Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
File: tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft (raw, json)
Hash identifier: hWTh7mqpTXcH5qTNXp0L0HPI0gsQIpbS6/eo/pYOnng=
Subject key identifier: A7:FD:8E:67:AE:47:03:12:4A:D3:88:58:66:4F:B0:AA:13:75:55:10
Authority key identifier: B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
Certificate issuer: /CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Certificate serial: 0194BC3C0F25FA47BACAEC7A7E9C73CA8C0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
Manifest number: 0E89
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: Tm8yT_3vBgLrxw1Lr4A3GN1Cjk4.roa (hash: cpwfuPoZQp9+xwJvstUEZKWWh0LDOj40EbCeSJBVSfw=)
2: tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl (hash: aZzq2Yz/mSA3IyBIbb25GXwTQ49llcx1e2Nso8hv2O8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0f:25:fa:47:ba:ca:ec:7a:7e:9c:73:ca:8c:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b448d626a920e42dacd0e948e966a5e4bcc3c11c
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=a7fd8e67ae4703124ad38858664fb0aa13755510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ea:8c:1a:1d:8a:b8:3b:bd:ad:70:82:91:39:
c9:03:b2:c9:9c:9b:e1:83:32:04:77:d6:60:fa:ad:
73:ff:f6:ff:cf:da:f8:7e:e0:6f:63:99:23:20:a6:
57:2d:17:67:9a:a5:39:d1:9e:94:e0:0a:aa:d8:70:
79:f5:9c:39:d7:c7:1b:d4:b8:c2:eb:ae:0a:0c:ec:
a2:e3:3c:79:b4:26:5d:15:53:4e:d6:ea:a4:b8:a6:
12:96:30:c4:12:a3:b7:b5:35:0c:02:34:6e:c5:45:
eb:54:ab:cc:5a:99:14:92:4f:c4:aa:33:ca:96:69:
8e:82:25:be:27:75:db:cb:ad:ab:c8:9d:29:bb:6b:
b6:c1:53:8f:c7:f5:3b:55:a2:e1:37:8d:89:de:75:
f7:b3:a2:a1:05:93:93:7b:55:75:80:06:93:63:9f:
d6:e1:10:29:50:7a:12:83:c0:d0:e4:70:32:83:33:
2f:40:56:5b:50:7d:c8:e6:1d:6e:50:f3:a2:b3:27:
93:b7:20:af:9a:8f:bd:f5:36:5d:13:0c:b6:12:c6:
02:07:8f:53:6c:d4:17:fa:c8:16:45:c0:14:4c:5f:
af:ae:1f:35:fd:cb:72:04:b3:97:c2:a2:9d:dc:ac:
a6:a7:4f:e3:3c:23:8a:e5:bd:e7:8e:79:bf:ed:e0:
7b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FD:8E:67:AE:47:03:12:4A:D3:88:58:66:4F:B0:AA:13:75:55:10
X509v3 Authority Key Identifier:
keyid:B4:48:D6:26:A9:20:E4:2D:AC:D0:E9:48:E9:66:A5:E4:BC:C3:C1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEjWJqkg5C2s0OlI6Wal5LzDwRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/55d584-19a1-47c0-95a6-bc8e0b69ac12/1/tEjWJqkg5C2s0OlI6Wal5LzDwRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:8c:95:81:d2:37:fa:b8:1c:45:79:f4:3c:95:cb:a4:a1:3b:
ad:8a:0b:7e:69:32:db:fd:26:00:b8:c0:fc:1d:43:20:7d:1f:
9f:7a:eb:97:57:01:a5:f3:70:58:69:5a:15:96:5f:fc:64:0a:
23:64:79:c9:a3:df:bf:c0:d9:4f:d2:57:76:8e:97:f7:bc:f8:
ba:c5:55:14:c1:0a:f5:44:90:06:0a:f2:57:c1:34:56:2b:40:
6c:18:7d:c3:1b:e6:0f:c5:8e:22:c0:95:a5:09:e1:ca:b5:11:
08:c6:08:7f:2d:73:04:7f:53:1e:b4:99:03:38:a8:64:05:b9:
75:a0:1c:7b:04:cb:a6:78:b2:ce:3c:fb:32:10:9b:9d:30:44:
2d:d4:65:51:bb:bd:a9:d4:14:39:f3:92:15:ad:ca:38:cf:fb:
e7:88:92:5c:75:f5:5d:89:3d:1c:6f:5f:88:0c:1b:36:b7:ca:
52:6f:da:22:0d:43:b1:7e:a8:1c:3d:d7:f4:68:3c:95:fe:a8:
e6:50:0b:e9:9a:6c:cf:d7:5b:39:0e:1b:00:b4:13:e7:ca:24:
ad:c8:9a:53:19:28:95:a5:7b:b2:15:9c:32:ea:c7:29:6f:73:
0e:4b:18:82:26:44:72:64:68:59:1e:10:de:11:61:5a:14:e6:
ad:e2:a6:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:23 2025 by rpki-client