Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
File: tF5iJw0g-UZ6avx4lj28-4D79So.mft (raw, json)
Hash identifier: HSSsEmHW91lp5vuGm2OKYv5vrEuOfwbSgb0IhAaRv+k=
Subject key identifier: 87:66:BF:75:17:04:C9:9F:A6:3A:BF:8E:2C:9F:EB:BC:D3:F1:56:AF
Authority key identifier: B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
Certificate issuer: /CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Certificate serial: 0194BBCEC406EFDED1192F5A4C61161FFAC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
Manifest number: 0BA9
Signing time: Fri 31 Jan 2025 10:01:17 +0000
Manifest this update: Fri 31 Jan 2025 10:01:17 +0000
Manifest next update: Sat 01 Feb 2025 10:01:17 +0000
Files and hashes: 1: tF5iJw0g-UZ6avx4lj28-4D79So.crl (hash: bdrNFJXyucKe9b8Md0bv4KiQjdPXipVTccYinWwBY5g=)
2: uvCFX9itk7RPxPZl6lvvghFjg1E.roa (hash: P3N8o135VPbcqFaS3kCnXkMSVi3GCBY96T9QuQyMyig=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c4:06:ef:de:d1:19:2f:5a:4c:61:16:1f:fa:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b45e62270d20f9467a6afc78963dbcfb80fbf52a
Validity
Not Before: Jan 31 10:01:17 2025 GMT
Not After : Feb 1 10:01:17 2025 GMT
Subject: CN=8766bf751704c99fa63abf8e2c9febbcd3f156af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:dc:50:56:29:42:8b:e5:af:7e:c2:3e:25:23:
5d:7d:bb:ac:82:2d:b9:eb:45:ab:fd:70:58:2d:a7:
a1:50:7c:21:53:52:6f:a6:f9:37:2d:9d:b8:b1:7b:
d1:2b:36:4b:a4:f5:11:0a:70:e4:ed:30:36:77:f2:
d4:3f:46:07:3e:60:3f:b2:41:9e:a6:09:ce:68:c1:
31:cb:74:49:94:d3:1c:98:4e:5e:9d:33:0a:57:aa:
c0:a7:8a:42:92:4b:bc:f8:f6:6c:9d:a8:aa:c0:7b:
f7:14:ec:0b:64:14:96:69:4d:df:47:d7:2e:52:7b:
1b:90:ac:f5:a8:5b:38:e8:33:9b:52:2f:86:33:e8:
cf:72:98:61:ae:61:fc:0e:36:61:3b:96:38:ea:1e:
ee:d4:7f:62:3a:c2:00:45:e7:1d:89:a6:a0:d1:41:
e0:ff:5d:82:7e:ab:15:7c:e0:aa:32:38:d9:db:86:
0c:53:3a:39:9e:43:2c:f6:4a:ce:13:84:00:89:be:
d2:3e:2c:77:41:f1:e1:e5:91:91:4e:a3:06:c4:89:
b4:2b:f8:bb:4e:1b:c3:ee:d2:42:f5:fb:ac:d3:8a:
3a:03:7c:cc:81:5c:8a:17:c1:f8:b2:ce:0d:e5:14:
ea:13:91:d0:2a:60:7d:b4:c5:55:55:6b:34:6e:d1:
56:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:66:BF:75:17:04:C9:9F:A6:3A:BF:8E:2C:9F:EB:BC:D3:F1:56:AF
X509v3 Authority Key Identifier:
keyid:B4:5E:62:27:0D:20:F9:46:7A:6A:FC:78:96:3D:BC:FB:80:FB:F5:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tF5iJw0g-UZ6avx4lj28-4D79So.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/ecb45e-2db6-4b54-bc91-0596296f12de/1/tF5iJw0g-UZ6avx4lj28-4D79So.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a4:f3:b6:b9:90:40:81:fb:bb:f1:81:2a:1c:ae:a3:8a:4e:
ce:bf:69:73:64:34:75:ac:04:62:52:6d:07:bd:de:e0:2a:ec:
b3:3a:ec:f5:e4:2a:99:85:54:45:0c:b1:42:25:11:aa:44:d3:
fa:d7:f2:53:f9:e2:83:e8:98:ec:61:89:94:64:ac:d7:e4:c2:
8d:6a:4e:c3:f4:e2:b5:2f:d4:7a:85:b0:90:f5:40:83:37:7d:
df:eb:e2:ca:79:7d:56:1c:df:37:9f:88:74:c5:72:ef:9c:fb:
5b:db:08:9d:41:58:94:99:3d:29:09:e0:bc:d3:e9:c3:92:ed:
ff:ac:b8:a0:b2:b6:91:4d:6c:d1:7f:c3:0a:53:ec:dd:2b:3a:
3e:ef:ba:91:7d:25:0a:59:46:ce:97:eb:73:c3:b0:77:00:a9:
c5:3a:56:a9:ee:bf:a0:3e:28:d8:04:2a:fa:e2:9b:98:c2:59:
90:93:40:09:a1:ff:05:0c:f5:7d:c8:a1:e6:59:c6:b5:84:a2:
95:2a:8a:df:2e:0e:4d:96:51:f6:0c:c3:1c:1e:96:b9:93:12:
63:0b:32:b1:43:2b:42:61:1b:97:e2:1f:03:92:5c:36:8d:13:
14:57:7c:39:e3:e0:9e:b2:71:d7:d1:81:85:c2:3e:2e:c4:0c:
d8:49:af:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:27 2025 by rpki-client