Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
File: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft (raw, json)
Hash identifier: NMCvZpxqXsqQcicBR5iMQpw6dwrtKPP736WX1UzUW/4=
Subject key identifier: C2:0E:87:5F:0D:EF:7F:FC:F8:22:AE:C9:7C:5C:5B:B0:B2:7A:06:89
Authority key identifier: E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
Certificate issuer: /CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Certificate serial: 0194BC72D97A993D7789500D6ED15788FFBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
Manifest number: 0857
Signing time: Fri 31 Jan 2025 13:00:30 +0000
Manifest this update: Fri 31 Jan 2025 13:00:30 +0000
Manifest next update: Sat 01 Feb 2025 13:00:30 +0000
Files and hashes: 1: 4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl (hash: Kg7F1ruLUcsFdU9mvxeGj+RxBIemiQYqatYaxSogW0M=)
2: p_9inuYDdp5y0a2pR7IT5FJWxkA.roa (hash: w2ZioVdUL3h+FykybnCF+ZnIIFFr6zWJMlYabfFURBc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d9:7a:99:3d:77:89:50:0d:6e:d1:57:88:ff:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e01aa3eff475b010bde4154f3bd4743a7c0bae55
Validity
Not Before: Jan 31 13:00:30 2025 GMT
Not After : Feb 1 13:00:30 2025 GMT
Subject: CN=c20e875f0def7ffcf822aec97c5c5bb0b27a0689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:2a:ba:28:67:40:90:ca:2c:6b:4d:24:38:d3:
55:b9:82:c4:58:01:0f:1c:10:56:80:dc:78:c7:76:
80:50:41:5f:63:b5:7f:22:5f:75:7f:9f:5d:2e:a5:
8c:1d:54:f4:ac:13:17:f7:aa:57:55:16:8a:5a:32:
6f:8b:8f:88:72:0d:43:c5:5b:49:7e:de:d5:de:84:
67:ec:a0:ee:3d:47:60:21:aa:20:6a:b0:1d:01:9a:
9f:c0:69:b4:b4:31:6a:94:45:4d:39:ad:b2:e0:b9:
a2:4d:b0:8c:dd:83:43:0a:0c:42:f5:3e:23:2d:cd:
8d:7f:37:ca:e3:e6:91:f3:5d:f0:da:8c:70:f6:30:
16:f1:9e:8c:a4:73:4f:81:ba:18:22:b6:92:1c:42:
02:a1:2f:ac:9e:18:00:53:2b:31:48:44:9a:df:0a:
a6:3b:a9:d6:ac:cb:1a:d7:49:e1:62:5d:29:bd:ac:
a9:c3:93:73:2f:da:d8:8b:02:56:0a:1a:9f:1d:24:
22:53:e2:40:95:77:e9:bd:2c:d8:9e:64:e8:08:57:
c6:0b:00:60:77:f5:2b:dc:dc:fe:fe:52:8f:f5:b7:
dd:ba:3c:46:1b:20:85:0f:b0:96:70:72:8b:f3:ab:
71:85:d8:af:c6:d5:a8:20:44:5e:d3:f9:23:b3:42:
22:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0E:87:5F:0D:EF:7F:FC:F8:22:AE:C9:7C:5C:5B:B0:B2:7A:06:89
X509v3 Authority Key Identifier:
keyid:E0:1A:A3:EF:F4:75:B0:10:BD:E4:15:4F:3B:D4:74:3A:7C:0B:AE:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Bqj7_R1sBC95BVPO9R0OnwLrlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9b87d5-3b6b-426e-b3ce-3d0cd986190f/1/4Bqj7_R1sBC95BVPO9R0OnwLrlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:43:a5:16:a0:18:ec:3b:7a:66:d6:89:f4:24:8f:a3:7f:ea:
41:e5:d7:24:2a:54:22:d1:c0:7d:7d:c2:c5:49:52:c8:7b:29:
9f:81:21:b5:6f:af:ed:2e:28:5d:3b:ba:d3:dc:53:99:65:6b:
a9:58:77:59:d5:2b:eb:7a:b6:a7:b0:96:0f:74:63:dd:de:a3:
31:c3:42:08:9a:e1:c3:9c:41:da:b7:6a:7e:f0:c4:39:60:cf:
8e:da:fd:fc:f7:d9:61:c7:d9:73:0c:dc:b0:bf:2b:58:81:4e:
bc:0e:0a:b0:53:8b:5b:1e:5e:90:78:7d:d9:76:b9:44:cb:d2:
7b:d0:32:d4:0c:e6:a9:5d:40:6f:fd:22:22:e7:14:fa:8b:20:
de:c7:22:27:65:85:26:6b:47:73:12:e0:75:28:0e:6a:aa:22:
94:88:db:c5:aa:97:d5:44:25:8b:75:25:c0:97:e5:41:e3:a1:
cc:2d:f3:e8:de:4e:2b:cc:5a:17:9e:b7:81:44:1b:84:ff:6a:
4d:f1:35:20:3e:d8:df:a0:cc:42:80:af:51:02:ab:de:47:bc:
3e:7a:bd:c3:fb:db:18:ed:b6:fb:9e:bb:19:a1:e8:c1:37:71:
69:58:59:eb:7e:c5:a2:aa:b3:da:0b:4f:cb:f4:55:d5:fb:06:
2a:44:58:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:43 2025 by rpki-client