Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
File: t4skH3ysfR5SHigxR-xhdjxCKqc.mft (raw, json)
Hash identifier: y8g2LSncG7eVIOh5YHJtY9N53ciMYX0S7J7QQIng8bE=
Subject key identifier: 09:C0:B8:5C:25:66:60:6E:AA:4F:F6:3D:0D:92:FC:F1:4C:FC:11:73
Authority key identifier: B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
Certificate issuer: /CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Certificate serial: 0194BD853035349BC655ECBCC54480441030
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
Manifest number: 04C6
Signing time: Fri 31 Jan 2025 18:00:09 +0000
Manifest this update: Fri 31 Jan 2025 18:00:09 +0000
Manifest next update: Sat 01 Feb 2025 18:00:09 +0000
Files and hashes: 1: JeMCMYiH53cU_3LMDeSKcS3Thhs.roa (hash: q+KDU3te7tpkPWYDo6SVWUaxsvwlZ34vk9tdHz3W+pc=)
2: t4skH3ysfR5SHigxR-xhdjxCKqc.crl (hash: QqGtlET22nef5ytP/16mnymzsDO5riLWbEyrh9UUfsk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:30:35:34:9b:c6:55:ec:bc:c5:44:80:44:10:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78b241f7cac7d1e521e283147ec61763c422aa7
Validity
Not Before: Jan 31 18:00:09 2025 GMT
Not After : Feb 1 18:00:09 2025 GMT
Subject: CN=09c0b85c2566606eaa4ff63d0d92fcf14cfc1173
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5f:a1:d3:12:01:9e:53:e2:73:19:30:c2:b1:
f2:a7:00:bb:f2:7f:1b:43:b5:67:71:eb:f8:78:65:
63:da:1b:76:3c:81:f0:0b:a0:ba:4e:79:2c:3b:a0:
ab:b2:b8:04:dc:90:98:41:21:e5:fa:f0:52:b7:01:
43:68:85:65:8e:7b:5c:3c:d2:13:3c:2d:fb:d0:0d:
87:67:cb:3d:a5:ef:4d:d6:bc:a4:76:c5:ee:1d:6e:
f9:18:09:82:fb:60:26:af:02:fd:85:9f:c9:6a:8e:
27:3b:a3:3b:97:77:92:2a:29:ad:b7:a8:94:f6:e4:
15:04:3a:b7:90:39:98:5b:fb:b3:8d:4a:7d:ec:64:
a6:22:37:a7:26:90:73:7f:d4:c8:60:2c:49:3c:e9:
15:75:52:ab:45:be:46:ee:ac:9a:48:bc:76:8f:c9:
f7:b3:3f:07:f8:da:bb:fd:0e:97:89:3e:63:ef:3b:
c2:2d:9b:94:de:15:8c:98:a7:ef:cf:33:53:c7:e9:
75:6e:01:19:ea:46:3b:50:7e:b2:fd:fd:d3:40:e3:
cc:e1:c0:3b:af:14:c5:48:6b:2d:18:1e:cd:cc:42:
aa:ce:fc:1c:33:78:d3:a2:0a:15:c8:5a:45:05:8c:
5d:75:5b:8e:35:25:f1:96:08:e8:51:6d:2e:ab:f0:
55:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:C0:B8:5C:25:66:60:6E:AA:4F:F6:3D:0D:92:FC:F1:4C:FC:11:73
X509v3 Authority Key Identifier:
keyid:B7:8B:24:1F:7C:AC:7D:1E:52:1E:28:31:47:EC:61:76:3C:42:2A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4skH3ysfR5SHigxR-xhdjxCKqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/d0305f-2b0d-4480-8d92-c0d973ca25d8/1/t4skH3ysfR5SHigxR-xhdjxCKqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:dd:e8:61:8f:ba:2f:d9:13:c5:86:81:c1:f3:48:e0:7a:70:
67:5b:74:eb:0d:b8:8c:b8:47:75:c2:30:a5:24:de:6a:bd:35:
73:43:b3:d3:b3:b6:6a:60:75:21:cb:07:71:92:80:96:d5:4b:
0d:a7:88:e3:5b:b8:cc:97:b1:24:1b:a7:84:67:67:8c:81:26:
6f:06:79:f3:1a:6c:c7:3c:57:9a:15:39:34:50:ab:4f:51:94:
74:7c:72:db:26:93:9e:f0:83:99:c7:32:00:6c:11:6b:d8:6d:
98:a2:18:cf:2c:79:81:69:8d:7d:f2:26:a9:8b:44:ed:38:eb:
25:6e:79:7e:ce:56:d1:4d:9b:9a:85:00:a6:68:6f:d2:b7:86:
b1:3b:84:11:a1:62:9d:b5:3c:fd:2c:41:39:3b:43:2e:28:e0:
b6:5b:8a:d2:2f:58:4c:5a:f4:d2:a9:87:33:31:cb:ab:9e:6a:
18:6f:ff:80:4d:bf:82:1d:4c:d7:43:99:cb:95:4a:f1:af:3e:
80:2c:0c:a6:20:3d:13:84:5b:b6:28:c8:d4:df:8b:07:ad:17:
3c:32:62:c3:c0:6a:12:15:1c:5c:fd:06:81:fb:08:66:bd:3a:
72:23:ea:cb:d5:ac:81:15:79:bb:51:a3:05:ec:4f:d4:45:2f:
2f:6a:d3:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:12:41 2025 by rpki-client