Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
File: tSCiBPTgnMg6YljXqkT30vD6RKA.mft (raw, json)
Hash identifier: FeKxf2jIjMEGzi0utfDVcJeJzY0OncBDOU9cAtQFLhw=
Subject key identifier: 4D:22:72:3E:79:C7:02:27:F8:22:D1:2F:53:32:55:CF:DE:FA:15:7D
Authority key identifier: B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
Certificate issuer: /CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Certificate serial: 0194BD17608CCA7765B0373AADD27A9AB0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
Manifest number: 0E9B
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: 7oTB9A6lOtEjQEsvoA-hCkKE_kU.roa (hash: CgqHCnrNWT0vsnk0wl9rl++PdFLv2TYzmWCCrA7fBCY=)
2: MfO1xzaCGvzf-Tdk8sWipKC3t-8.roa (hash: TSPXY1leU0O4gZ6iWESlm1g1sCeRvbsOHxtBl16fH1g=)
3: tSCiBPTgnMg6YljXqkT30vD6RKA.crl (hash: J+V/dqsLsaOjMKfaQOPCgNnd+po3It9/cY8MTPH07Uo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:60:8c:ca:77:65:b0:37:3a:ad:d2:7a:9a:b0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b520a204f4e09cc83a6258d7aa44f7d2f0fa44a0
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=4d22723e79c70227f822d12f533255cfdefa157d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:14:a3:1d:d3:4a:a4:fe:4e:35:41:56:f0:ac:
25:a7:19:8b:34:f3:4d:f0:ce:1c:fe:c7:6a:23:9b:
be:9a:55:c7:d1:42:45:06:8a:fe:df:e4:47:4a:27:
e9:cb:10:2c:8c:5a:68:a9:1b:a2:5e:52:f6:93:f5:
d2:45:6b:f9:68:d3:2e:14:53:a6:7f:43:3f:0a:01:
fc:70:c0:8f:9a:7b:50:c8:0a:77:36:e8:f3:89:e7:
67:9d:bc:14:8b:e1:d7:d3:f3:94:0f:83:40:77:fc:
d6:67:a1:a0:2f:69:3c:a0:b9:6d:88:0e:f9:fd:58:
90:27:59:c4:6e:16:0d:64:97:e2:b8:6a:2b:36:d0:
7a:16:28:6b:9f:9e:0b:31:41:c7:63:5f:39:73:e1:
d1:ff:33:79:20:6f:6a:f1:1f:22:e6:c8:2f:e2:19:
a7:f9:49:21:8b:07:d0:45:4b:2b:33:b6:98:1e:f4:
91:d4:95:d1:54:95:a0:6a:77:c0:e7:aa:4f:fd:57:
a8:ac:d5:6a:df:c1:7b:85:07:b2:a1:f3:f7:02:fe:
51:c2:ef:68:14:17:8d:03:0c:4b:39:95:1f:d8:34:
bd:96:ee:db:41:a2:53:4b:85:3b:e7:96:6a:13:bb:
d5:09:52:3f:0d:81:74:6d:d2:3d:9e:24:2d:ab:27:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:22:72:3E:79:C7:02:27:F8:22:D1:2F:53:32:55:CF:DE:FA:15:7D
X509v3 Authority Key Identifier:
keyid:B5:20:A2:04:F4:E0:9C:C8:3A:62:58:D7:AA:44:F7:D2:F0:FA:44:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSCiBPTgnMg6YljXqkT30vD6RKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/a5a6b3-3ec3-487e-aba0-b8b1e4b4ecb9/1/tSCiBPTgnMg6YljXqkT30vD6RKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:52:38:4d:1c:f3:be:5a:26:99:28:dc:02:81:e2:6e:4a:4e:
e6:b2:41:9d:16:62:91:df:eb:b6:fc:4a:ba:77:a3:a6:45:96:
2d:79:28:3f:eb:a0:a8:3a:81:4d:4e:53:0a:39:ac:cc:51:5d:
f7:89:13:2a:de:c7:31:6d:86:a8:6d:52:b0:5a:84:b7:9b:39:
fd:7d:aa:97:b5:c0:91:05:4a:3e:ac:33:da:51:b4:a0:41:09:
62:21:f5:73:b5:08:29:b2:c4:25:92:ca:2b:51:ce:43:63:57:
d1:7b:a3:ff:3d:9b:0e:6b:4f:74:ef:6d:b6:2b:8b:f9:bb:5d:
9c:65:ef:6a:bb:1d:70:89:75:d4:85:a2:99:b7:22:cf:1e:cd:
d2:39:e0:0e:5f:9f:83:fa:d8:75:75:65:a5:cf:95:3a:d4:53:
2d:39:d4:f2:d7:9e:79:e9:91:d4:ca:2f:76:d0:1d:ec:21:00:
61:c1:fe:c4:d6:22:c7:97:31:b9:f6:b9:a2:6f:f0:22:a9:4b:
e7:e9:df:da:ba:bd:4f:3d:f8:2d:74:c6:69:06:64:bc:84:ad:
11:dc:9c:01:d0:8d:ed:67:21:8c:ee:09:4d:46:c8:b1:56:88:
ef:5c:07:2f:ff:96:5c:63:32:70:1e:44:d8:db:44:67:be:b5:
34:29:fa:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:53 2025 by rpki-client