Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
File: 4r7xjk9w0I3z-zD-5QfltakZb5k.mft (raw, json)
Hash identifier: 1WBQQcNyvHRgMAU3q27g8X8UsbUUe8lBrtOfibv6aJI=
Subject key identifier: 23:B3:93:44:11:47:F2:C8:8F:DD:14:B9:66:84:4E:00:D4:63:EF:A4
Authority key identifier: E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
Certificate issuer: /CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Certificate serial: 0194BBCE0513CD4E012D3D8408CF931A97AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
Manifest number: 068F
Signing time: Fri 31 Jan 2025 10:00:28 +0000
Manifest this update: Fri 31 Jan 2025 10:00:28 +0000
Manifest next update: Sat 01 Feb 2025 10:00:28 +0000
Files and hashes: 1: 4r7xjk9w0I3z-zD-5QfltakZb5k.crl (hash: HuDUtUvPFVIbk4FpfKxtlKbrH77oAVKxeWY3iABNr2s=)
2: MiW57nOg30xLDqZY9OOUVNFKZQY.roa (hash: 2YBiQuBVr6rbcdD+nTl7ci5JjnWlTA1kLFdMgjGPElQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:05:13:cd:4e:01:2d:3d:84:08:cf:93:1a:97:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2bef18e4f70d08df3fb30fee507e5b5a9196f99
Validity
Not Before: Jan 31 10:00:28 2025 GMT
Not After : Feb 1 10:00:28 2025 GMT
Subject: CN=23b393441147f2c88fdd14b966844e00d463efa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:24:92:48:87:2b:b1:2b:2f:75:7a:e4:cf:e9:
40:e0:99:87:fe:58:28:e1:2d:75:cf:5e:da:56:d8:
f8:f7:f3:0d:c6:8e:4c:61:cb:25:88:30:0a:f8:db:
96:4d:25:b5:63:fd:22:70:87:78:e8:fe:75:3f:a3:
59:8e:d9:34:fe:72:d6:33:7e:84:0f:25:91:7b:72:
47:15:65:02:f6:09:96:09:16:ce:3f:ba:54:37:92:
dc:84:bd:70:f0:2f:4e:a4:5f:ac:9f:d8:5c:4a:11:
b3:b3:e0:5e:50:12:15:33:00:d5:bb:f8:24:9f:db:
4b:5a:45:12:98:11:c9:06:22:dc:82:e8:c4:0c:ae:
19:b7:e3:69:f8:86:81:85:7c:e9:b4:d0:7e:ab:82:
7a:f7:00:f0:bc:72:c2:f2:2a:0a:8f:ba:19:23:eb:
30:60:1f:04:41:af:cf:0a:22:46:b2:ac:e9:67:1d:
37:2f:52:2d:4a:1c:47:88:da:ca:f4:92:de:aa:78:
1b:04:21:f1:ea:0e:e6:32:93:66:0a:5e:05:be:fc:
5a:8f:c5:5b:fc:45:70:b3:fa:4f:77:31:5e:18:bb:
65:23:21:6a:cf:c4:79:75:9b:2e:53:54:9a:9c:55:
12:f1:48:06:3d:c4:aa:9d:4e:86:f5:b4:b0:56:c2:
91:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:B3:93:44:11:47:F2:C8:8F:DD:14:B9:66:84:4E:00:D4:63:EF:A4
X509v3 Authority Key Identifier:
keyid:E2:BE:F1:8E:4F:70:D0:8D:F3:FB:30:FE:E5:07:E5:B5:A9:19:6F:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4r7xjk9w0I3z-zD-5QfltakZb5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/4d2928-c636-40c0-9c9b-7990e3d1ddaa/1/4r7xjk9w0I3z-zD-5QfltakZb5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:d5:58:60:fd:00:da:3a:62:67:a1:85:21:1a:d7:95:f0:9a:
72:0d:b6:c2:81:40:03:d9:0a:18:f5:f3:f3:8e:d8:5c:04:5e:
41:f9:84:7d:19:ad:dc:fb:1c:b8:c5:21:61:2f:6f:af:c4:c8:
28:a9:67:5d:67:a3:21:62:3c:f2:ba:9f:ca:fd:da:ea:98:72:
87:04:35:5f:4f:39:28:7d:ec:ad:ce:91:c5:92:55:fa:58:24:
7b:6b:bb:d8:e0:50:19:e1:5f:ca:54:a0:a7:0e:44:52:ca:c8:
92:77:e4:b1:b0:e6:bf:ee:99:e2:90:fd:ad:80:f4:9b:f7:74:
6e:93:eb:4b:6e:13:5e:6c:c7:a3:a4:d5:8d:28:20:30:d7:56:
c3:f1:fa:36:8f:30:f5:9a:6a:16:19:ec:df:13:67:f3:6c:1c:
da:07:7e:7e:3e:1f:7a:76:fb:72:96:fc:f6:4c:80:0f:3e:8b:
63:df:0e:36:c0:e5:d7:16:a2:05:bb:03:c6:51:59:8c:62:74:
92:29:2c:7b:72:ad:6d:de:1d:5c:30:39:f4:3f:3b:9f:6a:cc:
c2:0c:9a:cd:db:2e:a6:89:2a:15:0a:e4:44:b3:f4:99:a2:c5:
f6:12:d2:cc:84:28:a2:9f:43:f4:69:8c:48:bf:96:32:fe:fb:
c7:34:32:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:06:17 2025 by rpki-client