Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
File: 43EGB7p6gV6RHEiS-WixiuZgQ4k.mft (raw, json)
Hash identifier: +27OpL45p9hhpOV6mFEEz9uQ46BZrFBXEsu8vZEILpE=
Subject key identifier: 94:5D:18:79:99:C7:FB:7C:E4:E2:66:D1:AA:E8:08:D1:0A:2F:74:74
Authority key identifier: E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
Certificate issuer: /CN=e3710607ba7a815e911c4892f968b18ae6604389
Certificate serial: 0194BBCDC1A02BBB287AB13BD1BA9E5E49AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: 43EGB7p6gV6RHEiS-WixiuZgQ4k.crl (hash: XHVzppkoba8b3D36KljiiPvLBNwxmFZQ2eBZy52vGks=)
2: gdCbju7iq0jqbnL3F15jB2y6w9k.roa (hash: 5imVu9OgEC0LpB68Uf/xLlkHKg4D35cIEP4G8Ci0Msk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c1:a0:2b:bb:28:7a:b1:3b:d1:ba:9e:5e:49:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3710607ba7a815e911c4892f968b18ae6604389
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=945d187999c7fb7ce4e266d1aae808d10a2f7474
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:bc:df:2d:49:b5:88:24:d5:cc:b5:22:c5:
ef:61:8a:86:88:ff:bf:69:1d:50:cc:ca:33:08:cd:
d5:14:60:3b:ba:3c:c3:54:dd:6e:d0:e3:16:5c:0a:
93:37:ab:11:94:25:c4:7d:31:a2:34:28:b0:3d:60:
3b:50:0f:6a:06:ad:70:ed:b0:39:ca:96:a0:7c:fc:
20:dc:0a:4c:03:5a:47:3f:04:47:3c:5e:a2:76:81:
3d:0a:bb:af:99:a7:4a:cf:26:93:b7:0e:2d:de:83:
89:d5:62:0b:7d:f6:88:c5:0a:50:01:85:ab:6f:9a:
9d:d3:11:c3:16:36:83:16:75:be:b2:d5:9c:66:aa:
b3:b5:6a:47:79:d9:2c:af:dd:da:89:6f:9d:64:a5:
8e:82:d0:65:77:08:e7:9a:c6:d3:4b:bd:31:58:a2:
b4:14:39:08:ba:e1:e3:fc:b3:93:10:4e:e4:d3:33:
9e:c0:3d:a5:43:54:9e:76:af:2d:03:32:84:2c:7a:
f6:87:8e:88:52:03:bf:ae:fe:98:bb:54:86:1c:70:
e0:ca:0a:a1:c9:4e:8e:b0:90:c7:f6:21:ae:d1:7b:
e7:8b:a7:3e:cd:84:c8:ff:4d:67:31:99:40:f8:4c:
f1:7b:8c:b5:8b:03:b7:ed:69:2f:39:51:da:e1:f8:
02:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:5D:18:79:99:C7:FB:7C:E4:E2:66:D1:AA:E8:08:D1:0A:2F:74:74
X509v3 Authority Key Identifier:
keyid:E3:71:06:07:BA:7A:81:5E:91:1C:48:92:F9:68:B1:8A:E6:60:43:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/43EGB7p6gV6RHEiS-WixiuZgQ4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/045986-b3a4-49e4-8f45-126d5e60fdd1/1/43EGB7p6gV6RHEiS-WixiuZgQ4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:bb:87:e8:da:bc:ec:6a:91:20:fe:29:04:1c:a4:59:ff:f0:
1a:15:48:f2:ac:dd:3b:c6:98:fa:fe:ae:ee:a0:06:88:de:9d:
e3:82:0f:b4:b9:02:d7:c5:9b:74:e8:2b:c4:28:92:1f:81:db:
af:21:f5:23:da:4f:fb:6d:c9:e5:bb:71:af:da:41:79:7c:20:
99:33:21:5f:69:5e:3f:c2:f5:74:15:cb:71:61:d7:78:ae:3e:
c4:df:81:ef:3f:23:18:50:a2:a7:20:3d:90:b2:77:37:20:af:
c4:fb:1e:41:aa:7f:0a:fa:1a:ff:d7:cf:e3:f8:a5:0a:01:ef:
35:32:d5:ee:62:26:65:53:e8:12:ef:2c:01:44:e5:6f:f8:fa:
ea:4e:66:de:37:f7:01:93:31:66:50:ef:72:62:96:39:07:e0:
a5:7c:d7:c7:7f:24:e5:5b:1e:2e:08:23:21:4c:1d:a3:e6:46:
28:47:18:f6:08:67:0d:ab:b3:56:63:06:9f:d0:8b:18:8f:a8:
73:3f:84:ec:a2:bc:96:30:84:7f:ab:63:c2:df:ef:0d:60:a7:
89:19:2b:d3:2a:b3:6d:9e:2f:a3:d3:38:d3:64:17:62:2b:15:
5f:cb:91:8c:20:c6:44:ab:04:6b:33:93:8f:e9:ab:d9:76:0a:
c2:72:14:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:40 2025 by rpki-client