Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
File: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft (raw, json)
Hash identifier: S2rzIRM9qvjSgQ/4A6M7lqOIWtFUNZWIRryL/pzieXE=
Subject key identifier: 91:9F:E1:B4:05:81:3A:21:D3:FB:8F:E4:5F:5E:29:45:1E:5F:20:04
Authority key identifier: E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
Certificate issuer: /CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Certificate serial: 0194BC3C8894AF3366C53C84D00A97E50ADB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
Manifest number: FE
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: 4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl (hash: y0omDX+lJE0PQJH+y5UN8RrokDIFQnlj1PPuydJkgj8=)
2: sQlDLD71rwuQKEk9z1_BmhFOeQE.roa (hash: nNqb64nCN8cpCLQ5+ALkkO+gwOA+NXq21TqlMFS9bWU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:88:94:af:33:66:c5:3c:84:d0:0a:97:e5:0a:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1a21f85f9bf17c020987ea1320d3d63c55ae489
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=919fe1b405813a21d3fb8fe45f5e29451e5f2004
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:6d:c0:aa:d2:a0:b7:20:ea:8d:f9:85:c4:
48:97:28:e9:38:65:6b:ec:39:3e:78:bf:fc:0b:e6:
95:34:1e:57:52:b2:37:eb:db:79:5c:5d:03:96:96:
7a:e4:c7:90:96:b7:86:eb:20:e0:77:c6:f0:ea:83:
29:cf:df:4a:5e:2c:5b:c7:28:a6:cc:e4:99:56:cf:
81:72:a3:33:f9:07:c1:0f:a0:d3:7b:f8:19:c6:2e:
7e:bc:34:17:bb:92:44:0a:7d:7f:37:4b:f0:47:ab:
91:68:c2:36:27:90:6f:73:26:cc:e6:08:60:63:32:
ce:8f:f6:52:6c:56:de:e3:68:fa:4c:05:bd:04:bc:
70:60:f3:aa:c5:55:07:3c:62:19:d3:3a:5e:fa:b1:
61:02:ec:2f:26:e4:c3:2e:56:40:66:a9:cb:51:8c:
a8:42:45:c2:5d:4d:46:a5:7a:8c:b3:e2:99:2a:17:
73:54:08:b8:8f:c3:ba:94:14:85:3e:e1:a1:57:0a:
54:51:83:26:84:a3:ef:c8:4c:f5:ed:75:5f:61:63:
5e:d3:55:ac:2d:cb:64:0b:ff:d1:95:9f:ce:55:01:
91:b4:e6:60:39:b0:64:56:4a:88:a9:c3:e4:85:28:
9c:9b:fb:96:3d:06:ea:b2:f9:da:b9:a1:3e:02:4b:
78:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9F:E1:B4:05:81:3A:21:D3:FB:8F:E4:5F:5E:29:45:1E:5F:20:04
X509v3 Authority Key Identifier:
keyid:E1:A2:1F:85:F9:BF:17:C0:20:98:7E:A1:32:0D:3D:63:C5:5A:E4:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/53208d-6c31-4e12-aa25-862684eceb46/1/4aIfhfm_F8AgmH6hMg09Y8Va5Ik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4d:e7:89:58:11:62:fb:8d:2d:7e:42:46:81:7a:b5:d2:dc:
cb:c4:4b:6e:f8:f3:13:ed:3f:34:17:3c:01:0e:5a:37:dc:76:
19:25:be:0d:49:43:af:5d:71:1a:a9:2a:51:67:35:6f:99:01:
3e:5d:17:0f:ec:67:94:c5:bf:35:52:f1:6e:9f:3b:7e:43:1a:
8c:0e:49:0e:53:cb:5a:47:f3:f7:02:f3:d6:1a:70:62:31:bb:
80:ce:f2:73:0d:2c:2d:11:05:79:1b:53:ad:ae:e6:6f:91:be:
65:ef:d8:21:e2:da:9f:15:9d:55:99:a2:74:0b:77:aa:05:4b:
f9:86:f9:58:21:ce:9b:20:66:4a:4a:5a:10:41:d8:55:b7:5b:
c7:b5:52:dd:72:3b:13:05:a1:2c:30:ad:d8:4b:8d:9a:3c:e3:
db:a2:91:e7:36:63:63:d6:b1:80:be:4d:59:0e:79:07:25:20:
f8:99:bf:20:35:92:64:32:e8:49:33:52:04:e7:9c:43:26:88:
89:f8:40:c1:99:b5:af:c1:3d:96:cd:9f:0a:1f:64:03:53:c7:
af:f6:70:e9:19:cb:7b:2c:3a:b2:96:bf:60:ee:5e:eb:fa:74:
f1:7d:16:6b:01:b3:25:9a:a4:e9:fe:a3:43:34:68:ae:33:94:
e6:82:71:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:27:56 2025 by rpki-client