Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/18d035-3494-4ab7-a5cb-9f788fd27520/1/tD1On-OlSH0g8QABkWKRUPYo86E.mft
File: tD1On-OlSH0g8QABkWKRUPYo86E.mft (raw, json)
Hash identifier: pGbpJLC+i2dB49fnQgQm3bpVNbInW3gqND5DlQF1qwI=
Subject key identifier: 87:3D:54:82:82:3A:05:73:0F:1A:52:C8:FC:9D:2D:38:02:26:F5:09
Authority key identifier: B4:3D:4E:9F:E3:A5:48:7D:20:F1:00:01:91:62:91:50:F6:28:F3:A1
Certificate issuer: /CN=b43d4e9fe3a5487d20f1000191629150f628f3a1
Certificate serial: 0194BCAA23D232D54578D08F762E65807099
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tD1On-OlSH0g8QABkWKRUPYo86E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/18d035-3494-4ab7-a5cb-9f788fd27520/1/tD1On-OlSH0g8QABkWKRUPYo86E.mft
Manifest number: 08FB
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: WJX8pUUgztAx5ziEUO7pdOPaYpY.roa (hash: Zv2hcAwndmbcI8AgNFSDMAAPE42QlNQ0rd+YTdhMpog=)
2: tD1On-OlSH0g8QABkWKRUPYo86E.crl (hash: XPyAFXzIoF1vEJKAtUDkifmV1peG79eKiUg6H5QaxAY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:23:d2:32:d5:45:78:d0:8f:76:2e:65:80:70:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43d4e9fe3a5487d20f1000191629150f628f3a1
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=873d5482823a05730f1a52c8fc9d2d380226f509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:15:78:52:ff:d3:a3:aa:10:63:c1:14:f7:
86:84:07:0a:40:22:2a:8b:2a:45:e2:43:cd:ae:4f:
d3:93:37:6d:3f:64:38:f0:a8:97:bd:12:26:b7:0a:
ec:6c:8f:31:a2:b3:86:10:df:2d:63:bf:9c:cd:60:
88:8a:3a:f0:ac:c4:4e:f2:7b:e4:a6:8f:68:40:f7:
01:5e:40:1d:2d:6a:1e:fd:7e:ab:d5:d5:cc:e5:26:
a6:54:51:3f:55:50:60:25:07:b4:fa:1c:04:73:cb:
fc:9d:ca:df:b3:9f:07:4f:75:ab:1c:4b:6d:ac:2c:
de:27:6c:e8:c9:bc:bd:e8:f7:57:7c:1e:20:ae:82:
4e:51:fc:a9:0f:51:8f:fc:9b:ac:cd:bb:f2:4f:97:
c3:91:a2:85:af:ec:64:45:65:a7:b9:bb:d5:aa:47:
8e:b1:cc:46:6d:98:fe:da:95:c6:00:f0:cd:64:81:
cf:40:95:c3:87:b7:45:25:aa:b7:45:e7:6f:79:63:
a9:76:e9:2a:86:02:07:aa:b4:c7:fb:85:64:ee:fa:
b5:e0:ab:15:4d:62:81:a2:a4:81:ce:c5:d7:46:a9:
4b:74:4d:04:1b:a6:a9:3e:fc:04:98:51:77:60:11:
8b:fb:bb:94:68:ce:b9:72:fc:a0:81:87:0e:ff:0d:
03:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:3D:54:82:82:3A:05:73:0F:1A:52:C8:FC:9D:2D:38:02:26:F5:09
X509v3 Authority Key Identifier:
keyid:B4:3D:4E:9F:E3:A5:48:7D:20:F1:00:01:91:62:91:50:F6:28:F3:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tD1On-OlSH0g8QABkWKRUPYo86E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/18d035-3494-4ab7-a5cb-9f788fd27520/1/tD1On-OlSH0g8QABkWKRUPYo86E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/18d035-3494-4ab7-a5cb-9f788fd27520/1/tD1On-OlSH0g8QABkWKRUPYo86E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:93:f2:59:28:7e:19:ed:66:d7:52:87:75:8f:5e:6e:17:c2:
44:0b:1b:c7:5d:2f:a0:65:89:47:4b:81:92:a4:1c:f3:f3:2e:
48:b6:81:9b:45:eb:0a:6c:7d:d7:df:a4:0c:3b:a0:8d:02:14:
06:94:92:69:e3:10:5f:06:35:e1:e5:38:1d:60:37:14:50:85:
12:1a:22:15:fb:9f:8d:04:a4:8d:90:da:09:a0:aa:0b:34:32:
42:8d:e0:9f:af:ee:a0:91:89:ac:bc:b8:b6:47:83:64:20:07:
4f:33:57:9c:33:8f:3b:0f:ed:60:ed:12:34:a4:5e:65:fe:3c:
a8:be:c9:f5:ef:fa:04:33:1a:ad:2c:16:42:34:b3:14:27:37:
d5:d0:96:70:72:e9:65:39:19:13:f5:1f:f1:0b:64:5f:05:f9:
47:a9:bd:14:de:28:e4:bf:48:e9:ce:d7:95:99:1f:fa:06:54:
33:73:78:24:14:35:58:b8:d4:af:56:48:ee:6a:5b:17:fa:a4:
12:6f:c5:29:1a:ad:e3:34:9e:5c:fe:4b:07:b8:47:e8:a0:97:
9a:85:3e:89:30:b0:c4:91:20:40:44:1f:1e:96:f8:6a:39:a2:
52:2e:b5:e8:87:1f:71:0e:8d:62:f3:65:ec:ce:5f:25:43:55:
8f:d5:c2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:45:10 2025 by rpki-client