Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
File: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft (raw, json)
Hash identifier: MpjwgPPKasPHLmoC3AENc4hxebMTPD3DdRag/xUtxLs=
Subject key identifier: 56:8B:FF:89:5B:7A:21:47:D5:CD:B7:C4:A1:70:6F:ED:92:CF:D1:5A
Authority key identifier: E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69
Certificate issuer: /CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69
Certificate serial: 0194BBCE8CF5C0FBA0540E80685CCCBCA487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: 4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl (hash: idU3wAPIdwh9U+fKdM88TfpHglQ4jxVjuK+LXHbSoTM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8c:f5:c0:fb:a0:54:0e:80:68:5c:cc:bc:a4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2a4d145ee89b27b1553d551c20a15bc6bbf6d69
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=568bff895b7a2147d5cdb7c4a1706fed92cfd15a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:cc:92:03:95:a8:05:05:08:e7:b0:2e:91:04:
7e:e6:14:94:53:39:da:09:73:5b:a3:f0:b1:62:3d:
52:5f:e8:a9:8e:d1:56:99:f9:d9:25:fd:61:63:44:
8a:ea:ae:06:0c:ef:03:29:03:33:da:9a:dd:f7:9b:
e5:84:eb:72:8b:63:4a:58:cb:a0:c9:c8:0f:5e:9b:
17:c7:72:6f:e0:c2:9e:a5:33:d4:da:6d:71:41:5b:
db:c6:46:cf:f3:d1:51:b7:0a:78:8f:7f:f4:a8:89:
c6:6a:6d:0c:15:ca:9c:a2:a3:ca:97:6e:75:76:4b:
ea:eb:ba:cd:ff:cb:42:9c:e4:1a:00:5d:49:95:13:
43:c4:df:58:a3:6f:88:6d:ae:c4:cb:f9:05:15:6f:
ad:c8:9e:0b:10:71:80:7a:61:91:5f:12:e8:aa:13:
43:c1:bc:63:c2:1a:fd:3d:85:b1:10:63:6d:e1:dd:
dd:c5:53:8c:79:58:af:cc:a6:31:b9:44:8c:f6:af:
88:86:1b:a8:d6:e3:14:67:3b:1e:4b:4b:5b:50:e3:
4a:70:f9:05:4a:f4:49:68:ec:7d:0a:a8:21:ef:5b:
bd:72:07:8b:9c:d9:19:08:fa:e2:2d:c0:95:31:df:
b6:2f:c2:20:b2:ee:46:0e:11:30:d7:00:d4:d8:1d:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8B:FF:89:5B:7A:21:47:D5:CD:B7:C4:A1:70:6F:ED:92:CF:D1:5A
X509v3 Authority Key Identifier:
keyid:E2:A4:D1:45:EE:89:B2:7B:15:53:D5:51:C2:0A:15:BC:6B:BF:6D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qTRRe6JsnsVU9VRwgoVvGu_bWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bf641b-e2a5-4c1a-bf21-c3b9f201332e/1/4qTRRe6JsnsVU9VRwgoVvGu_bWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:34:47:dc:6a:97:e3:be:68:4a:dc:c0:4d:e2:2d:e8:d5:b0:
dc:cc:97:11:d5:37:8c:6c:dc:25:c1:06:84:29:54:08:e2:6f:
6d:2c:f3:fe:e2:4e:70:8a:30:ae:10:12:02:6c:4f:d6:e4:87:
a3:15:18:11:8e:6b:ad:71:1b:3f:0b:ff:27:49:13:58:44:57:
f2:6a:f2:b6:8d:bf:f8:b6:bc:d1:41:ea:66:b7:d8:96:ac:15:
0a:20:b9:e7:14:74:81:08:a0:59:a7:b7:a1:74:fe:c3:32:f6:
f7:c7:02:0f:d5:c9:46:6b:f0:9b:20:5b:c1:32:0d:26:b4:e2:
39:ce:13:cc:c3:11:8e:d6:5a:98:7a:f4:b5:dc:e8:b5:32:22:
7d:87:cc:1a:7f:c4:10:58:46:38:2e:f8:8a:9f:23:40:29:34:
53:56:c3:45:77:56:c8:58:27:35:a8:ca:4a:f2:df:32:c7:17:
fc:b7:f5:b8:79:eb:2e:42:db:8e:91:e3:31:da:fa:b6:dd:bf:
41:f3:78:86:25:46:ca:4c:c5:4f:94:64:35:a8:10:2f:36:43:
f9:7d:9e:6b:d5:6e:ef:0a:d2:42:bf:16:03:eb:35:2b:32:77:
8e:67:30:8a:5f:2d:0c:86:05:3d:95:4e:b3:52:5b:02:70:aa:
be:6e:29:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:49:28 2025 by rpki-client