Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
File: 4rvHBn-KfFfWhtZ160aOmbhr1i0.mft (raw, json)
Hash identifier: SHKFSNEd42Wbj+r3NfrHoF6mN0hNlHvM0oIf7ZDBHLw=
Subject key identifier: 49:EA:3D:02:F8:70:A9:78:7F:BB:9F:91:EC:2F:B5:EC:02:65:02:C1
Authority key identifier: E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
Certificate issuer: /CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Certificate serial: 0194BBCE45F89505F2932FBD0E59B6A47708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
Manifest number: 13FD
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: 4rvHBn-KfFfWhtZ160aOmbhr1i0.crl (hash: yawZlBBzLD70kqHM2BfPM2AreSr/IcYTedt/UahTLWY=)
2: S9IbEuckGJ-9L5NueHluP1etdYo.roa (hash: 3hI+07Eg5raje1kn4kUfDxud5d5a2unK+1/vO0g99aY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:45:f8:95:05:f2:93:2f:bd:0e:59:b6:a4:77:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bbc7067f8a7c57d686d675eb468e99b86bd62d
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=49ea3d02f870a9787fbb9f91ec2fb5ec026502c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:3b:8a:15:82:61:11:b0:99:14:7a:c7:8e:
0a:bd:25:4e:c1:ba:21:c7:fb:03:5c:87:5e:0c:12:
62:54:20:33:34:16:e0:5a:38:d5:92:8f:7d:b4:99:
1e:6d:a2:fc:00:95:6a:0c:1e:3e:19:0c:99:c0:fe:
39:a3:66:9c:81:07:cd:a5:45:95:80:0f:0a:ce:9a:
c1:35:21:ca:42:62:b7:d7:9e:d0:93:54:d1:24:6b:
1a:16:eb:74:e5:38:f2:b7:41:e8:83:bd:8c:0a:c2:
2c:0a:87:c2:1d:56:6d:df:f1:b5:54:a0:30:9b:4f:
de:7f:f3:b2:9e:5b:c9:94:f2:c1:f5:37:81:8e:7a:
46:f8:b7:ff:42:6e:97:79:59:b7:70:18:c1:3c:0a:
87:38:09:92:5c:c2:96:2e:b1:66:a1:a1:98:21:0e:
ce:eb:af:6a:d0:41:18:dc:7c:5c:3a:d4:2f:2e:0a:
b2:4e:aa:f9:b8:78:31:df:fd:11:28:d6:4d:c0:bc:
29:cf:91:7e:0a:5b:05:29:9e:f0:db:83:4a:5b:d0:
25:2e:a4:d3:72:94:c0:fd:be:73:4b:30:46:01:df:
dc:4c:3e:09:e5:0f:ac:d3:b0:f0:7f:e9:ad:38:b2:
a5:06:a6:c0:76:c6:12:62:30:70:ec:4e:a4:cc:39:
66:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:EA:3D:02:F8:70:A9:78:7F:BB:9F:91:EC:2F:B5:EC:02:65:02:C1
X509v3 Authority Key Identifier:
keyid:E2:BB:C7:06:7F:8A:7C:57:D6:86:D6:75:EB:46:8E:99:B8:6B:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4rvHBn-KfFfWhtZ160aOmbhr1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/2dac8b-76cd-40f0-854e-1da2acc76e11/1/4rvHBn-KfFfWhtZ160aOmbhr1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:ab:93:6d:a1:01:b7:84:b3:aa:61:60:8f:da:bb:67:c5:cd:
6c:98:00:31:33:e2:8c:72:78:5e:3c:39:f3:f1:9c:21:1d:30:
50:05:1b:28:33:2f:50:05:bf:67:07:cd:ff:7d:e2:3b:c9:97:
74:6e:cb:1b:6e:10:cb:c9:37:1f:0b:de:d3:ee:fd:d6:4e:51:
85:7d:cf:43:6e:e0:b7:49:63:2d:e7:35:30:d9:f0:cf:8f:32:
fe:92:ea:3c:37:64:7e:80:50:f4:c2:3c:52:59:16:19:0e:3b:
69:45:25:0c:72:0f:9a:a4:a7:b6:f0:f7:48:2c:ce:ee:84:cd:
3e:c4:ea:d7:e3:7d:ca:0a:19:ec:a4:2d:ed:7e:ae:af:e4:2a:
b9:51:0e:8f:b1:ea:88:96:61:51:76:79:d8:36:cf:3d:48:53:
44:a4:37:9d:41:8b:b2:4f:38:af:cf:78:c1:d3:c0:67:a1:c5:
03:24:86:65:59:da:c6:a6:ca:15:37:a5:bc:1d:94:3d:14:89:
09:c0:63:83:8c:11:81:28:11:f7:51:93:c2:82:4a:47:44:c6:
2b:18:67:90:e7:c6:dd:49:47:09:82:7f:6e:95:b9:16:c1:9a:
35:95:6a:ae:46:39:d2:b3:3c:83:28:0f:77:18:77:4f:81:68:
2f:91:24:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:10:02 2025 by rpki-client