Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
File: TIEnPcsDw0V7eSUL4Qnhml508P0.mft (raw, json)
Hash identifier: IDLhuV4Jm13/Nnn6D1MGNjubUBOxbbLJxcechwBovUk=
Subject key identifier: B2:AC:BC:90:5B:02:25:D7:A6:04:35:41:A1:56:6C:6D:67:33:F3:AC
Authority key identifier: 4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
Certificate issuer: /CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Certificate serial: 0194BC3C674F768303FD3DB8282037DE96DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
Manifest number: 0624
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: 09h3HegSzHCmBBBWGcTWBjEqm-k.roa (hash: e2MlTegDWzHw8Qc0vpcn4p75pDoA+fAb45rhwd6sZ2c=)
2: 2H-bW8UZI3iJgi7-SD7ICzn-6yE.roa (hash: 6BFAD/kuUp8ggYQ5Z6VEt8Ffgu906xvZpM65LYf/A40=)
3: Nrmj7OZr3VRqV-mPGEt59p2belk.roa (hash: qKP+VMvb5X+LyJaWae51YmN4HE54Q3kw6hy8LaIxSiU=)
4: TIEnPcsDw0V7eSUL4Qnhml508P0.crl (hash: d1lRz+pTrQ6Qogs2rQGBvzWytb/VWdEKg09NNjVyuHk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:67:4f:76:83:03:fd:3d:b8:28:20:37:de:96:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c81273dcb03c3457b79250be109e19a5e74f0fd
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=b2acbc905b0225d7a6043541a1566c6d6733f3ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:02:88:fb:86:25:91:7a:ce:3f:d3:ef:87:
05:30:90:14:c6:1b:66:33:38:1a:00:cc:35:aa:3b:
18:1f:e4:9c:d2:60:91:a6:b4:69:33:29:08:bf:fd:
ab:3b:b9:87:ac:ca:b2:c4:b5:54:c1:79:0b:79:99:
19:26:9d:8c:65:c9:ce:7e:f9:dd:31:e4:0c:3c:40:
03:9d:81:35:3d:f0:29:ec:fd:de:bf:3d:29:0f:52:
6a:35:02:56:0c:d8:c6:c6:9e:97:55:11:b5:ba:d3:
9b:ef:d6:aa:30:54:d7:92:1e:b3:59:90:d7:27:48:
b9:1e:77:6e:2d:90:b9:d8:0b:e6:21:18:7a:41:2f:
88:79:06:7d:9f:b3:5d:00:b0:eb:df:7e:fb:c3:68:
f1:ec:e3:b9:70:4a:39:8c:01:df:96:60:a1:6d:e4:
21:bc:8b:c0:49:8c:1f:4b:74:bb:7b:55:4f:84:79:
cb:f3:ab:81:b2:4c:39:76:bc:5e:c4:02:51:ed:fc:
44:01:c3:a4:d0:cc:f9:d6:16:a1:e6:c4:5d:5e:b3:
67:59:dc:cf:a2:90:cc:54:dd:c6:65:4d:4a:bd:30:
dd:68:df:c8:16:61:7e:14:a3:6a:c3:fa:4f:59:d0:
f9:ae:8a:24:12:b3:7c:10:3b:7c:af:dd:1e:7a:64:
0e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AC:BC:90:5B:02:25:D7:A6:04:35:41:A1:56:6C:6D:67:33:F3:AC
X509v3 Authority Key Identifier:
keyid:4C:81:27:3D:CB:03:C3:45:7B:79:25:0B:E1:09:E1:9A:5E:74:F0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIEnPcsDw0V7eSUL4Qnhml508P0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/18c7dd-241b-4b92-8ebf-77794fbfd2e4/1/TIEnPcsDw0V7eSUL4Qnhml508P0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:61:b6:85:86:e8:08:a7:a9:7f:15:be:03:f3:38:e7:83:1f:
a2:d0:3d:56:04:3b:cc:36:98:24:4f:e1:8a:06:66:d0:44:4c:
e4:75:62:13:c3:a2:eb:f0:2b:e9:6c:5e:27:d8:69:bd:03:a8:
fd:05:73:00:38:1a:69:5f:35:f7:a4:0c:d2:9e:72:ef:6a:17:
4b:0b:f8:6f:05:8a:09:5b:f0:02:8f:77:56:c0:ad:ae:40:8c:
92:ad:fa:ac:70:29:af:9a:04:02:54:0c:f8:e0:72:49:a0:82:
18:6a:c0:89:1b:0b:b9:60:c8:97:2d:8f:ad:69:97:a2:8d:10:
26:59:99:49:d1:b6:21:9e:9f:33:72:82:f3:a6:6d:11:3e:cf:
37:90:d2:c9:bf:84:66:65:84:61:1d:4f:89:dc:a4:39:bd:9b:
cd:ad:cb:14:b1:f7:cc:4d:1a:69:7f:bb:f9:dc:c8:e1:2b:40:
e8:ae:c8:2f:71:68:14:9b:4b:71:8f:cf:6e:4e:91:29:0f:1a:
49:69:1b:e6:be:d8:bc:67:89:52:46:8a:89:6c:3a:5b:99:f2:
3d:37:56:11:9a:89:0e:91:4e:87:25:1c:11:38:ec:aa:fb:bf:
4d:66:b9:1b:1a:31:34:ff:a3:ed:db:d8:b3:7d:bd:0d:06:d3:
29:41:be:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:53 2025 by rpki-client