Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
File: 4BeHJANFLz4AireYBHNC2yTts1o.mft (raw, json)
Hash identifier: FpS1WoqgdrXeroRVeQ5y9DawfEzY5UMxZVJKOazoabY=
Subject key identifier: 91:FD:5E:52:5C:D9:67:CC:A3:EF:39:22:BB:53:07:DA:80:F6:15:F3
Authority key identifier: E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
Certificate issuer: /CN=e017872403452f3e008ab798047342db24edb35a
Certificate serial: 0194BC72AD5354EF65B31047EE1626E20694
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
Manifest number: 10EF
Signing time: Fri 31 Jan 2025 13:00:19 +0000
Manifest this update: Fri 31 Jan 2025 13:00:19 +0000
Manifest next update: Sat 01 Feb 2025 13:00:19 +0000
Files and hashes: 1: 4BeHJANFLz4AireYBHNC2yTts1o.crl (hash: m/7gtzqwgMjlbXMWm7O0jvhSY6wFLSxe50KmEX0IasE=)
2: uyVHgvKbgyhIJP9r5aGfXjTHFJQ.roa (hash: qeBp72f9XovigjtK15ZxvxZQQWl9PNlTDrJhrcj6Lzk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ad:53:54:ef:65:b3:10:47:ee:16:26:e2:06:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e017872403452f3e008ab798047342db24edb35a
Validity
Not Before: Jan 31 13:00:19 2025 GMT
Not After : Feb 1 13:00:19 2025 GMT
Subject: CN=91fd5e525cd967cca3ef3922bb5307da80f615f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c0:50:95:26:67:c5:fc:39:28:dd:ba:b4:38:
41:80:1b:2b:ca:e1:72:10:4a:65:d8:35:1a:f9:19:
13:68:56:c4:38:85:56:4a:c3:f1:a4:c8:36:4d:03:
bd:8f:90:f4:10:47:c5:2f:79:06:1c:11:b1:9c:1c:
5b:93:38:3f:48:e5:95:00:0f:b8:d4:ca:38:e1:80:
d7:ef:0f:78:77:e9:42:c9:56:be:af:c5:77:b7:8d:
eb:ac:ff:d3:d6:ca:97:df:1c:84:29:3c:8a:2f:3a:
35:85:27:cf:8e:60:0e:aa:e8:5f:a2:79:65:5c:72:
6d:5a:ba:ae:5f:c3:00:b8:a2:16:56:39:1d:81:07:
02:f5:84:db:4f:0c:c0:53:19:84:81:da:42:c7:8e:
db:30:0b:2c:37:53:93:e1:56:dc:29:4f:e9:73:d0:
59:aa:0b:fe:f1:b9:fd:86:d5:ba:e5:cf:fb:01:49:
60:37:f0:5c:ec:d8:31:a8:99:f0:32:c5:e9:ca:dd:
d6:93:32:1f:74:3c:99:b3:25:31:bd:18:41:e5:17:
54:74:99:1c:61:e4:52:d0:b8:4e:c8:bd:f2:31:54:
88:fc:9a:80:d1:66:5f:63:89:fd:90:d1:07:96:7a:
9f:ba:8e:53:fa:8e:c2:b5:24:d1:e2:8f:62:20:dd:
2e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:FD:5E:52:5C:D9:67:CC:A3:EF:39:22:BB:53:07:DA:80:F6:15:F3
X509v3 Authority Key Identifier:
keyid:E0:17:87:24:03:45:2F:3E:00:8A:B7:98:04:73:42:DB:24:ED:B3:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4BeHJANFLz4AireYBHNC2yTts1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/4cc145-967d-4d8d-af5c-877e0e866b24/1/4BeHJANFLz4AireYBHNC2yTts1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d7:94:b6:83:70:94:cb:16:18:43:b8:e4:dc:91:f0:c4:2e:
d8:02:ab:2d:8a:31:ba:41:8b:0a:b7:e1:91:da:b6:ed:0f:bf:
b8:0e:f0:aa:08:90:be:07:39:74:f3:c3:fb:8a:b5:3f:05:2b:
81:f3:4b:ba:8b:a7:ad:3e:a2:a9:ab:ae:15:76:99:47:65:0c:
d2:31:87:9c:4c:ef:f8:d3:66:12:23:97:e1:66:3a:8c:e1:7a:
cf:dd:75:ec:e1:e9:a6:eb:cd:1a:dd:cc:5b:a0:43:bf:b8:07:
7c:62:50:53:92:b3:2f:82:9e:c5:ce:06:ce:a5:c6:aa:88:78:
a4:ca:16:24:e5:95:cf:4b:74:5c:e8:41:fd:b7:48:14:b1:0d:
eb:fb:92:6f:5d:2e:94:3f:c4:98:3f:be:db:85:17:8a:ee:23:
75:71:79:d7:46:50:05:7b:53:a8:8f:e9:48:e2:e3:7e:40:ff:
75:fa:ee:f1:fa:8e:7a:c5:bd:3a:0a:e7:b6:c8:af:3a:cf:25:
9d:fd:7c:06:55:29:20:e9:c2:e8:d3:c8:69:c9:71:46:0b:f6:
d3:76:6e:04:ea:d1:40:2d:0f:d6:2e:13:c8:e5:5a:4e:24:f7:
fe:41:01:36:fa:03:28:cb:d7:7d:99:10:e2:f9:ce:13:23:03:
9d:f5:59:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:48 2025 by rpki-client