Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
File: 4kLCt011daIop-ZPBAbzo5fHrlY.mft (raw, json)
Hash identifier: BAsZ9A1vNpU0xXt8UkGSx1HcbG/xpxMVwuJrwv8Fdno=
Subject key identifier: 17:A5:EF:50:68:67:8C:A1:C4:97:94:21:32:19:DB:4F:36:AD:D8:CD
Authority key identifier: E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
Certificate issuer: /CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Certificate serial: 0194BC72A5B95244269942B8171B2898FC50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
Manifest number: 07EC
Signing time: Fri 31 Jan 2025 13:00:17 +0000
Manifest this update: Fri 31 Jan 2025 13:00:17 +0000
Manifest next update: Sat 01 Feb 2025 13:00:17 +0000
Files and hashes: 1: 4kLCt011daIop-ZPBAbzo5fHrlY.crl (hash: 0U7352ZjUdBasJGtdlv/zZV884v7TviAkvl2DUaPRsI=)
2: tqH_QlpRHC3I-MGoNxLkAHQ-nF8.roa (hash: NbmtGcVLSkgpCEX2NZ9d9iO41gK+6pDcIvg0Zs3pCA8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a5:b9:52:44:26:99:42:b8:17:1b:28:98:fc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e242c2b74d7575a228a7e64f0406f3a397c7ae56
Validity
Not Before: Jan 31 13:00:17 2025 GMT
Not After : Feb 1 13:00:17 2025 GMT
Subject: CN=17a5ef5068678ca1c49794213219db4f36add8cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:95:46:96:74:34:22:e8:af:cb:ee:03:4c:02:
98:36:2a:4b:b3:60:1e:b3:62:63:33:62:30:41:70:
70:4f:79:7c:da:2f:53:0f:8c:88:50:8e:c7:f4:9c:
a9:67:cd:6f:d4:35:23:69:9d:fd:6c:50:25:bd:6c:
0c:a5:89:96:0f:86:ae:a2:43:ba:b2:a5:4b:67:cc:
94:96:05:76:dc:84:8b:25:d5:72:17:a4:5a:da:2d:
9f:bf:52:66:2c:d3:ec:35:aa:8d:80:9f:1c:3e:91:
a5:54:3b:1b:76:3c:ab:28:d9:f2:9e:30:67:73:e0:
2b:bf:ef:4f:72:44:96:05:e7:fa:74:e3:fb:c6:29:
b4:be:95:7a:7f:f4:0c:a1:67:5c:33:4c:0e:ab:b9:
83:78:aa:a2:69:51:cc:86:db:92:35:08:98:d8:0a:
ee:cf:e0:00:9a:22:15:aa:c2:af:7c:13:b1:90:eb:
20:75:74:b5:5c:da:71:c4:30:a7:44:9f:d8:76:19:
3d:4d:aa:40:15:cf:51:ee:6e:b6:cb:d6:a2:95:91:
bb:f2:03:7d:ff:37:8d:87:18:41:1b:cd:6d:ca:23:
ca:cd:9d:3a:15:2c:0e:45:7c:78:f7:75:42:a8:3e:
4b:ec:05:74:88:f1:d8:86:16:64:48:a1:83:ac:3e:
97:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:A5:EF:50:68:67:8C:A1:C4:97:94:21:32:19:DB:4F:36:AD:D8:CD
X509v3 Authority Key Identifier:
keyid:E2:42:C2:B7:4D:75:75:A2:28:A7:E6:4F:04:06:F3:A3:97:C7:AE:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kLCt011daIop-ZPBAbzo5fHrlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/7e3025-8caf-402c-b54f-cbb8cfee6e3c/1/4kLCt011daIop-ZPBAbzo5fHrlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1a:57:dd:dd:a7:76:a7:29:c0:cf:59:0a:d9:6b:20:fa:b7:
52:7a:25:b3:51:53:14:02:f9:b2:06:66:59:5d:5b:4d:4c:c2:
5b:95:d6:d5:a7:c3:af:0b:e6:46:fa:a2:77:f1:d9:05:43:8c:
3e:ec:2f:7d:76:2d:52:ca:0b:3e:1b:47:0f:a9:07:91:12:fd:
0d:38:c7:35:60:60:6e:46:0f:1e:ed:8f:6b:c3:b5:50:54:db:
3f:29:19:2f:1c:9d:79:ba:04:4c:c8:e0:c5:39:a2:8c:16:be:
e9:8f:f0:4e:59:2f:cc:34:44:3d:3a:c9:dd:9c:9b:e8:da:b3:
69:50:c2:ae:1c:22:6a:40:c3:e0:6a:57:c4:b3:66:bd:02:1a:
80:96:7f:5a:a3:2c:32:ca:d3:74:f7:20:cc:cc:16:43:cb:31:
38:df:87:00:af:ae:3d:7a:32:19:cf:50:5c:57:b5:1f:90:0f:
56:96:eb:51:3e:17:d7:b0:e3:c7:4d:9d:59:6a:e1:de:03:44:
5e:cb:71:df:fd:02:17:4c:55:37:63:e4:4e:96:8a:67:82:6f:
99:89:78:07:df:d9:9d:c9:2d:a9:eb:84:69:b4:43:13:7d:f7:
84:87:1c:4c:7c:2e:17:5c:74:8b:1b:97:9b:15:65:0d:58:ec:
db:83:41:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:36 2025 by rpki-client