Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
File: tMBDnHlVURAtbx5M620cUvvF6j8.mft (raw, json)
Hash identifier: V5eocEUKwZrfaa2A7hSFy9LmfIa40OrolkhHZ7MJlR8=
Subject key identifier: 0D:E1:EC:FA:4D:D8:B8:19:5E:07:91:50:FB:4F:FF:ED:3C:C2:CA:D8
Authority key identifier: B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
Certificate issuer: /CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Certificate serial: 0194BC3C5BDB900EC303276A8D98E3081878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:59 +0000
Manifest this update: Fri 31 Jan 2025 12:00:59 +0000
Manifest next update: Sat 01 Feb 2025 12:00:59 +0000
Files and hashes: 1: n5jiYoIoGZQqwQOVrCfprt-PApk.roa (hash: MrCF/3iJ71+/LWf1gBDblDTWmF567DIjZvwBvhh1aT0=)
2: tMBDnHlVURAtbx5M620cUvvF6j8.crl (hash: LqiZLVLhIox0tKsFC7SCR5oBdrQdlJtiuO56L0L6wzU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:5b:db:90:0e:c3:03:27:6a:8d:98:e3:08:18:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c0439c795551102d6f1e4ceb6d1c52fbc5ea3f
Validity
Not Before: Jan 31 12:00:59 2025 GMT
Not After : Feb 1 12:00:59 2025 GMT
Subject: CN=0de1ecfa4dd8b8195e079150fb4fffed3cc2cad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:50:4a:fc:8e:2f:bf:76:83:0b:57:01:09:54:
c8:51:e3:aa:e2:79:c4:24:a0:32:ad:19:9e:d6:45:
96:d2:d0:78:dc:0a:fa:9d:52:0b:1c:23:1c:b7:51:
d4:c1:4d:14:0c:5c:fa:b8:13:02:fc:b9:d7:d7:b6:
89:b6:f7:66:72:bc:91:c6:d4:d0:92:38:e8:eb:53:
49:9c:fc:6f:a4:74:cb:36:0c:34:27:68:1a:fa:f2:
71:1a:10:4e:49:8e:aa:7b:12:30:42:58:0f:14:05:
f1:c4:18:ef:b2:78:90:0c:5d:58:d9:8a:36:2d:b9:
84:2d:7c:97:0f:60:7b:39:07:e5:c4:ba:f1:15:08:
31:f5:87:ec:05:8b:cf:8b:d6:cc:76:e3:24:92:e9:
f5:6a:d4:c7:f9:f0:8f:89:1d:cb:db:ab:6b:f1:07:
32:62:78:8d:69:e1:86:3b:ba:37:cf:e6:c6:5c:f8:
4c:f9:65:73:4d:73:48:8f:02:30:85:64:77:48:99:
ef:4a:5d:32:d0:09:d6:a1:54:dd:39:3f:60:09:e0:
66:52:41:61:34:c9:f9:6a:b8:07:0b:fb:ba:12:a5:
9c:f4:97:14:c5:46:44:e9:26:ba:2b:de:58:b6:5a:
33:8f:e8:35:34:e7:b6:8b:21:d9:cf:b1:69:7f:9f:
e4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E1:EC:FA:4D:D8:B8:19:5E:07:91:50:FB:4F:FF:ED:3C:C2:CA:D8
X509v3 Authority Key Identifier:
keyid:B4:C0:43:9C:79:55:51:10:2D:6F:1E:4C:EB:6D:1C:52:FB:C5:EA:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMBDnHlVURAtbx5M620cUvvF6j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/86ba02-f970-4869-be27-e8ede5a2f875/1/tMBDnHlVURAtbx5M620cUvvF6j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:47:54:6a:d0:3b:01:d0:bf:cf:c8:cc:8e:4d:cc:73:57:a9:
19:6c:e2:ed:76:99:c8:82:b1:ee:bf:3a:82:99:ba:9c:f2:a8:
0d:30:4a:29:2c:81:b3:61:9e:7b:b0:59:c8:bf:34:a6:bf:d0:
53:78:b3:a5:3e:f1:06:60:52:cb:9b:57:bc:b1:69:f8:87:a2:
30:82:6a:b2:41:76:2e:0f:63:98:cf:d3:29:af:86:72:a6:6f:
1d:46:d4:5c:04:60:b1:8f:96:55:99:22:d9:f7:54:ca:ab:31:
e5:58:2e:93:9f:91:87:09:f9:d0:9b:3d:da:b0:79:57:64:a5:
b3:b1:bd:c0:e2:1f:c7:f7:f2:37:d1:08:78:4d:b5:a9:2c:a0:
e5:aa:35:05:55:62:d9:6e:0c:f2:41:ff:ea:32:d6:9a:bf:1e:
6c:f5:4c:be:38:1a:0c:d2:51:0c:2b:12:a5:c1:5f:2d:5a:15:
9e:15:45:81:cc:c4:df:2f:a0:0c:1f:7b:12:6c:ac:86:b9:df:
73:6c:c5:be:d4:41:ed:23:82:58:99:ee:d4:fe:60:2e:f9:2d:
ee:44:c6:1f:04:96:08:9a:c0:3b:3d:6f:19:d8:9e:d3:ae:dc:
22:4f:35:e7:b6:46:cf:5f:57:19:6c:ca:00:3f:46:3d:73:78:
15:41:9b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:56 2025 by rpki-client