Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
File: 4ddWkNOcgwGAs_VcSdFAoqBNORc.mft (raw, json)
Hash identifier: /RFa0V8YIPmNAu/zSfQMntxdioaXLvKq1wKEspSjHIo=
Subject key identifier: 25:1A:67:23:29:C1:10:FB:0A:D9:24:B1:3B:60:EE:5E:B9:4D:67:33
Authority key identifier: E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
Certificate issuer: /CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Certificate serial: 0194BBCDF31B28C42D7D6AD5B6CA164994E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:23 +0000
Manifest this update: Fri 31 Jan 2025 10:00:23 +0000
Manifest next update: Sat 01 Feb 2025 10:00:23 +0000
Files and hashes: 1: 4ddWkNOcgwGAs_VcSdFAoqBNORc.crl (hash: L9XESN5FfXaPctXKAJdfrGklv81NAOPNAZHhw/H4IwM=)
2: PdBwCNjRTwQhBka9QYTFJ85Levw.roa (hash: 1UzFJNiL/xWD/Kmj2JG8FjTPHthfJspZ/00KC7jKNXw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f3:1b:28:c4:2d:7d:6a:d5:b6:ca:16:49:94:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1d75690d39c830180b3f55c49d140a2a04d3917
Validity
Not Before: Jan 31 10:00:23 2025 GMT
Not After : Feb 1 10:00:23 2025 GMT
Subject: CN=251a672329c110fb0ad924b13b60ee5eb94d6733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8c:5e:d9:f0:48:9a:4d:67:7a:d5:d1:3b:1b:
5e:8f:34:3b:63:20:e6:69:8a:97:0f:0b:28:19:d5:
2a:1a:e8:d3:13:8a:ea:92:1a:18:bf:8e:71:11:51:
85:5f:90:4d:b1:f1:07:b8:87:51:a6:a3:0e:9b:0c:
af:01:66:53:70:67:58:a2:79:9a:59:42:d3:aa:4e:
a7:0d:1c:9e:bc:48:3e:74:e7:d9:66:81:fe:b8:c9:
7c:31:b4:d0:26:03:72:16:0b:9b:78:0c:f5:09:ac:
fc:31:c8:82:9e:48:00:59:56:9d:40:24:db:94:39:
e3:22:63:92:8b:dc:8b:78:d3:55:12:d6:55:ae:b1:
be:dd:a4:58:2a:34:b5:00:67:fa:19:8b:c5:ea:88:
d0:1b:4d:b1:30:3d:3e:39:69:fb:a6:b8:11:7b:9a:
d0:8d:8d:ad:23:c4:eb:a6:84:0d:28:76:49:a1:9b:
6a:2b:06:0f:6c:f0:96:87:bb:9d:15:ee:0b:98:f8:
26:04:f7:08:75:ce:ec:a4:28:97:7a:f8:28:20:f1:
cb:2f:4b:bd:59:7e:a2:5d:86:c0:85:56:29:22:7a:
e4:24:1e:72:b5:76:8f:1f:0d:ef:1c:ca:90:58:99:
75:8f:9f:70:c1:d3:ee:bb:16:a7:64:e0:1d:92:d3:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:1A:67:23:29:C1:10:FB:0A:D9:24:B1:3B:60:EE:5E:B9:4D:67:33
X509v3 Authority Key Identifier:
keyid:E1:D7:56:90:D3:9C:83:01:80:B3:F5:5C:49:D1:40:A2:A0:4D:39:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4ddWkNOcgwGAs_VcSdFAoqBNORc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2dad35-dd0a-4d63-8c1e-b9a36eb9ee21/1/4ddWkNOcgwGAs_VcSdFAoqBNORc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:a3:4f:6f:4a:2e:bf:6c:ad:d0:0c:a9:bf:40:4e:6c:6d:28:
dc:10:9b:48:e9:78:3b:8f:f7:ec:39:19:a5:ee:f3:e1:06:ec:
27:94:ff:b7:d4:f0:5b:4a:fa:24:a5:49:a9:2f:1a:02:f0:80:
75:b6:79:a2:87:8a:f4:60:b3:35:5f:4f:93:f3:b7:2f:6a:63:
2b:7f:b4:39:b9:8d:f3:6b:14:8e:29:b7:f0:86:45:3a:84:19:
66:bd:e6:7b:bf:60:9e:2b:12:73:97:51:74:7a:d7:50:62:ea:
48:04:c2:d7:fb:4e:86:41:82:3c:b6:50:32:65:80:e9:8e:a4:
80:ad:4a:7c:d8:40:24:60:5b:de:87:35:6a:25:56:2f:e1:65:
a0:92:6e:f4:91:fa:36:a1:5e:e6:bc:ea:2e:ba:08:90:8f:da:
92:59:dc:26:45:2c:71:08:99:05:bb:24:ba:cd:57:25:e4:6e:
77:dd:c8:7c:2d:3b:96:5f:b3:0e:0e:a1:0c:85:8d:8d:8e:0e:
99:90:79:98:b4:11:81:64:b7:52:89:f7:da:a3:63:af:a4:de:
98:fc:d4:ae:53:58:3c:1c:84:15:5d:c8:11:ad:cb:ed:fd:2a:
85:4b:96:5e:5f:53:4d:e1:68:b3:67:96:e1:57:a6:1f:61:f1:
4c:d5:24:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:07:55 2025 by rpki-client