Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
File: tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft (raw, json)
Hash identifier: UCE05J5r9WQeAfuGvibvoNJPARFEyx9SPS+ybspI72s=
Subject key identifier: AD:54:45:62:79:31:A4:11:55:62:51:18:47:12:76:A4:09:B8:7D:A8
Authority key identifier: B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
Certificate issuer: /CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Certificate serial: 0194BCA987535EF4488757D69E0ACD91C131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
Manifest number: 0E7D
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: KS8RslAPEYL2MOaeQ2coeWMc0Gs.roa (hash: Lm70YO9Qmcp4xR0fEfPDxvBSHKReqF8+K4qP2dqdms8=)
2: tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl (hash: ZeRBQVClvMhF6bfnZXYVdEPUjiZH4syU6XC0DazcOdE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:87:53:5e:f4:48:87:57:d6:9e:0a:cd:91:c1:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61b7974e97ab93791240734a19fb9ae7445cbd9
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=ad5445627931a41155625118471276a409b87da8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6b:25:10:be:68:9b:2d:13:72:47:50:2b:a8:
69:94:40:ca:4c:39:7c:8d:83:51:db:7e:ca:54:71:
af:42:d2:11:bf:5d:e5:5e:bf:74:8e:12:5d:68:b8:
03:87:50:ca:36:ca:a6:9d:d6:f1:7d:4c:7f:57:6e:
62:3e:53:db:6f:e8:6f:e0:9d:04:84:9c:cf:dd:19:
bf:1a:19:32:b6:43:91:e4:62:b2:ef:c3:5c:91:f7:
ac:8c:5f:7f:3c:34:eb:03:9b:86:d9:5c:b9:e4:a5:
1a:d2:5f:7b:f7:80:b7:94:a2:b3:4f:d2:e6:05:27:
17:7b:5b:cf:91:ad:c2:a3:7c:69:fb:00:7d:e7:04:
8a:1e:f6:41:aa:f7:b8:4e:5c:75:0c:da:fe:54:ef:
50:68:83:08:fc:e1:1f:e6:d7:a3:91:1e:ed:97:bf:
52:1b:72:63:85:90:16:11:15:40:91:5b:76:0f:1e:
0c:ac:03:2e:47:75:76:83:48:4b:c7:09:4f:ad:fb:
76:08:d6:d9:8c:35:63:c9:5b:fa:9b:0c:68:9a:b0:
37:3c:83:56:5b:32:b0:8d:c6:01:00:e5:7b:10:a0:
39:c9:1f:05:b9:f0:f9:c0:44:8c:bc:9d:d1:b7:7f:
99:cf:cc:fd:d4:ed:6c:59:e9:3c:5b:5b:56:a3:40:
ed:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:54:45:62:79:31:A4:11:55:62:51:18:47:12:76:A4:09:B8:7D:A8
X509v3 Authority Key Identifier:
keyid:B6:1B:79:74:E9:7A:B9:37:91:24:07:34:A1:9F:B9:AE:74:45:CB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tht5dOl6uTeRJAc0oZ-5rnRFy9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/61d213-2a0f-4348-893c-e726374330ce/1/tht5dOl6uTeRJAc0oZ-5rnRFy9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:38:37:c6:f2:c1:2d:b2:6c:15:2f:d8:47:f4:95:77:93:43:
a8:d0:51:f9:0a:90:fd:1d:84:05:41:a0:fc:dc:4f:da:5e:25:
0f:fa:6c:04:5d:3e:f5:32:04:6a:8f:00:f8:0f:3e:1b:a5:30:
6f:2d:37:e1:2e:35:82:78:18:30:7b:ee:64:48:bf:ce:6c:98:
8e:15:5e:e2:6e:59:15:bc:93:f4:0b:3e:aa:1e:dc:ce:aa:1c:
39:7d:93:9c:f0:00:97:73:b7:76:15:24:d2:d6:8b:0a:46:57:
27:37:39:5a:40:72:18:2e:2e:56:9b:37:4d:c1:51:1b:7c:f6:
0b:9e:bc:cd:41:6d:16:0f:75:00:88:0a:56:94:4e:c1:18:4f:
c0:c6:54:1d:82:cf:ee:0d:c5:ec:fe:40:ec:f5:a2:0b:cf:ad:
2c:bc:54:6c:62:a9:b1:ac:1c:3c:89:fe:39:17:b4:16:ad:0e:
57:48:91:49:48:7a:95:32:7c:40:8c:03:a0:91:0a:9f:b9:cf:
15:21:1b:85:7a:b2:fb:46:c7:fe:dc:a1:0d:02:aa:dc:26:fd:
45:ca:c2:3e:db:63:31:1c:46:cf:38:b7:c6:3f:3e:96:52:c1:
c3:4c:90:91:c3:16:33:03:58:6c:b4:00:0e:ca:0b:ac:98:c1:
0c:1f:de:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:20:44 2025 by rpki-client