Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
File: 4T43FhOUZeaoz59r2LW492M68ig.mft (raw, json)
Hash identifier: jTtqkr2+HZo9zrekBTLGKJBKs7S3UxMqi34WxJL+Vig=
Subject key identifier: 14:76:44:79:66:50:65:B1:02:BF:6E:64:F8:A8:F7:19:B0:57:2F:0A
Authority key identifier: E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
Certificate issuer: /CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Certificate serial: 0194BD85326B61A8C9420EDF9987FE8C1AA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: 4T43FhOUZeaoz59r2LW492M68ig.crl (hash: 4Cia/CUvUvdt1MbNfi6dFM9InJRu/YJLFkT1ZbUzWCo=)
2: VbNrPWQYTWo9s0J6s8AxjamlwvI.roa (hash: /mWvYY88JMhRPBUym5HOiq9hJe5sysSC0ACyBbQ58No=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:32:6b:61:a8:c9:42:0e:df:99:87:fe:8c:1a:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e13e3716139465e6a8cf9f6bd8b5b8f7633af228
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=14764479665065b102bf6e64f8a8f719b0572f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:16:69:b1:ee:90:cb:b0:1f:8d:6e:5e:e3:d3:
06:af:20:33:98:3b:df:2b:4b:0d:f4:96:af:61:25:
47:cc:34:0a:17:63:99:f0:6f:52:27:2d:4d:b1:00:
2b:4a:4d:e7:e4:b2:c4:4c:9f:d2:e3:41:f7:ba:b0:
dc:c8:9f:60:56:87:a2:36:a1:20:82:f6:ab:54:22:
ea:49:36:12:5a:5c:8c:49:f0:c3:34:d2:a8:cc:93:
f3:6c:41:19:62:f4:87:03:0b:9e:5a:08:04:94:a9:
3f:a2:5a:71:a7:4b:b4:18:b7:f6:cc:87:aa:17:2f:
b0:e1:cc:13:92:9d:7a:8a:62:ac:5c:a8:ed:34:f1:
bf:92:ea:28:30:23:ec:5b:70:c2:54:0c:03:7c:cd:
9f:b5:dc:c2:ae:a2:1e:bb:05:ab:49:c2:f7:bc:46:
5e:b0:e1:91:03:7c:83:46:d5:6f:f7:80:28:e9:69:
85:df:31:2a:f7:ff:b8:af:6d:3f:fd:33:3a:5f:43:
0d:49:cd:5c:29:5a:78:98:33:1b:d4:35:1e:de:b3:
68:44:04:d2:7f:dd:74:56:77:39:c0:9d:89:e3:9a:
82:71:39:52:7c:62:7e:16:d7:f1:b4:87:2c:7b:45:
6f:bb:8c:91:0b:85:d1:12:84:91:ce:06:03:16:44:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:76:44:79:66:50:65:B1:02:BF:6E:64:F8:A8:F7:19:B0:57:2F:0A
X509v3 Authority Key Identifier:
keyid:E1:3E:37:16:13:94:65:E6:A8:CF:9F:6B:D8:B5:B8:F7:63:3A:F2:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4T43FhOUZeaoz59r2LW492M68ig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f3d446-ac06-4902-a647-ef1570c72599/1/4T43FhOUZeaoz59r2LW492M68ig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:92:e7:2b:8e:a2:5f:01:5f:54:5d:6f:0f:9c:1d:51:5b:73:
33:9e:46:22:06:9c:8d:ae:53:3a:a9:da:f6:05:90:65:be:f4:
f4:4a:2d:aa:23:c6:4a:9c:68:eb:2b:aa:f0:9f:cf:ce:5a:5d:
a0:d1:f9:15:2c:8d:bf:fc:ff:5f:85:8a:d5:db:fa:4a:76:ab:
1e:f3:85:8e:97:0c:30:30:af:db:fa:f9:a9:ea:1c:96:8c:bb:
9c:63:a1:e7:d7:f4:04:d2:58:e2:e0:a1:e4:65:8e:f1:33:fb:
89:3d:b3:a5:85:11:be:e9:e1:13:f8:07:82:21:ec:b3:34:92:
92:73:6b:da:bf:40:b7:4d:54:07:65:1e:bb:ea:bd:2e:05:31:
1c:c4:66:17:87:ab:d1:15:31:6f:ca:bb:cb:c6:d0:3e:d8:0c:
7c:54:62:a2:8b:6e:3b:88:fd:59:33:b8:45:38:ee:8d:07:b2:
07:bb:aa:5d:c1:50:ed:9e:ad:c6:59:0f:ad:bc:95:90:6b:11:
31:2c:a3:9b:69:54:98:0a:69:4b:d1:2c:16:3f:cb:01:88:6e:
85:34:87:c8:40:2d:d4:f6:db:99:69:53:c5:d9:94:5a:1b:bf:
bc:3a:06:d0:5d:83:f9:34:f6:5d:ad:80:36:45:6d:7c:59:af:
16:ec:fb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:20:47 2025 by rpki-client