Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
File: t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft (raw, json)
Hash identifier: Cf86DhaVKV6NK0x8wgwbJyZmoJjo1HCha4R0heTgx+M=
Subject key identifier: 89:B9:B4:B5:C5:C7:C4:69:03:E7:62:32:48:F7:FA:E5:82:C1:B2:7C
Authority key identifier: B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
Certificate issuer: /CN=b795aaf033004c92d7a26c236c14d32552d78d94
Certificate serial: 0194BCAA2189E4BB2FAA3B2692302F1186CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
Manifest number: 0DF6
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: oAZxYtQ4Og3cgsl-3lYamhsa7e4.roa (hash: 3ae/XOyTNvdp+V+oKgkV4BxFv5zwWxKjx15ZyehKjvA=)
2: t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl (hash: xE+WN7/ko41+p49krh4WkPUfWhq5ieEK4IQKU80uOKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:21:89:e4:bb:2f:aa:3b:26:92:30:2f:11:86:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b795aaf033004c92d7a26c236c14d32552d78d94
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=89b9b4b5c5c7c46903e7623248f7fae582c1b27c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:bd:2f:ac:fe:1e:92:b8:f2:d4:dd:31:83:7b:
9f:54:1e:dd:58:ff:c2:d3:3a:7e:c0:e1:0f:ec:3d:
83:50:3c:0d:a5:95:29:50:8b:99:b5:7d:3e:78:44:
c9:fc:e5:1b:ce:77:26:19:ad:59:ed:d3:ae:da:86:
ab:56:9c:49:6d:80:a6:57:ff:7c:10:57:e2:e2:14:
02:31:dc:ce:f6:47:3d:43:43:49:5d:a7:2d:9a:ef:
a8:c4:3d:cb:5b:90:04:8e:1f:1d:87:cf:78:54:e3:
c3:4f:76:a6:23:a5:ea:d7:21:e7:ad:8e:dd:ff:b5:
69:ac:91:6c:39:00:17:d2:b0:85:5e:8d:b2:9a:fc:
f0:95:d5:39:3a:15:5d:64:3b:d9:b1:a2:d4:bf:cc:
cd:1c:9a:91:b3:ec:7e:0f:e9:57:54:3f:6d:7b:d6:
a4:ff:3e:48:59:aa:5f:cf:f5:12:37:29:a7:c0:71:
c1:93:13:ed:60:51:12:6d:6b:65:e5:d9:5b:9b:75:
2a:56:c6:7e:a5:aa:9d:56:7f:3f:62:a8:0c:c0:72:
92:d0:e2:5f:9e:bd:00:4f:85:e9:89:66:d3:11:a2:
64:e7:e1:e9:45:6a:28:57:6d:fa:cb:ef:9f:c2:a2:
6c:3f:f3:ce:0b:79:c0:09:15:ee:d2:8a:4d:83:35:
14:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B9:B4:B5:C5:C7:C4:69:03:E7:62:32:48:F7:FA:E5:82:C1:B2:7C
X509v3 Authority Key Identifier:
keyid:B7:95:AA:F0:33:00:4C:92:D7:A2:6C:23:6C:14:D3:25:52:D7:8D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5Wq8DMATJLXomwjbBTTJVLXjZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/c752b2-18f9-4191-88f8-c065f242f020/1/t5Wq8DMATJLXomwjbBTTJVLXjZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:da:bd:63:a8:e1:b8:37:fb:fa:df:6e:94:02:20:78:94:cf:
ed:c3:e4:63:7e:2b:8c:e0:e3:01:07:40:ba:e3:e6:6d:63:4c:
95:71:8e:c4:42:12:73:d5:17:ca:7b:2c:6c:4c:2e:9f:10:a8:
46:17:88:fd:54:88:04:fc:0f:10:11:60:11:82:c8:8b:e0:e6:
35:64:a3:fa:e0:56:67:8c:c9:1f:d4:c5:40:01:f9:5d:63:2c:
9f:4b:59:5c:1a:19:81:01:12:25:15:cb:19:cc:41:27:bd:b4:
fd:53:00:6d:a5:22:53:21:2b:1a:25:9d:d0:f2:75:02:cc:d0:
3c:a6:40:7f:26:f7:ba:f5:d9:09:a9:cc:e7:12:00:e9:eb:e6:
0e:d0:9c:96:59:e5:2a:90:bf:47:7c:9e:68:d9:c4:b4:06:f2:
b0:48:a4:f3:7c:46:2d:31:30:c4:f1:60:60:98:e4:7a:5f:dd:
54:a3:50:17:b5:bc:38:2b:c1:e7:2c:2c:fa:7a:c6:ac:ce:3f:
45:f5:d7:9b:71:7a:92:ed:90:44:59:20:5d:4e:99:78:aa:b6:
4c:91:9c:6e:2c:0b:33:81:05:13:77:dc:84:50:65:60:2f:57:
dd:b4:08:99:73:36:08:bd:4d:f3:a6:b8:8e:07:6e:87:cd:a6:
dc:77:3f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:24 2025 by rpki-client