Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
File: ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft (raw, json)
Hash identifier: QEH2OLAfGg527+PenW9KbI8Y6sPqXdka/gwBEjbnlJc=
Subject key identifier: B2:C7:2A:60:47:8A:D8:89:12:BD:43:F8:5D:A5:DB:86:44:B1:4A:5A
Authority key identifier: 11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
Certificate issuer: /CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Certificate serial: 0194BC72DFF968AA020C4183A5CB026ACD50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl (hash: TRhg4xfjkjwJnJuq8BcbwQAiQCIA4K9c58qSsHDzuWU=)
2: SLerrWQQ2Vv32Cq9bFz18GlkgMk.roa (hash: Ad8qEHYaGF2r52PO0P5P8U5o0SDN4u6UljC/+qUbGJ4=)
3: sJl_QdCBuSIuDI71IvgJXADnTiM.roa (hash: Jf4sGBR81s0wwCP57KaJL+znXy3bEncdMGZygIhMNj4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:df:f9:68:aa:02:0c:41:83:a5:cb:02:6a:cd:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=111e0cbbe5d1c0a09465095e444fbc1c7932c683
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=b2c72a60478ad88912bd43f85da5db8644b14a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f0:fc:43:c5:28:6d:8e:fc:96:c9:fe:4b:e0:
17:b2:48:37:50:7a:ed:94:c1:df:ae:e5:bc:53:92:
c8:0d:e1:0f:eb:e9:63:ce:6a:89:cc:bc:65:58:f4:
66:0f:a6:3b:ac:19:b9:4a:cf:c7:19:46:5f:b3:5c:
ea:3d:ad:f3:77:8e:e6:84:9e:dd:e4:29:76:a1:84:
09:59:73:f3:d4:82:41:8c:c2:b9:49:19:14:bb:ab:
14:b7:b0:0c:ca:d1:14:ed:02:c6:5c:88:89:a0:bf:
f9:7a:c7:ef:b9:a1:fb:52:a8:c5:1a:f3:34:a5:a7:
f3:9f:8b:ad:ce:f5:f7:d9:89:b2:80:88:3d:f2:32:
89:03:8c:5f:1e:17:13:30:2f:aa:90:ee:b7:15:0e:
67:c6:d1:be:f6:a6:04:29:22:a3:e2:ec:bf:bc:f7:
c4:0c:19:89:f0:90:d5:62:55:4a:93:42:ba:0a:e4:
e8:9f:88:d0:54:33:08:80:2a:87:24:bb:85:21:32:
67:8f:99:04:09:36:cd:b3:7b:dd:51:16:a4:5c:98:
09:ac:8c:a6:75:85:5d:b0:2d:c9:e3:d9:e4:37:f6:
38:1a:14:d0:89:c3:7d:31:6c:2a:6c:55:9a:69:e4:
0a:b1:5d:83:ac:a8:b7:d5:f4:26:9f:7a:5a:09:48:
b5:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:C7:2A:60:47:8A:D8:89:12:BD:43:F8:5D:A5:DB:86:44:B1:4A:5A
X509v3 Authority Key Identifier:
keyid:11:1E:0C:BB:E5:D1:C0:A0:94:65:09:5E:44:4F:BC:1C:79:32:C6:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER4Mu-XRwKCUZQleRE-8HHkyxoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b6c991-1fd4-487f-8778-d15e516dc45c/1/ER4Mu-XRwKCUZQleRE-8HHkyxoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:5e:26:5c:49:74:ba:20:53:e1:2d:e9:21:e1:2e:a7:d8:13:
d2:3b:13:05:7d:f4:aa:6f:16:f9:ee:94:d2:b4:22:c6:d2:88:
16:c9:bc:85:b1:3e:f5:a1:18:db:fa:ed:23:93:6d:d6:05:41:
d7:f6:a4:66:76:9e:76:72:42:88:ab:31:64:37:dc:9e:33:2e:
ba:78:69:68:a3:8a:37:b3:ae:63:c5:63:fe:77:ed:db:e5:8d:
a0:f8:fb:6b:2f:e6:f6:70:03:ef:f3:e5:00:ab:ad:7c:bf:c0:
a5:b0:66:8e:af:c5:ed:00:58:72:90:ab:a6:be:a0:93:6f:c3:
1e:79:12:33:55:de:6a:72:53:74:c6:8d:b6:04:17:18:b9:2c:
f6:af:29:1d:4e:17:a3:ca:12:dc:cc:fa:fa:43:41:76:1d:00:
4f:b1:97:72:be:5b:29:4b:6b:56:f7:c1:ef:a9:a6:a5:bc:17:
c2:26:6c:5d:b0:4c:c0:a0:7e:a2:9b:f5:a5:9e:28:8e:e0:2a:
83:e0:7e:84:40:8d:42:8c:55:18:ee:b9:20:c0:a5:b9:46:b0:
c7:eb:43:5d:ea:7a:99:24:92:b1:c6:54:9c:7a:b0:a9:d9:2f:
0e:63:1d:31:96:48:b4:81:46:a5:a0:a3:4c:1f:56:64:85:20:
5d:fb:9e:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:43 2025 by rpki-client