Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
File: 4pLIx3m27W7ecqjPEUkO9tep6SE.mft (raw, json)
Hash identifier: vTa3WLYuyoVE/ISzyWgdPUXrKeJ0UQ7uLrtK7VtP06k=
Subject key identifier: 65:FC:B5:05:C4:96:D5:BE:1F:26:FE:67:28:13:2D:54:E7:4E:F1:FE
Authority key identifier: E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
Certificate issuer: /CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Certificate serial: 0194BC0537C3D5CD63B7EB2BF8D315DE4AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
Manifest number: 03B5
Signing time: Fri 31 Jan 2025 11:00:45 +0000
Manifest this update: Fri 31 Jan 2025 11:00:45 +0000
Manifest next update: Sat 01 Feb 2025 11:00:45 +0000
Files and hashes: 1: 4pLIx3m27W7ecqjPEUkO9tep6SE.crl (hash: H+ZAt5STI0jNM6FcXnszDS22EbZ9KMIOR7jWnugiFuU=)
2: NUqcAvHQvfd7W5ogQFOpIt8ZMlc.roa (hash: GfpPirdkI62UciSZyrKDiZuHeIIzG531RGNwxN8FHHw=)
3: pxY6_rBQcn3iz82XldYnkJz45JM.roa (hash: YOl0UxNW+xdGkU9HEm/QZ7M3QuxM2oQJBlY7pjYmG24=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:37:c3:d5:cd:63:b7:eb:2b:f8:d3:15:de:4a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e292c8c779b6ed6ede72a8cf11490ef6d7a9e921
Validity
Not Before: Jan 31 11:00:45 2025 GMT
Not After : Feb 1 11:00:45 2025 GMT
Subject: CN=65fcb505c496d5be1f26fe6728132d54e74ef1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:d3:e6:4e:c3:35:41:b7:2f:6b:96:b7:a3:ea:
dd:fe:2b:fc:7f:6b:df:79:57:56:89:2e:20:95:3e:
d1:45:ed:f2:ef:d5:d1:7e:df:d9:71:64:c4:ea:89:
04:7b:a5:41:5b:34:43:cd:d5:96:15:05:b3:8e:ab:
00:7a:11:40:9b:37:b6:7a:67:19:27:ea:be:0f:0e:
49:4a:14:6c:12:6a:5e:55:05:52:fb:ea:a6:8a:69:
f6:91:37:80:c4:9d:97:5e:ad:ac:9e:2d:45:e1:86:
4d:7e:b6:91:14:50:93:e1:b0:5f:f5:65:63:91:f0:
26:9c:9e:08:de:5d:28:60:6f:8b:fe:54:d3:0b:7f:
b9:85:6c:4c:57:1b:dd:c0:27:e6:3b:61:3d:64:6b:
14:ea:d7:8f:4d:44:70:2f:e7:94:b2:38:e7:c5:bf:
7c:26:97:dc:7b:0e:11:07:6b:4f:ac:ab:3d:e8:b9:
3d:9e:9b:36:ab:07:a6:19:e3:72:76:78:ab:c2:8f:
4e:0f:d4:bd:7a:a6:ec:90:84:9d:c6:b2:1d:44:fa:
7d:e0:9f:1f:51:8f:d4:42:6b:d1:c2:ad:54:98:4b:
3d:0f:ad:65:3d:10:6d:a6:24:d1:0c:32:ba:65:67:
11:21:29:a9:7e:40:3c:d9:7f:20:82:dd:c0:00:66:
4e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FC:B5:05:C4:96:D5:BE:1F:26:FE:67:28:13:2D:54:E7:4E:F1:FE
X509v3 Authority Key Identifier:
keyid:E2:92:C8:C7:79:B6:ED:6E:DE:72:A8:CF:11:49:0E:F6:D7:A9:E9:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pLIx3m27W7ecqjPEUkO9tep6SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/4a2e97-2570-478b-b9bc-5ebb6378009e/1/4pLIx3m27W7ecqjPEUkO9tep6SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:84:c7:d8:14:b1:20:c1:e1:59:6b:57:aa:c5:a9:79:a1:4c:
86:a8:fb:19:42:b6:a3:60:47:c7:b0:c6:29:1e:e9:c3:e2:89:
97:7b:67:03:a2:d2:ca:f1:5d:b1:a9:5c:d9:38:6d:6a:b0:37:
d8:8e:74:95:7a:c2:77:80:bd:b4:85:65:5c:d2:ee:33:13:3e:
c2:97:d4:cb:19:96:37:8b:f9:1c:dd:ee:5f:33:fa:56:41:1f:
9a:9a:28:a3:0c:10:21:7e:dc:c4:6a:34:b0:a1:55:33:39:9a:
98:ed:cc:37:17:26:e8:57:81:9a:5f:ac:36:34:bf:e8:e4:37:
98:f9:30:75:18:f6:f8:0e:4f:49:9b:f4:b0:53:13:44:ed:2b:
d6:a7:ac:99:4d:7b:b3:dc:3d:71:37:b9:ad:a4:dd:ca:bc:42:
98:27:ef:77:99:fb:c7:d1:34:03:59:60:8f:76:ba:7e:99:46:
1a:9f:22:75:22:43:56:b5:16:48:d4:85:fe:23:81:70:83:b3:
36:75:f8:fa:1c:23:33:7d:01:2b:17:33:6c:5e:db:3e:36:b3:
fa:c0:4d:fc:4c:49:95:5c:7a:42:41:fe:ef:8c:01:cb:c2:23:
2e:b9:fa:74:21:e0:87:45:82:b2:02:47:80:cf:b4:8f:3a:82:
4c:2f:f9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:24 2025 by rpki-client