Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
File: 4jy32eUh5kaf1-KtE2A_t-6_4OA.mft (raw, json)
Hash identifier: B+HtY1mBAatUlgzBNdhiAJuU5FGaSmQiajMxp0EtKz8=
Subject key identifier: 83:E1:8F:2A:D5:00:59:51:71:60:2C:AB:04:09:2A:13:F9:95:01:3A
Authority key identifier: E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
Certificate issuer: /CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Certificate serial: 0194BD85B0408FA4537543163002A72DC564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
Manifest number: 0762
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: 4jy32eUh5kaf1-KtE2A_t-6_4OA.crl (hash: LrQOnItUCgY4UXQu7ceT7ElM9NSHBCDXFxm6N9PztC4=)
2: A2XZpMhjoSl2eIpUcSwowos8QQA.roa (hash: 7IQHzb+LeNjLi41+XbYgKffdbEsxRoe4BI+dUjjQXH8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b0:40:8f:a4:53:75:43:16:30:02:a7:2d:c5:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e23cb7d9e521e6469fd7e2ad13603fb7eebfe0e0
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=83e18f2ad500595171602cab04092a13f995013a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:11:00:b3:89:95:98:40:45:a8:72:d9:96:a2:
b0:83:c7:7b:63:65:62:85:72:d4:82:15:d9:1f:74:
81:a4:d6:d1:34:df:06:22:c1:aa:e4:71:7f:c5:d8:
39:30:f7:8b:24:84:cd:0f:ee:45:da:5a:53:da:03:
90:9c:d5:35:48:27:eb:e8:f9:82:76:ad:9a:67:50:
fc:c5:af:41:45:d9:cd:33:9d:94:9a:84:9b:26:1f:
7a:b8:57:ba:b3:24:64:78:15:93:84:4f:31:f7:b6:
6a:80:92:9e:36:12:39:ba:7f:8c:21:18:a8:a0:8f:
6e:34:89:36:ab:06:12:bd:6f:2a:15:74:c0:bd:0d:
f3:4e:97:56:fd:e5:c1:d2:b9:d4:ba:4c:47:a2:da:
e7:d9:d7:20:7e:50:83:e9:4d:be:a8:96:72:5e:3f:
69:b9:58:be:c9:fd:e9:da:82:c5:25:96:bf:1a:ac:
f9:0a:0b:1a:33:d5:8c:e3:1c:a1:aa:43:2c:9d:1d:
63:5b:b6:f7:a5:73:8b:c7:01:6a:33:42:72:c5:41:
d0:fb:fc:22:f6:78:28:91:85:72:4c:61:94:1d:99:
86:f4:a4:be:fa:a7:9e:68:d9:4e:35:d0:96:ed:cb:
72:52:1a:e1:75:b3:1d:66:a2:4e:18:3b:74:1a:6c:
3a:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E1:8F:2A:D5:00:59:51:71:60:2C:AB:04:09:2A:13:F9:95:01:3A
X509v3 Authority Key Identifier:
keyid:E2:3C:B7:D9:E5:21:E6:46:9F:D7:E2:AD:13:60:3F:B7:EE:BF:E0:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jy32eUh5kaf1-KtE2A_t-6_4OA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/b2698c-6409-459c-b046-ea6f705d2c0d/1/4jy32eUh5kaf1-KtE2A_t-6_4OA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:dc:ac:42:7f:66:26:68:c6:cf:58:b7:d5:1c:61:50:ac:1f:
5f:0d:6f:76:1d:b3:a4:fa:1d:a5:28:fb:7c:ae:7a:b5:7d:fb:
af:7e:44:2f:46:0b:05:92:aa:02:7d:0f:2b:d5:ee:3b:3b:cc:
28:3e:dd:4e:82:f6:4c:b5:f4:23:ee:74:92:46:b6:3a:0d:49:
78:d3:7f:09:86:af:53:85:3c:6b:74:a6:11:7b:36:ea:fa:c7:
e7:8f:dc:97:39:18:7c:6f:ce:14:c9:89:f1:fe:f2:d0:ab:0d:
fd:91:48:d0:b0:51:5c:e1:38:a4:88:c9:21:07:92:f3:a2:54:
bc:8a:c5:43:57:6b:3c:f7:e1:c4:36:e7:c7:27:2d:c7:0c:34:
12:15:b6:7b:bb:ee:61:c6:6d:6e:ae:c0:87:0e:01:0c:3e:6a:
c3:3f:3c:45:09:3b:a3:8d:bc:10:ae:62:29:91:e4:93:d5:a4:
d9:77:4a:b1:19:6d:96:c8:04:5d:2b:67:85:54:7e:38:b5:a9:
18:a5:3c:5e:fb:5a:c6:16:4a:63:1a:40:a1:90:50:bf:7b:2e:
28:e7:13:0d:39:01:e3:d3:b1:22:0b:32:84:69:a1:c8:85:fb:
4a:d5:40:e4:7e:c6:75:b7:ed:c4:af:83:4b:20:e4:69:9b:e1:
ca:9c:c6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:39 2025 by rpki-client