Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
File: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft (raw, json)
Hash identifier: O5IhUUoM2oncyz1Is/oV11juB5fGdigh7VdT/NG2A1o=
Subject key identifier: 62:08:39:D5:22:EA:20:06:6D:7B:2F:96:BA:95:02:74:94:72:F9:1D
Authority key identifier: E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
Certificate issuer: /CN=e08945d1fc7b470e6873655f7559300e097a65e8
Certificate serial: 0194BCA968E28416C62303C1DD404A458A4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:06 +0000
Manifest this update: Fri 31 Jan 2025 14:00:06 +0000
Manifest next update: Sat 01 Feb 2025 14:00:06 +0000
Files and hashes: 1: 4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl (hash: Egi9+goxpPO7JUjArKWcQYF508PaafTevzhLob8Tgqo=)
2: v8biWOV_nsNX1ilIaxvt6SJe6Ow.roa (hash: ncGnxGmhlyRE3Vp5tuC1OddbegBnGSDwDfQcrYZJehw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:68:e2:84:16:c6:23:03:c1:dd:40:4a:45:8a:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e08945d1fc7b470e6873655f7559300e097a65e8
Validity
Not Before: Jan 31 14:00:06 2025 GMT
Not After : Feb 1 14:00:06 2025 GMT
Subject: CN=620839d522ea20066d7b2f96ba9502749472f91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:b6:f8:b1:c0:74:b2:16:3d:9d:ff:e7:fc:4d:
1f:cf:fc:d5:c3:93:42:48:5f:00:0f:b4:bc:c0:a5:
88:f9:28:18:7a:b2:3e:eb:45:17:c8:c1:ea:d4:a9:
81:37:61:f0:ba:33:86:82:bd:94:1d:c7:51:09:05:
2c:9c:e1:a0:c2:c6:6c:3d:ba:09:8b:d8:4f:b2:1c:
31:f0:10:d4:a9:7c:39:7e:f6:1e:47:9c:db:2d:09:
7f:18:89:1a:68:71:f0:a1:2b:15:d9:cc:d7:c7:0a:
36:76:30:27:1e:46:ba:b1:0a:df:ef:29:2e:ed:0d:
89:0a:d7:10:69:bf:50:5d:6f:d7:3f:14:01:e4:51:
a2:98:21:af:ce:da:f7:93:cb:b6:42:9f:40:5e:72:
66:ec:03:6d:f1:6d:29:4d:69:cf:62:5f:76:e0:f2:
fc:5a:69:af:7d:c6:d2:b5:24:bd:b1:f7:14:31:4b:
83:26:fb:20:60:f0:a4:5c:7c:47:11:71:c4:ec:8e:
94:c6:44:9d:11:d9:8c:09:77:aa:69:66:19:82:60:
97:41:b6:f1:6b:a8:e0:2b:b1:ae:a7:2f:d8:2f:8a:
a6:ff:09:ec:69:1d:bb:1a:75:6a:73:d0:a7:11:8e:
ff:29:e9:c1:75:16:36:b8:8a:b3:b6:8c:81:56:af:
43:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:08:39:D5:22:EA:20:06:6D:7B:2F:96:BA:95:02:74:94:72:F9:1D
X509v3 Authority Key Identifier:
keyid:E0:89:45:D1:FC:7B:47:0E:68:73:65:5F:75:59:30:0E:09:7A:65:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/03a3bf-0cfc-430a-985d-28e773db91c2/1/4IlF0fx7Rw5oc2VfdVkwDgl6Zeg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:a2:9b:54:39:8c:99:09:58:de:b4:05:1c:42:d7:01:93:95:
c4:c0:3a:1e:1b:c0:9d:06:60:c9:3f:62:c8:7b:a0:8d:ea:da:
93:a6:eb:f4:89:02:a8:85:c7:18:ae:33:cc:48:31:1f:82:50:
86:45:b1:4b:ae:ab:b9:8c:57:ba:3a:04:b6:a8:3f:3d:12:7c:
24:a2:41:32:d2:43:e3:2f:de:2f:d7:3d:9d:44:a4:c3:cb:84:
a5:d4:f7:f1:ff:e2:9d:a8:17:4c:3f:f7:dd:88:fa:d4:aa:c6:
95:d0:24:4c:8e:b7:f2:e5:7e:3d:fe:8a:0a:b3:30:79:6f:f4:
2f:b4:0a:5a:d6:2d:ea:8c:3e:fd:50:70:0f:31:e8:44:47:43:
55:44:bf:0c:88:8b:55:49:86:8d:b9:fd:ba:ac:d5:ba:20:4b:
0e:78:cf:54:04:af:1d:da:e6:0b:17:60:46:ae:20:9a:27:b0:
c8:f8:63:2c:e8:f9:51:29:40:20:7a:32:c3:b1:04:f6:f4:44:
ba:9b:3a:d4:d7:73:99:90:c7:96:37:0b:56:d4:9f:45:3f:af:
e2:13:8b:c7:f9:53:39:94:36:ca:37:c1:86:a6:bf:1b:21:41:
ec:23:a5:4a:f1:88:88:ea:87:2c:db:df:3e:e8:ad:bb:2f:26:
3e:b5:70:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:44 2025 by rpki-client