d7:5f:2c:b4:11:aa:50:09:1e:51:3a:87:
fe:57:72:1a:15:36:80:21:70:97:3b:0f:5a:4e:15:55:5f:ce:
12:8a:b3:63:ba:4b:8f:64:e1:9f:33:f1:95:d1:57:e3:e0:b1:
0a:cd:d8:58:cc:0f:7d:13:40:dc:c7:f1:d1:04:2d:51:a2:b5:
31:06:1e:36:b5:35:35:72:d1:b7:91:06:b8:49:d4:cc:bb:fe:
31:e6:fc:23:b2:b1:4b:6e:3f:b3:15:4d:b5:c2:f8:b8:0b:e0:
7b:b4:4c:6f:de:56:41:38:e3:8b:f7:b8:e7:1c:6d:d1:73:e6:
c4:3d:d8:b7:d6:c2:0e:14:4c:17:4c:84:8a:05:db:04:93:a9:
bf:e5:c6:38:46:59:60:5e:e3:6c:34:75:fe:7b:df:3f:cf:d3:
36:69:c5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:13:57 2025 by rpki-client