Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/4pRxrgqqyrg-KT8fjqG9cHDsM1s.mft
File: 4pRxrgqqyrg-KT8fjqG9cHDsM1s.mft (raw, json)
Hash identifier: FTiLBpoV3QBdLTszGh1FjI02fwpURyrwUuCf7/L3zbI=
Subject key identifier: 01:F7:B5:1D:47:76:19:E1:56:FF:4B:D4:3E:90:BB:3E:F5:10:CE:00
Authority key identifier: E2:94:71:AE:0A:AA:CA:B8:3E:29:3F:1F:8E:A1:BD:70:70:EC:33:5B
Certificate issuer: /CN=e29471ae0aaacab83e293f1f8ea1bd7070ec335b
Certificate serial: 0196003FA8380FF23E2561D9F35D14BCFEE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4pRxrgqqyrg-KT8fjqG9cHDsM1s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/4pRxrgqqyrg-KT8fjqG9cHDsM1s.mft
Manifest number: 07C7
Signing time: Fri 04 Apr 2025 10:01:33 +0000
Manifest this update: Fri 04 Apr 2025 10:01:33 +0000
Manifest next update: Sat 05 Apr 2025 10:01:33 +0000
Files and hashes: 1: 4pRxrgqqyrg-KT8fjqG9cHDsM1s.crl (hash: /6YZI+UotygUV2m3kHVhGOb//8i9WFb5xqIbpdNz318=)
2: lEVgi9I8nrIc-HhV_LhTJI8_UII.roa (hash: ee0opnDYNm6NaGhq5qqdUOHizQiOIqJZQ2o60F6FIkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:00:3f:a8:38:0f:f2:3e:25:61:d9:f3:5d:14:bc:fe:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e29471ae0aaacab83e293f1f8ea1bd7070ec335b
Validity
Not Before: Apr 4 10:01:33 2025 GMT
Not After : Apr 5 10:01:33 2025 GMT
Subject: CN=01f7b51d477619e156ff4bd43e90bb3ef510ce00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:70:dc:15:66:aa:02:4a:44:70:14:db:1b:
25:19:11:7e:b4:a2:24:4d:9e:e1:2b:e0:2c:e4:97:
12:8a:e0:06:0f:6a:3e:2e:f3:cc:0c:9d:30:d1:4e:
98:88:88:c9:d2:6e:f1:68:81:2a:10:48:7e:f9:8d:
6e:a1:87:2f:0b:9f:fe:af:44:ae:c0:b3:e9:d8:ac:
4b:97:8d:31:70:c9:51:58:89:68:50:31:04:cc:52:
a0:15:f7:26:d5:1d:e1:aa:f3:b5:a6:f4:66:6a:c4:
f7:12:92:11:89:db:b5:26:4e:4a:29:8f:04:eb:37:
49:2b:82:ca:a8:66:c9:e1:d1:83:16:14:ab:fe:47:
3d:03:9d:be:b9:24:01:f1:a2:a8:6e:33:68:43:1e:
42:23:43:3f:21:84:9b:54:8d:c5:69:3e:c0:88:c1:
96:ff:ff:4e:87:4d:87:1e:79:44:e8:54:e8:4b:33:
b9:db:5a:4b:a3:0a:5c:c3:4e:28:18:4b:16:db:17:
15:2b:fd:8a:9d:93:3a:b9:ed:f4:7f:25:9d:2e:ad:
32:1c:0e:b0:ed:dc:be:48:2b:8b:d8:56:59:6a:e1:
32:ad:25:33:1b:a7:77:f0:33:ea:4b:0b:b8:aa:ca:
d8:e3:26:1a:b5:a8:8f:fa:ec:18:bd:c2:df:9a:41:
6b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:F7:B5:1D:47:76:19:E1:56:FF:4B:D4:3E:90:BB:3E:F5:10:CE:00
X509v3 Authority Key Identifier:
keyid:E2:94:71:AE:0A:AA:CA:B8:3E:29:3F:1F:8E:A1:BD:70:70:EC:33:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4pRxrgqqyrg-KT8fjqG9cHDsM1s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/4pRxrgqqyrg-KT8fjqG9cHDsM1s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c8492d-c364-4d83-85b4-137b6e3b8c20/1/4pRxrgqqyrg-KT8fjqG9cHDsM1s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:b4:db:56:66:d4:a6:5a:6d:ab:5a:13:a9:43:ae:53:b2:a3:
30:1a:21:b5:97:99:7a:55:09:99:2c:5b:c7:b3:0a:ec:e5:41:
e3:94:3f:c5:cc:61:a5:78:46:fa:91:17:02:df:b0:35:1b:13:
15:1a:56:06:9f:86:e7:3f:80:fc:07:53:9b:db:7a:9f:d7:8d:
62:3e:37:f2:37:0b:ac:9a:f3:9c:ee:78:8a:04:b9:13:2e:e2:
45:5b:c1:21:19:e7:61:f3:73:e5:c4:d2:b4:0c:a8:52:49:90:
bd:d8:5b:be:d4:83:08:e3:0d:0b:af:d9:e3:4c:a3:6f:3a:ea:
88:c6:7c:1d:e2:e0:5e:ec:cf:b2:f8:02:d1:13:59:6b:ba:22:
8b:73:1a:7b:a7:9c:fb:ba:af:3d:e7:79:56:b5:14:59:74:0f:
af:89:20:d9:1d:d9:8c:c6:c4:35:c8:fb:a7:12:fe:69:ac:86:
fe:7d:58:ee:cc:c6:49:58:6d:48:e2:a9:1a:e3:74:5d:9f:d1:
b8:e8:c3:95:0a:73:c3:3b:34:9b:8f:4f:c4:b0:c1:03:2d:12:
1c:06:e7:b1:c7:9e:c3:ec:60:4b:67:87:f9:db:1c:47:2b:87:
b9:57:b5:51:ea:43:7b:04:74:65:a6:0b:98:e0:f4:ee:52:24:
c9:72:d9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:13:42 2025 by rpki-client