Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
File: 4kvChw3iWZ2vZkl_VynHSzPvmTo.mft (raw, json)
Hash identifier: Qt5Ha6oB001s4C+ANKWmFK4epQyhGJbZUVVLYeVnlm4=
Subject key identifier: F0:88:E6:C6:3F:A7:2B:1D:77:99:1E:76:E5:D5:CF:65:DF:AB:04:A5
Authority key identifier: E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
Certificate issuer: /CN=e24bc2870de2599daf66497f5729c74b33ef993a
Certificate serial: 0194BD85AE2AE3C0620CADAFD1DDE4ECADDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: 1-rpc7ufolrPPESf1-RPYDxCY_T8.roa (hash: aMrW8McI1AnE66yXNAmSVq0+rlupGq2T5Ly3LIkG59o=)
2: 4kvChw3iWZ2vZkl_VynHSzPvmTo.crl (hash: uQQYCChYgnfvPh89oDpMC/vK3USiJoOYhnhGUs4imgE=)
3: fTOQFI1UvSwnT9wznNbLZs3UG2U.roa (hash: L/h45q4tkE5FoRZ0DX9ltIgAYeRk4jVnxVfoOe4XvCw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:ae:2a:e3:c0:62:0c:ad:af:d1:dd:e4:ec:ad:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24bc2870de2599daf66497f5729c74b33ef993a
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=f088e6c63fa72b1d77991e76e5d5cf65dfab04a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:a1:5b:e5:bd:0b:80:58:1e:97:7c:01:f9:
9e:3c:27:90:ce:94:51:d7:47:6c:a9:9d:48:fd:09:
ab:f7:2b:25:75:e3:c7:5e:42:31:a2:69:78:d1:97:
96:2f:97:73:9e:fd:83:67:bf:9d:4d:ca:a7:45:87:
27:2f:c2:7d:38:b2:c7:07:ba:e6:b9:2c:8f:ad:98:
42:c7:b4:c1:f9:cb:af:8b:64:89:7a:44:54:83:ce:
ed:a6:4e:78:ba:38:de:78:a3:4c:c3:8f:67:cd:82:
29:f7:f6:f4:6c:25:05:05:07:41:f4:6a:f2:0b:e4:
54:71:bb:a3:f2:39:fb:08:41:18:1f:bc:4a:0a:a7:
cb:a5:27:f0:58:76:3b:c9:f1:73:e4:d3:c9:d4:5c:
12:fd:70:c5:b7:04:25:b0:6b:c5:d7:be:34:ab:8d:
02:00:ac:12:1c:b9:3d:78:b8:88:b9:70:cb:88:61:
a2:85:15:16:db:3a:6e:f6:60:97:a7:cb:c0:a9:5f:
99:56:eb:bc:a8:17:8b:1c:37:e6:85:5f:c7:86:c8:
a7:94:96:6b:d4:5f:10:cd:7f:2e:75:fe:29:00:2a:
c3:83:91:3a:7c:5c:a9:f9:59:ef:6c:f8:05:19:05:
37:69:9b:b1:37:fa:cb:c2:eb:14:3f:d4:db:b3:fb:
18:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:88:E6:C6:3F:A7:2B:1D:77:99:1E:76:E5:D5:CF:65:DF:AB:04:A5
X509v3 Authority Key Identifier:
keyid:E2:4B:C2:87:0D:E2:59:9D:AF:66:49:7F:57:29:C7:4B:33:EF:99:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvChw3iWZ2vZkl_VynHSzPvmTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/be1720-801e-4f9e-a5c1-68a2f0bb5b7a/1/4kvChw3iWZ2vZkl_VynHSzPvmTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:bf:35:d5:e3:9f:ea:2a:d8:64:f1:7e:2a:d8:f6:40:88:cd:
e0:a5:88:25:e1:1a:84:be:e2:22:89:08:c0:d5:6e:b0:2e:7e:
39:79:f1:a2:41:df:65:db:d6:89:2c:51:cf:82:47:14:49:00:
54:b5:d6:c4:f1:6d:de:52:82:74:96:4d:cc:f9:0d:e8:88:4b:
0e:a7:6d:f0:22:4d:4d:69:ba:5c:21:7a:23:0b:5b:1a:fe:76:
e6:db:37:29:3f:20:f8:d7:cc:d8:40:ce:b5:96:07:8d:04:3c:
0a:2b:b0:dd:1d:54:c9:88:0d:08:9d:1f:85:d4:c7:09:8b:a0:
59:f4:14:3f:5d:52:06:76:ed:17:4c:69:aa:66:25:ec:6f:89:
7c:8e:9f:52:b5:a6:2e:7f:37:25:dc:a3:a5:54:67:9d:6c:3f:
83:f8:cd:3b:87:67:28:03:86:59:2b:dc:d1:06:a7:8f:6e:a7:
82:92:37:da:ef:59:70:12:f5:d0:c6:4e:94:3e:d2:18:57:13:
e5:95:bd:c5:02:b9:72:71:f7:53:65:28:df:f6:ac:90:d6:72:
39:dc:be:4b:10:26:26:0e:d7:c8:d2:16:de:6a:8d:a0:d2:65:
71:0f:58:9a:38:ee:c2:95:4e:4e:c4:76:26:ca:1d:21:67:f2:
fa:f6:d8:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:42 2025 by rpki-client