Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
File: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft (raw, json)
Hash identifier: kJ4o57/uC75vGdkbEyegh+UTboCMt9CzatFAOEWCbQk=
Subject key identifier: 94:29:3A:2B:3D:B5:0B:4E:30:E5:10:6B:DE:55:6B:70:3A:3F:5D:22
Authority key identifier: E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
Certificate issuer: /CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Certificate serial: 0194BC3BCBED1336C08F983610E9F57D429B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
Manifest number: 08CD
Signing time: Fri 31 Jan 2025 12:00:22 +0000
Manifest this update: Fri 31 Jan 2025 12:00:22 +0000
Manifest next update: Sat 01 Feb 2025 12:00:22 +0000
Files and hashes: 1: 4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl (hash: bOmbfkiQHdCsOBCvlHKzEjYxSbQmbdfye5jH9n9Mt10=)
2: 5sj4OfjUHNqFx_j1Ef8g7Ypw6oo.roa (hash: Pny1CSiGEjtv4l10QsiP9fVNmh1agrbGLVUftiy6LQs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cb:ed:13:36:c0:8f:98:36:10:e9:f5:7d:42:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e290e9cc3b7e363d726bd702750b53f29b050a7d
Validity
Not Before: Jan 31 12:00:22 2025 GMT
Not After : Feb 1 12:00:22 2025 GMT
Subject: CN=94293a2b3db50b4e30e5106bde556b703a3f5d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:84:36:5d:ac:79:c3:63:75:7a:87:16:90:17:
f6:07:21:b9:9c:67:43:cc:cc:80:df:c0:5d:1d:1b:
36:99:02:eb:a2:15:17:1a:1c:ba:d0:85:77:ad:ba:
4b:ea:84:8e:a9:74:14:34:af:4a:32:bd:b3:b7:4c:
fc:e9:68:ae:db:bd:ee:66:bb:0d:77:64:dc:16:ed:
8b:75:2e:d2:3b:23:04:da:2e:f3:e7:8a:24:26:3c:
03:00:8c:65:64:bb:3f:94:f9:6e:f5:5b:e0:0f:a5:
7f:c0:81:ad:e2:b7:46:4d:67:8c:f5:b1:f7:36:07:
a1:06:34:40:28:47:68:5d:15:da:a2:de:ce:87:23:
76:ab:1a:15:99:81:34:52:55:42:e9:05:cc:08:98:
e0:fc:76:09:98:65:87:ae:27:51:83:25:24:56:e9:
bc:b8:67:92:b3:7f:28:3b:75:fe:c0:76:19:0a:bf:
2c:91:dd:2d:12:1e:78:b8:e1:9e:da:60:da:2b:17:
e9:f5:97:01:1a:99:1d:e7:13:09:d7:f9:ce:22:9b:
57:09:4c:09:e2:98:fb:cc:b3:9d:61:6d:54:54:88:
c2:d8:38:51:81:08:8a:c5:bf:a1:0b:f3:7b:f5:2c:
53:b5:21:e8:c7:aa:83:eb:8b:9c:1a:37:0b:51:8e:
db:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:29:3A:2B:3D:B5:0B:4E:30:E5:10:6B:DE:55:6B:70:3A:3F:5D:22
X509v3 Authority Key Identifier:
keyid:E2:90:E9:CC:3B:7E:36:3D:72:6B:D7:02:75:0B:53:F2:9B:05:0A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pDpzDt-Nj1ya9cCdQtT8psFCn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/55354e-bce7-4a5d-b561-9113fd7afd6c/1/4pDpzDt-Nj1ya9cCdQtT8psFCn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b3:61:3c:e4:fa:6e:3c:36:b8:d5:d0:13:9b:bc:bf:0a:c1:
09:f5:b6:fc:8e:06:65:25:c2:0d:0a:ec:c0:55:4d:d3:4d:0a:
7a:92:6a:47:72:d2:72:f8:c9:a5:5b:de:26:e9:2b:d3:4e:fd:
dc:16:f5:71:84:56:ff:3a:fa:0c:c1:dc:c4:1f:80:cb:80:20:
c2:a2:f8:78:79:1e:d4:44:65:d2:58:fb:d1:c6:ae:74:9e:41:
dd:47:39:d8:a8:80:6f:f6:82:15:de:e5:4c:48:2e:ed:b8:4a:
40:fc:6e:59:43:9e:7d:e0:13:84:3b:31:5f:9a:e4:0c:d1:10:
25:ad:f1:e0:c5:3b:a5:fd:f4:18:d6:eb:b9:ef:fa:a6:cc:d4:
88:63:7e:0a:a3:be:0f:e5:33:42:66:62:cd:12:1c:71:0b:e5:
fd:98:b1:a7:e5:ee:34:a3:4d:a3:01:70:bf:23:e6:df:b6:1b:
59:4c:ee:82:1c:fa:4c:45:05:b5:30:de:15:4f:92:88:61:b3:
f8:dd:44:67:b5:d8:ff:7b:10:fa:a8:9c:11:ae:e1:6f:dc:a5:
f9:b5:1f:04:9f:6d:e3:f2:be:93:99:7c:c1:6f:d0:e9:79:8a:
a2:77:44:34:aa:77:55:04:bb:69:39:46:a6:30:d4:18:7c:73:
ac:62:f1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:45 2025 by rpki-client