Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
File: 4JbEM2QAPsP398bqgVe4pQ9EDsw.mft (raw, json)
Hash identifier: 1cPw7s4HvIRAcNp5FS5fm8tXsRUzW+cEgkOwFYuDlPw=
Subject key identifier: 67:F7:C1:19:08:F3:DA:E3:DB:7C:22:FD:06:92:45:8F:24:35:2C:8A
Authority key identifier: E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
Certificate issuer: /CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Certificate serial: 0194BC3C5AD8A14F08EC61B632B663043E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: 1-3RhAT2YPB0r1ebiXkFnyV6tG8Y.roa (hash: IQS6khxqEbU9ABB49P6SoigiSYTvtS2Iy2GfbbCv2tY=)
2: 4JbEM2QAPsP398bqgVe4pQ9EDsw.crl (hash: 6Pu7y2JKB+ipryAeTVEZHWQ0qo84m9unB3hv3KzOScg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5a:d8:a1:4f:08:ec:61:b6:32:b6:63:04:3e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e096c43364003ec3f7f7c6ea8157b8a50f440ecc
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=67f7c11908f3dae3db7c22fd0692458f24352c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1b:0c:80:9b:ab:3f:ad:d1:8f:85:25:5a:c9:
79:c6:48:10:2a:34:d0:cb:9d:3b:88:9f:54:6d:f7:
29:75:dc:60:10:26:eb:59:97:7c:e5:a2:6f:5b:be:
31:0e:9d:c1:d2:36:4c:82:ce:33:ce:16:48:a6:6c:
b3:e1:fe:bd:68:25:a4:79:21:32:75:a7:e0:37:e0:
45:3d:60:f2:df:83:02:ec:d0:6e:55:2e:c1:39:fe:
d7:81:51:e1:ae:5b:ff:b6:32:9b:3c:00:e9:26:d0:
de:b8:47:07:e2:05:ac:e1:7d:44:12:65:03:40:67:
87:f6:1d:ff:08:7c:2f:61:60:b1:f5:c2:2b:d7:6d:
a7:2d:45:19:74:9f:72:ca:1e:3a:13:c5:03:12:af:
16:58:f3:8e:f9:e9:89:20:8b:b3:4d:9b:e9:80:d2:
c2:12:6a:34:af:39:ab:4d:78:c2:29:49:00:07:e9:
a9:a8:81:61:ca:65:4d:f4:ae:f7:db:00:16:e5:72:
70:a7:b1:5e:6a:70:5c:91:10:04:04:ab:99:f6:49:
57:a1:72:c3:25:8c:0e:d6:c9:e3:da:e5:d8:45:09:
c0:c6:53:8b:af:2b:70:14:51:12:6d:f7:09:68:46:
c5:36:fd:8a:e6:e0:eb:8c:43:0b:44:94:ed:39:70:
d9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:F7:C1:19:08:F3:DA:E3:DB:7C:22:FD:06:92:45:8F:24:35:2C:8A
X509v3 Authority Key Identifier:
keyid:E0:96:C4:33:64:00:3E:C3:F7:F7:C6:EA:81:57:B8:A5:0F:44:0E:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4JbEM2QAPsP398bqgVe4pQ9EDsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/c3bce6-58fb-4874-8b3e-3a85ee4c89bc/1/4JbEM2QAPsP398bqgVe4pQ9EDsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:2b:4e:61:4e:41:dd:f7:c6:32:5e:20:9c:ad:67:cd:b2:ec:
85:20:c7:b2:3f:1f:0d:ec:09:de:68:a1:a2:c3:d4:d9:11:6b:
a2:27:21:32:3a:d0:cd:8b:8c:6f:02:24:90:8a:65:59:d3:c6:
26:c7:18:b7:6a:77:86:1a:c5:a1:f5:e8:f0:88:96:f3:1d:f8:
67:18:fc:db:67:5b:b3:d0:d3:50:3c:b1:74:8d:81:15:75:cb:
06:86:eb:92:88:c4:da:e7:2a:35:c7:b6:0d:c1:c3:20:03:18:
de:0e:a4:1e:86:f2:81:c3:a5:e0:66:27:af:5e:a8:fb:03:6d:
0e:11:49:9f:d5:ac:d2:84:48:07:6f:de:4c:d7:b4:5d:39:71:
ad:a2:5c:cb:40:6a:21:4a:2e:92:d7:00:22:47:77:25:ec:58:
34:6c:bc:59:70:3c:7e:fb:49:73:93:85:b0:ea:82:3d:b5:c9:
7b:82:ec:77:c2:77:1f:00:95:04:c6:96:40:c8:66:66:b0:9b:
6c:99:76:2b:01:09:65:21:8c:cc:10:3f:1d:90:f1:82:99:87:
43:3a:19:9f:83:69:39:84:3d:32:73:1a:cc:e1:bf:35:4e:bd:
30:77:59:7f:c6:b6:78:fa:f1:4a:4e:81:49:3a:49:6b:47:b9:
15:4f:33:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:00 2025 by rpki-client