Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: XK1V2nbU5EzzDmqJwqc1NAKjjwYmvLv/0+Ao2CNuHyk=
Subject key identifier: E8:B3:88:EC:E4:A7:EF:92:CD:22:D8:61:CD:49:02:FF:58:5C:B1:F6
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 0194BBCE1B346826859E3AC781CE0670C42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: 7A0tNSRCRHZ+8gzzusRsxCGAzSibV9ZgU+023AsY66I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1b:34:68:26:85:9e:3a:c7:81:ce:06:70:c4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=e8b388ece4a7ef92cd22d861cd4902ff585cb1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:b9:29:10:d4:25:72:44:4b:30:dd:da:dc:
74:18:8f:1f:57:7c:70:dc:07:91:6f:0c:7f:a6:06:
b2:c5:40:e3:df:95:2b:d3:cf:dd:1b:42:82:bd:11:
c5:78:be:5a:bb:d7:b2:16:7c:61:08:c9:ec:91:21:
9a:3d:5c:85:70:6f:79:86:ca:9e:40:08:10:2c:d7:
53:74:5d:e6:18:c3:c3:d7:ab:07:2b:9b:95:05:a5:
95:c4:b2:fa:5f:16:79:90:26:ab:21:ae:8c:1a:f5:
20:75:75:7e:dc:4d:31:c4:01:82:d8:05:0b:dc:30:
3a:33:a3:b0:1c:eb:b2:09:84:a2:9d:d2:40:41:6a:
a6:b9:42:98:2d:f2:15:c7:45:b8:52:3f:45:5d:2f:
5d:1c:b0:d7:f9:60:d2:a7:e3:cd:c9:9d:c0:e5:22:
2b:d7:4c:a9:47:62:4b:dc:bd:f8:17:87:a1:b6:c5:
fd:04:6e:be:1f:fe:60:a2:0a:fb:37:bf:51:aa:d5:
42:3e:28:17:d1:08:fb:f5:97:4f:c5:f9:73:d2:7e:
66:cc:1e:ac:6e:12:72:bc:2c:e6:66:fe:44:8e:88:
f4:95:a9:e4:6e:40:ae:85:b9:dc:7b:63:8b:ce:d2:
b2:bc:32:62:9d:98:c1:5d:f5:ea:da:e6:96:5e:40:
2a:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B3:88:EC:E4:A7:EF:92:CD:22:D8:61:CD:49:02:FF:58:5C:B1:F6
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:59:e6:47:93:8f:1b:99:33:2d:b3:bc:d1:8f:29:61:19:8a:
27:a9:e9:13:38:9e:a2:c3:7d:e1:af:ef:f2:a2:83:3b:33:bd:
b3:fe:80:25:c3:4b:66:2a:d9:9e:f1:31:b8:95:19:ea:5f:de:
d1:7c:07:2a:22:d9:31:60:5c:13:df:8a:54:d0:7a:d3:d9:95:
2f:8e:17:69:2b:e8:df:d0:d1:34:77:8e:ad:e4:70:e6:6d:9f:
8d:79:03:8f:99:c1:2d:98:f4:3c:8a:d7:c3:95:f8:ef:d0:3e:
0f:fb:c4:6b:a3:53:68:f6:e8:78:bb:0f:8a:15:c1:c1:0e:be:
45:c0:b8:09:c4:81:e3:98:18:7f:1a:b6:64:2d:7c:44:af:8d:
23:ad:01:32:7e:6a:1a:01:8e:92:5b:2b:09:6c:67:20:79:c5:
df:f5:fe:af:2a:c1:c1:95:be:01:16:67:c0:2d:1e:69:0e:8a:
05:06:28:02:29:f6:e4:e8:d5:c9:0c:15:d3:0a:78:06:00:ec:
5c:8f:f1:97:5a:f6:92:51:96:27:12:11:35:c2:b5:aa:f0:81:
80:e5:39:d4:d0:aa:1a:32:ef:1b:f3:66:35:03:ab:7e:00:79:
55:8d:ef:4a:dd:ea:2e:25:e0:67:a0:fb:7e:1d:a5:79:9d:28:
13:1f:48:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:39:58 2025 by rpki-client