Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
File: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft (raw, json)
Hash identifier: 6GExuB7cxjwIfVUnKtxBqtmzC/yCIO5xHtXpXNG0jRs=
Subject key identifier: 89:5B:28:05:42:7B:F5:90:7D:18:D3:FB:E6:A5:C0:D8:E7:50:AE:41
Authority key identifier: E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
Certificate issuer: /CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Certificate serial: 0194BD1793D9907C819C515B0B66DFCCB63C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:26 +0000
Manifest this update: Fri 31 Jan 2025 16:00:26 +0000
Manifest next update: Sat 01 Feb 2025 16:00:26 +0000
Files and hashes: 1: 4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl (hash: ntHwj4XgefQZPkWBN7kTRb2yBGToW0GKRxi60rofTr8=)
2: GfCJvI9nayXOG-c9-kNZYMtGvRY.roa (hash: iErUIkofrDIWovm2VEktlTu0LGFlXqiT+Jb2IEFCjN4=)
3: b6PxSRMMpYMDelZhlHVJswnGzlY.roa (hash: 2hbPovorwIzKGKG+8Z0PbXVcSz91V4CX1uoPUPOxcMk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:93:d9:90:7c:81:9c:51:5b:0b:66:df:cc:b6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e20449fe7f4b2cf1f7fd670e582ebcc97e45f7ff
Validity
Not Before: Jan 31 16:00:26 2025 GMT
Not After : Feb 1 16:00:26 2025 GMT
Subject: CN=895b2805427bf5907d18d3fbe6a5c0d8e750ae41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:23:96:e1:e5:39:04:84:23:fd:4a:23:ee:2f:
40:fe:10:8a:95:3f:7a:d4:e8:8f:a9:78:f2:88:58:
17:08:14:bf:e9:15:72:5c:67:f2:0f:dc:27:92:ab:
de:f7:b4:5c:24:33:3f:f2:35:61:ba:92:ae:f2:29:
3a:a1:f3:94:89:b1:83:32:02:aa:bb:cf:9c:1d:e3:
85:c9:ad:a5:9f:98:76:95:00:40:e7:31:65:4b:64:
67:41:57:fc:bb:20:15:30:4f:da:29:70:2e:46:8d:
6a:2f:2c:a1:58:6a:12:81:2f:9d:5d:58:ed:8f:76:
30:3a:5c:4b:f6:52:d9:4a:18:43:e7:28:e3:90:3f:
a7:a0:f7:75:87:65:d3:0e:6f:85:2f:20:94:b1:49:
75:85:11:2d:e2:84:7b:8c:83:8f:89:65:b9:18:28:
46:22:99:d3:de:9f:bb:05:45:13:92:48:de:9b:2e:
43:01:85:8e:75:91:cf:ef:77:d7:3f:20:28:5d:11:
9e:3c:36:e7:53:0b:2d:cc:b6:52:e4:62:2b:6d:52:
fd:c7:02:b6:99:8e:81:d4:d5:e6:0c:c0:bd:eb:ba:
9b:7c:52:64:c9:60:af:ac:8d:86:bb:0d:7b:e6:3c:
46:a6:f2:da:8e:4f:8a:8a:43:26:82:d3:8b:87:48:
9e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5B:28:05:42:7B:F5:90:7D:18:D3:FB:E6:A5:C0:D8:E7:50:AE:41
X509v3 Authority Key Identifier:
keyid:E2:04:49:FE:7F:4B:2C:F1:F7:FD:67:0E:58:2E:BC:C9:7E:45:F7:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4gRJ_n9LLPH3_WcOWC68yX5F9_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/3dc879-11b9-4fa6-841d-906a91ee9fe4/1/4gRJ_n9LLPH3_WcOWC68yX5F9_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:be:20:95:5b:ed:6f:9a:ac:c4:49:03:c9:23:80:10:f6:cd:
47:a4:cb:61:3b:6e:c1:85:d4:1c:18:d4:d4:3a:9f:a5:aa:b7:
10:3b:a7:3d:64:ee:3d:b2:4a:3c:9a:00:6c:e7:51:71:5f:b9:
2f:c7:89:3d:c6:b1:1c:b2:e9:9b:60:8e:d2:7c:e5:62:4a:d8:
a7:78:ae:70:84:3a:ff:a8:43:02:99:5f:16:d0:81:e6:dc:75:
ea:78:af:36:d4:8f:f8:ed:be:61:55:31:9e:d6:59:01:27:a9:
f6:8c:26:50:29:b0:59:ae:1c:f5:8e:80:fb:86:01:6d:fe:05:
69:67:49:07:54:24:f0:53:dd:f9:70:ca:36:32:f7:04:4b:73:
9b:58:e0:5c:8a:a2:5f:11:36:55:18:ef:2c:14:1f:54:f2:de:
91:52:65:0c:36:2c:9a:be:40:d1:0a:f5:44:57:19:5d:e0:4f:
c0:56:2d:66:df:4e:09:bc:95:ac:fd:ca:44:e3:91:5c:ed:9d:
49:a6:cb:e1:01:7a:68:dc:80:ff:f9:ab:54:70:9f:5a:d1:74:
4f:7e:86:11:b9:f7:21:6d:63:4a:af:df:01:4d:2d:8a:c8:38:
ac:a8:2f:04:e2:57:91:22:7e:b3:5a:a3:32:a3:a7:ce:ef:b6:
43:8f:d1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:32 2025 by rpki-client