Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
File: 4AEry55udHI3ckeBpMkZ_FyUGWU.mft (raw, json)
Hash identifier: 8mg0Vo+8vbsZ80rkZEHYTT2mk4mxRlYTRefXx6QIb3c=
Subject key identifier: FA:4B:9E:CB:4D:B8:F8:0D:F0:13:46:12:03:BC:94:BE:94:ED:0A:82
Authority key identifier: E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
Certificate issuer: /CN=e0012bcb9e6e747237724781a4c919fc5c941965
Certificate serial: 0194BC3C698BC673E4DB5FA0C6A86D31A6AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
Manifest number: 04AB
Signing time: Fri 31 Jan 2025 12:01:03 +0000
Manifest this update: Fri 31 Jan 2025 12:01:03 +0000
Manifest next update: Sat 01 Feb 2025 12:01:03 +0000
Files and hashes: 1: 4AEry55udHI3ckeBpMkZ_FyUGWU.crl (hash: SWvo2aw0UvmB1HI3KoTOB1gRHPw9HuduIPlF4+xM3uk=)
2: MYSNIQYUaSC8ss7EtwLxh0CCkZs.roa (hash: AWgu8sQIv0FgWnatk16HiARuSleHz/0dfX9flEkjltg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:69:8b:c6:73:e4:db:5f:a0:c6:a8:6d:31:a6:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0012bcb9e6e747237724781a4c919fc5c941965
Validity
Not Before: Jan 31 12:01:03 2025 GMT
Not After : Feb 1 12:01:03 2025 GMT
Subject: CN=fa4b9ecb4db8f80df013461203bc94be94ed0a82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:67:b9:49:c8:8b:82:18:c0:b8:e5:e5:b4:af:
ca:18:dc:4e:01:dd:93:31:b9:c7:ac:8d:51:de:c4:
9f:b0:c5:88:5d:7d:0d:18:a2:a7:ee:a8:15:54:ad:
3e:10:3d:33:57:1e:22:a5:e7:ff:08:bb:48:cc:46:
e7:79:78:7d:d0:f0:78:15:6f:5d:c0:97:ba:ba:e6:
14:30:c0:5b:8c:7e:2c:06:03:6f:aa:44:15:29:86:
56:af:28:43:26:26:65:02:ec:35:ad:e3:4f:b8:6c:
dd:06:90:45:fa:a5:be:69:dc:0a:b4:a3:45:7b:e9:
a6:ae:d0:cd:46:00:3d:a7:98:d1:1b:06:36:74:99:
54:da:90:e9:3a:ec:f5:bc:ad:af:d4:1a:6f:2a:53:
e0:6c:ba:df:4a:00:11:34:72:76:57:6a:93:11:ba:
07:1f:e9:ad:30:b0:17:18:fd:83:b3:a6:3c:d8:0f:
7b:b9:07:a9:72:4f:be:b0:f4:59:76:c1:96:87:4b:
78:b2:cb:d0:00:77:87:37:42:76:a1:75:b9:2c:12:
73:a1:52:71:31:f7:e6:8a:2f:ca:0b:a8:d1:74:2c:
94:26:c9:7b:f6:16:5d:dd:ea:4e:c0:2a:e4:47:fa:
13:60:65:e4:2b:af:79:78:2c:b7:27:42:24:e2:28:
b5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:4B:9E:CB:4D:B8:F8:0D:F0:13:46:12:03:BC:94:BE:94:ED:0A:82
X509v3 Authority Key Identifier:
keyid:E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:21:51:53:7c:41:e6:3c:1e:80:7d:da:1e:95:0d:85:08:ff:
53:84:c4:b4:c6:e7:32:fb:b5:b5:93:2a:82:f7:a1:db:2e:d0:
87:73:06:43:33:94:cd:f1:ad:1f:f8:30:9a:e3:41:d1:d3:21:
4c:26:c8:f8:af:5b:f5:14:3d:af:60:60:7b:69:6a:58:e9:5a:
82:ac:b2:4f:c5:dd:13:8e:a8:1f:37:ff:20:df:9e:d1:37:72:
a9:83:35:04:cd:84:72:66:7b:5b:c0:37:00:35:1d:8e:dc:76:
96:96:a0:94:d4:f0:30:96:03:87:40:b4:cf:db:88:44:2b:86:
c4:f8:ed:fa:36:59:8e:c0:8f:89:2c:d9:1b:cb:00:95:b6:92:
c3:30:3d:6b:b6:69:d0:7e:0a:37:79:84:e8:d8:16:68:b8:07:
d0:c1:34:2b:6b:ce:c9:8b:08:18:d5:f9:87:a5:48:81:6e:17:
db:96:4b:a3:bc:e5:98:de:48:48:5d:cc:9d:59:b6:0d:8d:e4:
9d:e4:d0:d1:42:3d:2c:6a:31:35:b6:43:94:fb:f1:8f:75:be:
9f:21:6c:f8:63:8c:97:25:b6:7b:51:69:37:07:f4:a8:e0:60:
d4:c1:97:8c:c2:ac:22:0a:3d:e4:18:fe:ef:d6:63:e7:8e:80:
a8:7b:ca:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:17:53 2025 by rpki-client