Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
File: 4xnQzWVZPZaejUU4KhlKqnPA_4w.mft (raw, json)
Hash identifier: t3WMwVVCVyVY3oSk/sy6qVDibxk6iVoYp+nMJgU9aqQ=
Subject key identifier: E2:59:BD:EE:CB:95:75:82:1B:04:21:3D:D9:F0:36:95:EF:00:B6:DE
Authority key identifier: E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
Certificate issuer: /CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Certificate serial: 0194BD4EAE9732B22DD60C7CA0502333000A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
Manifest number: 0ECE
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: 4xnQzWVZPZaejUU4KhlKqnPA_4w.crl (hash: scSjn2L5txrg/ZqrFg3pnHTrMpltsRYu4a60ge22L8k=)
2: 8VHFK74OMKQnD381WiG3ZZR7ozs.roa (hash: B7p/Hrvwz47SgwLmobk1ZKXWoI4oqfm1r3I4SkLnjp4=)
3: FzW7JoU60fLZt2V4T6FBU_g7_7M.roa (hash: qY7+Qky1B0UxdHy7k1LwwjYXXxPZ34Le32XJ4CBXqQk=)
4: UEAGL23cUguO7LaV9ntB8GG3vLI.roa (hash: HW/Eripbr/hRHy1giNb2s3DucUSazcSMRbltO/ThVTM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ae:97:32:b2:2d:d6:0c:7c:a0:50:23:33:00:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e319d0cd65593d969e8d45382a194aaa73c0ff8c
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=e259bdeecb9575821b04213dd9f03695ef00b6de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8f:84:6e:c6:95:d5:91:40:89:e9:84:42:ac:
90:1a:ac:28:72:8d:fc:c8:37:37:6c:83:cb:6d:f3:
f1:cf:4d:20:f9:be:69:59:14:a7:43:99:55:e3:b9:
1e:bc:2c:56:ad:db:dd:c9:1f:c0:29:95:ea:2e:84:
0b:fc:19:b9:95:3b:03:1c:d2:6b:6f:f4:13:cb:9a:
c9:c8:41:ec:61:26:f1:24:be:3f:82:ff:ef:a9:68:
3e:88:f1:42:00:fc:c2:2d:45:44:de:86:4c:57:bf:
e5:04:74:b2:2e:7e:20:c3:f6:c1:00:dc:77:d4:c9:
4c:9b:85:43:a9:23:f5:0d:85:65:5b:20:ee:31:9e:
ee:27:46:77:df:fa:33:54:c4:9f:44:ba:bf:4d:a6:
fb:a9:ce:69:0d:de:d6:95:cc:09:49:91:0c:09:51:
15:0c:d1:1d:5c:4c:0d:e5:69:be:ef:74:42:fb:7f:
17:24:b3:95:9f:ca:d9:09:8e:3e:90:06:54:d2:b7:
d2:aa:05:9a:0e:f4:1d:2f:f0:50:5d:cd:c3:30:7e:
4c:02:e0:a2:84:a6:5d:7f:59:35:09:31:ca:39:eb:
b5:fb:40:77:04:7d:1d:97:c0:2e:de:83:7e:8a:13:
13:40:b0:82:b9:e7:d4:aa:25:77:01:2f:a0:e4:b3:
58:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:59:BD:EE:CB:95:75:82:1B:04:21:3D:D9:F0:36:95:EF:00:B6:DE
X509v3 Authority Key Identifier:
keyid:E3:19:D0:CD:65:59:3D:96:9E:8D:45:38:2A:19:4A:AA:73:C0:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xnQzWVZPZaejUU4KhlKqnPA_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/ae869c-812c-4cd6-baf9-217cf93845bc/1/4xnQzWVZPZaejUU4KhlKqnPA_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:15:83:0a:78:ec:ec:c8:d7:50:38:cb:61:23:72:5f:94:b2:
2e:95:24:d5:e9:7f:62:e1:a7:08:c8:0c:b8:23:c9:36:f2:b9:
1a:4f:57:f1:78:92:ae:3f:b0:55:bb:59:17:39:01:73:a0:c4:
77:4f:08:1b:09:c4:57:76:cc:86:c3:d8:26:4d:39:67:f8:e3:
24:84:3e:96:94:93:e4:45:6d:cf:77:60:c8:42:43:93:1e:98:
7c:31:dc:54:37:b4:2a:21:ff:3d:99:f7:aa:27:72:79:ba:e8:
fb:a8:57:32:af:24:58:a3:69:c4:67:c8:78:9d:23:1b:16:b3:
c9:49:26:77:1f:60:d3:b0:62:bf:d7:0f:c8:21:47:5b:85:92:
77:e4:f2:5d:72:89:a8:0b:9f:d5:ed:d0:d1:9c:7f:f5:b3:a7:
8f:45:07:fc:76:f8:45:72:34:f0:de:cf:e0:e3:11:13:c1:e5:
c8:90:1e:70:ab:cd:49:d3:88:9a:47:74:3e:d8:03:8d:37:3b:
28:e5:98:ac:91:60:9c:ac:04:00:cc:71:38:01:4b:64:88:54:
22:26:b2:b7:76:73:d0:70:ca:b8:c3:13:d2:a0:92:06:c9:6e:
16:0c:0a:d8:0e:63:34:ab:76:8b:01:a8:6a:69:7d:80:93:86:
b8:69:07:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:14:37 2025 by rpki-client