Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
File: E3WqXjfEL33rfzsOlnC_WaKsprU.mft (raw, json)
Hash identifier: 6y4K6Oz0dlkwbXlGfeR0Tqz+QrA/Qyybsq6V9LbHhCo=
Subject key identifier: 4F:A5:0C:44:4B:E3:87:30:27:C0:50:C8:06:D1:AD:C4:9E:16:5B:82
Authority key identifier: 13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
Certificate issuer: /CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Certificate serial: 0194BC0534B61B9FAAFFAA7A5DD963C4DE59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
Manifest number: 02FA
Signing time: Fri 31 Jan 2025 11:00:44 +0000
Manifest this update: Fri 31 Jan 2025 11:00:44 +0000
Manifest next update: Sat 01 Feb 2025 11:00:44 +0000
Files and hashes: 1: E3WqXjfEL33rfzsOlnC_WaKsprU.crl (hash: Wd8Yhno51wEpR/F1coGT3iPSkQFENfTUlwrrP8s9NyM=)
2: JAqvgN4KkkWNoe1vrMrVsDBqmfE.roa (hash: QG1yL1zcYsT8fBEaDP08SL61cVF4WfYEKH5BAPzFTBE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:34:b6:1b:9f:aa:ff:aa:7a:5d:d9:63:c4:de:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1375aa5e37c42f7deb7f3b0e9670bf59a2aca6b5
Validity
Not Before: Jan 31 11:00:44 2025 GMT
Not After : Feb 1 11:00:44 2025 GMT
Subject: CN=4fa50c444be3873027c050c806d1adc49e165b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:49:74:35:f1:81:8d:87:85:9c:79:2e:a1:
39:72:31:9c:44:71:61:d3:14:44:6d:ba:29:f8:bc:
2e:67:f5:27:4d:df:67:48:51:dd:f1:82:da:de:e4:
43:0b:9c:57:c4:42:16:ac:bc:c4:c1:5a:93:e8:01:
90:d9:79:c4:6f:80:2b:83:0c:fc:5d:b0:91:03:91:
a6:7b:46:fb:ce:57:2f:97:51:fb:95:5a:32:70:a8:
c3:46:0f:b2:27:61:03:44:e3:e6:45:df:4f:64:7d:
1f:13:78:92:d1:13:1e:a4:4e:97:26:ff:07:c9:e5:
fa:45:d4:36:87:10:d9:b7:de:c1:86:54:40:36:bb:
f4:3d:34:c5:b3:ab:e7:8d:3f:73:6b:e4:74:4c:71:
34:4c:8c:6f:0f:96:24:c3:c0:06:05:94:e1:54:9b:
38:a7:b9:cd:73:0c:da:5e:62:39:23:38:a3:a3:6f:
75:e4:3d:d5:58:0d:f9:9b:15:1a:45:97:10:ba:5d:
5a:64:17:3e:25:4b:d1:cc:ab:0f:7b:75:e2:04:77:
4f:40:54:28:63:8f:d3:e2:b8:d9:6f:a9:8d:04:f4:
6d:f7:49:b2:fe:00:4e:ad:68:45:53:ab:57:ab:7f:
65:af:88:19:3b:fa:ff:76:c9:94:48:f5:1b:76:b0:
01:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A5:0C:44:4B:E3:87:30:27:C0:50:C8:06:D1:AD:C4:9E:16:5B:82
X509v3 Authority Key Identifier:
keyid:13:75:AA:5E:37:C4:2F:7D:EB:7F:3B:0E:96:70:BF:59:A2:AC:A6:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3WqXjfEL33rfzsOlnC_WaKsprU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/de97dd-e721-4192-b8b4-d4b725d0676c/1/E3WqXjfEL33rfzsOlnC_WaKsprU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:d6:21:18:55:a8:1e:0c:77:3a:83:63:72:7f:22:ac:b7:90:
16:f5:07:a7:f3:1c:af:fd:a3:2f:37:2f:6d:ce:b4:fa:71:e4:
94:56:1e:fe:86:a4:ce:b7:b3:b1:b4:cd:bc:0e:30:9d:62:4c:
9a:a9:97:fe:2d:41:6a:b0:4c:78:84:1f:8a:7a:34:12:71:e1:
3a:88:fa:55:45:7e:52:77:c2:e7:d8:72:5b:09:c4:c4:3e:46:
75:f4:18:56:cf:50:5e:f0:83:6f:1a:8e:b3:bb:93:b3:a0:cb:
e3:3d:b9:57:76:d2:ca:5d:79:94:2a:cf:31:f4:28:9c:5e:ca:
18:7e:ca:b9:db:ed:3f:4a:27:69:81:9f:59:8f:b7:70:e6:ca:
1b:93:bf:72:e9:cd:66:12:c2:a3:fa:3f:da:c2:71:84:43:0d:
50:4d:63:13:c9:ee:e5:53:c2:5a:86:e5:5b:8a:9f:c2:88:72:
b8:e2:66:f5:33:1f:d3:09:77:39:ac:53:41:71:38:76:8a:04:
13:2f:0e:5d:cc:31:0f:32:41:5b:1d:d5:0b:6a:ba:81:9c:90:
af:b4:d2:82:c2:70:69:85:50:88:b1:28:21:17:ab:51:b4:9c:
0e:8a:00:97:da:e8:2f:34:d6:43:4c:c5:23:1b:35:de:a2:40:
55:c1:64:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:52:21 2025 by rpki-client