Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
File: 4bUJZyudmYtGScw3aoKYeeb-rKc.mft (raw, json)
Hash identifier: EZ36fdRUTFZhSZp1hbd7Ok4w0dt+P+0gvsK5VQ8yTFs=
Subject key identifier: D2:1C:4E:85:F5:6C:64:CE:37:FB:B7:C6:08:97:43:5B:78:38:C1:14
Authority key identifier: E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
Certificate issuer: /CN=e1b509672b9d998b4649cc376a829879e6feaca7
Certificate serial: 0194BD8524DF5BD91FF0DFBFB59AB74FFB47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
Manifest number: 0327
Signing time: Fri 31 Jan 2025 18:00:06 +0000
Manifest this update: Fri 31 Jan 2025 18:00:06 +0000
Manifest next update: Sat 01 Feb 2025 18:00:06 +0000
Files and hashes: 1: 4bUJZyudmYtGScw3aoKYeeb-rKc.crl (hash: JLDXTGfNGRgUuLHtRGm3V9c2vdpEZXdIsbLtFTYZ9XY=)
2: OQo7GpnulSOExhIEm_K7r3ad-fY.roa (hash: Ps91P3w11BS7K9Fm7RIorSRMZXeRo1jCwYGqQnSXpfM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:24:df:5b:d9:1f:f0:df:bf:b5:9a:b7:4f:fb:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1b509672b9d998b4649cc376a829879e6feaca7
Validity
Not Before: Jan 31 18:00:06 2025 GMT
Not After : Feb 1 18:00:06 2025 GMT
Subject: CN=d21c4e85f56c64ce37fbb7c60897435b7838c114
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:5d:37:55:0d:d8:f3:b5:01:f8:eb:14:83:
22:69:3e:6f:5a:25:a4:d1:56:de:e1:dc:c0:76:84:
a3:6c:16:fd:55:ca:90:ce:f4:c1:fb:01:d7:7d:ca:
37:81:30:35:53:e4:f1:86:4d:f1:89:9c:7e:f1:56:
98:91:dc:d3:35:a8:07:08:d7:13:53:a1:fd:85:f6:
32:2f:ca:5f:ec:af:0d:7d:ee:b8:87:7f:3a:61:31:
10:63:cc:fb:37:c7:26:fc:ec:f1:ba:f6:88:d0:24:
35:a7:1f:98:3c:bf:58:d4:34:cd:0d:da:ba:36:f4:
ca:0a:ab:de:cc:62:9c:98:39:62:d5:8f:9d:c7:9c:
18:39:57:16:e7:8b:74:ca:7b:e6:34:0f:cb:e0:5b:
75:f2:25:a7:fc:03:4a:85:77:d0:af:fa:48:50:12:
3d:fe:db:5e:49:bf:a4:e1:54:72:27:08:bc:74:90:
1d:74:77:e2:a7:31:9d:ac:d5:6c:2d:94:61:1a:45:
b7:f4:1e:6b:e1:58:01:67:ed:f5:5a:a6:30:c6:99:
91:e3:ce:22:36:44:97:5a:50:c7:50:49:cd:bc:01:
24:17:a2:5c:95:49:43:86:e1:16:e4:59:b8:72:37:
ee:ce:f5:db:7c:61:6f:fd:96:06:0d:47:37:2a:12:
56:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:1C:4E:85:F5:6C:64:CE:37:FB:B7:C6:08:97:43:5B:78:38:C1:14
X509v3 Authority Key Identifier:
keyid:E1:B5:09:67:2B:9D:99:8B:46:49:CC:37:6A:82:98:79:E6:FE:AC:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4bUJZyudmYtGScw3aoKYeeb-rKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/546a55-ddaa-4341-b8f9-3ec522771f40/1/4bUJZyudmYtGScw3aoKYeeb-rKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:d6:04:a6:f6:50:8d:f2:51:2f:71:6b:72:dc:e6:c2:1b:e4:
0f:61:a7:97:6e:99:55:37:f6:f0:59:e8:ca:eb:89:97:a6:63:
c2:eb:3c:0b:48:3b:dd:7c:21:4c:a3:9b:54:6f:fb:46:75:20:
8a:0b:82:1d:a9:4e:9e:29:5b:0e:21:5d:24:8b:05:42:e9:f1:
9f:07:b0:61:32:dc:a3:be:9a:e6:7f:5c:c2:7d:22:fd:58:51:
5c:58:57:16:e2:47:f1:bc:8b:70:d6:85:f6:f2:40:48:04:d3:
72:d6:9a:52:2a:78:fb:f1:d3:de:b3:bf:7c:5b:11:49:85:4a:
27:c7:55:bf:5f:cd:6d:9c:fe:50:13:67:d4:dd:ff:e9:f8:33:
d4:64:5d:81:f0:c5:ff:e5:0e:3f:f6:20:26:0e:13:53:1c:02:
7c:e6:fd:42:03:a1:65:08:a2:4c:df:59:89:97:3e:53:ff:1d:
d1:60:f7:0f:0b:b0:a4:c0:5b:4e:27:1c:ac:25:f0:fb:3c:01:
98:5f:d8:33:58:44:99:0f:31:78:7c:4a:d4:0a:9b:67:0c:7e:
65:7f:82:61:61:fa:1c:72:b2:86:8e:aa:5e:fb:25:5d:fa:3e:
bf:4b:4c:42:66:69:52:2e:aa:53:98:2d:af:3a:a4:a1:34:54:
49:2b:f0:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:02 2025 by rpki-client