Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
File: 4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft (raw, json)
Hash identifier: s4OZF3gVpM36etqdWn0BETIjMB4TNOBT5Fto84QUw54=
Subject key identifier: 84:1C:3A:16:E2:0F:88:3F:2D:53:E7:C9:9C:D0:09:FB:7E:C5:76:8B
Authority key identifier: E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
Certificate issuer: /CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Certificate serial: 0194BC0508FCA9F3C8D52A9C11A1673218AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 11:00:34 +0000
Manifest this update: Fri 31 Jan 2025 11:00:34 +0000
Manifest next update: Sat 01 Feb 2025 11:00:34 +0000
Files and hashes: 1: 4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl (hash: gGYW+BcPnZgnu+IZ8SdvfdmiP2eUYDl7OImEkCwmk/c=)
2: NAPyyzZUEw4Zn65wAuFDux_YC9U.roa (hash: lU32nj8CJcUtMjGhuL2rXmP4Es+fbhl1wJhVBrmgarI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:08:fc:a9:f3:c8:d5:2a:9c:11:a1:67:32:18:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0a0106cd2857ef13234867cb7f16a23a93faa93
Validity
Not Before: Jan 31 11:00:34 2025 GMT
Not After : Feb 1 11:00:34 2025 GMT
Subject: CN=841c3a16e20f883f2d53e7c99cd009fb7ec5768b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:6e:06:41:94:71:c6:cb:a0:4d:81:78:02:
19:45:39:1d:85:7b:0b:81:85:52:47:51:86:9a:10:
9a:c5:da:33:c3:15:56:2c:1b:e6:36:53:a9:16:3a:
d1:63:09:06:95:13:fb:ee:6f:8c:7d:83:4f:17:94:
93:72:fd:53:c5:eb:1a:79:10:62:f3:a7:11:79:df:
c9:9d:f4:9c:14:18:0c:a1:4c:d3:1a:e9:3f:c5:eb:
68:3e:52:b0:5a:79:42:ed:b9:b0:de:e0:26:c9:47:
25:69:95:12:2f:be:84:43:cb:fd:38:2f:25:c3:7e:
64:7f:55:19:6b:28:31:73:bf:b6:b7:37:f1:df:fe:
46:0b:5b:ad:33:ce:3c:16:48:64:88:b2:c4:eb:4b:
ca:c5:ae:c8:4d:51:18:f8:a0:b0:f2:4e:46:cc:4b:
70:c5:89:7e:80:15:61:66:b3:43:7a:9a:d9:82:88:
0c:1b:ed:b3:7e:0f:7b:c1:2b:cb:aa:96:a2:24:e9:
63:b4:76:fb:62:d2:1d:85:79:97:7f:ab:14:3d:cb:
14:20:09:c2:e5:50:1f:b7:f4:72:ff:4b:c9:dc:58:
91:01:e8:9f:97:46:33:64:6a:82:dc:c5:10:d8:55:
09:db:9d:95:21:6d:ae:11:20:e7:ca:8a:b8:9c:18:
ac:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1C:3A:16:E2:0F:88:3F:2D:53:E7:C9:9C:D0:09:FB:7E:C5:76:8B
X509v3 Authority Key Identifier:
keyid:E0:A0:10:6C:D2:85:7E:F1:32:34:86:7C:B7:F1:6A:23:A9:3F:AA:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/46f147-173f-4260-aa7b-3a6bf890a01d/1/4KAQbNKFfvEyNIZ8t_FqI6k_qpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:70:f3:54:0a:48:b0:eb:49:4a:88:68:72:59:0a:d5:aa:5e:
ea:ec:37:59:c2:fe:58:75:6c:12:41:6b:d5:18:d9:3a:54:88:
27:9e:5a:a1:79:53:66:c7:a4:69:23:cb:cc:c1:d1:1c:49:8f:
c7:07:13:22:b9:eb:63:ee:d0:d6:10:21:4d:cf:ce:d4:2c:11:
f3:29:fa:61:3c:8b:30:b2:b5:4f:da:12:e2:f7:c5:67:2f:b8:
d0:2c:55:a4:dd:51:e2:9d:de:67:35:db:15:b2:5b:1d:f1:ff:
f1:28:89:08:0f:92:de:c9:1c:50:d2:6f:9b:91:d2:a3:16:22:
86:f6:e9:aa:48:08:9f:1e:07:01:e0:1c:f0:0f:c1:ac:13:b5:
1d:ec:70:45:73:5f:57:63:66:ed:16:0e:41:3b:9f:aa:f4:b3:
72:de:90:31:b2:a4:b6:a7:bc:27:90:4a:70:6b:59:88:ec:72:
73:7e:5e:55:81:75:a1:93:f8:08:e9:e4:71:ac:1f:20:13:9e:
20:86:81:b4:e5:a5:3a:d9:63:47:61:05:1a:cd:c9:9a:9e:d6:
50:1c:bb:12:b0:ae:80:78:6a:25:89:c2:f1:d3:5e:27:c6:19:
56:6e:df:14:81:ae:d8:e5:7d:b9:e6:04:e3:ba:db:a4:72:ac:
44:a6:03:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:22 2025 by rpki-client