Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
File: T2qURK2qUjxXaOn2vhQGUYOsIKg.mft (raw, json)
Hash identifier: jXmL4354l89EUUgoeKkfPDjW5emLcgALdBazoiNW44w=
Subject key identifier: 95:05:1E:F4:35:CC:10:C7:BF:12:68:00:BB:94:25:E6:49:8C:53:1F
Authority key identifier: 4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
Certificate issuer: /CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Certificate serial: 0194BD17558077F3524B8BF85D68C30C77F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:10 +0000
Manifest this update: Fri 31 Jan 2025 16:00:10 +0000
Manifest next update: Sat 01 Feb 2025 16:00:10 +0000
Files and hashes: 1: T2qURK2qUjxXaOn2vhQGUYOsIKg.crl (hash: 1L9jNe/b1bMiVYZM4VBaZhToZ6hqunX3xQBeOj0A0zQ=)
2: kfsN1HfyfK-NQ9iZIGxx8I0iebc.roa (hash: 471clsXqk9Nk68jCHR5a7ma3NzbA1DO/nClDnuoSJLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:55:80:77:f3:52:4b:8b:f8:5d:68:c3:0c:77:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6a9444adaa523c5768e9f6be14065183ac20a8
Validity
Not Before: Jan 31 16:00:10 2025 GMT
Not After : Feb 1 16:00:10 2025 GMT
Subject: CN=95051ef435cc10c7bf126800bb9425e6498c531f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4d:38:cf:5b:49:16:fa:c8:2b:a2:94:61:c6:
63:8d:69:ce:b7:87:d3:e6:cb:a2:7a:69:3c:82:60:
7f:2b:5e:49:78:aa:30:b5:f2:59:78:e8:bd:58:72:
f5:2e:08:e5:30:24:50:4f:81:81:3e:50:a0:38:d9:
9b:cd:41:b5:12:22:a2:80:2e:8d:f6:72:19:24:28:
bb:89:af:45:81:48:e2:63:36:f4:27:86:3e:78:65:
1e:33:59:4c:eb:52:bd:c2:2e:30:7a:78:2c:ed:26:
3c:5a:90:82:a2:bd:87:25:00:ec:08:53:fa:9d:5f:
65:e5:3e:45:bb:fe:b4:1b:42:a9:25:1c:25:14:c1:
91:cc:66:55:6c:70:e0:31:d7:1d:df:6d:96:8f:99:
ec:72:f3:18:4a:ce:9d:59:06:f8:a2:89:ed:88:81:
1c:88:6e:1b:fc:64:b9:53:c2:52:15:f3:f5:f4:08:
02:fa:fc:0c:4e:fb:d8:e5:d2:c7:2e:d0:5a:2b:fa:
99:d2:1c:c0:e9:f3:d3:14:5b:22:55:09:aa:a8:f0:
f0:17:01:fb:22:28:2b:81:5c:e3:79:37:ec:bc:16:
15:b6:21:ef:09:d1:f8:22:67:87:6a:05:eb:4c:29:
f8:ca:fc:8a:c8:8f:12:bc:d7:e5:4b:76:1b:57:85:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:05:1E:F4:35:CC:10:C7:BF:12:68:00:BB:94:25:E6:49:8C:53:1F
X509v3 Authority Key Identifier:
keyid:4F:6A:94:44:AD:AA:52:3C:57:68:E9:F6:BE:14:06:51:83:AC:20:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2qURK2qUjxXaOn2vhQGUYOsIKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/9c4fb0-c475-4204-9987-0a91cadbee66/1/T2qURK2qUjxXaOn2vhQGUYOsIKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:b1:65:e2:81:9c:6c:e1:bb:83:7d:e3:1c:05:d8:14:69:f4:
93:f2:a9:cf:47:10:d1:b5:d9:1a:05:50:0a:10:c1:9e:eb:08:
26:e2:25:02:48:f9:f8:46:ed:9a:83:7d:7f:29:e7:d6:a2:c4:
83:2f:8f:cb:b4:1c:2e:86:b3:82:f3:44:3a:b8:bb:e6:7c:b9:
fc:98:5c:2a:13:dd:9e:f3:89:d6:2e:cd:b4:19:b9:44:c7:b6:
1f:b4:8c:db:2e:73:2c:60:44:a2:42:39:8c:b3:f1:51:80:82:
3c:90:b0:3a:f1:b8:0d:c1:e1:67:01:92:b2:0b:b3:5e:d2:47:
38:10:7b:48:d6:45:19:2c:b8:28:3a:65:04:04:ab:b5:b8:ed:
df:0f:bd:cf:6d:2b:1b:73:b6:82:ed:02:c1:d3:9b:ee:e5:3f:
e2:50:48:4c:48:5a:c9:c9:64:80:68:b1:df:3f:f3:e8:69:49:
cb:2c:a6:b0:3e:64:c8:e2:d8:b3:3a:5b:f9:01:a1:0c:e2:b1:
e1:10:0d:c6:9f:b6:33:77:da:6a:04:97:a1:03:c1:17:28:77:
1e:a2:f1:47:4c:52:39:e5:3e:0a:56:f7:2b:82:88:bf:ee:d7:
69:06:48:d1:59:83:a6:80:f1:a5:a8:f8:da:4c:c0:be:78:1c:
d0:45:43:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:40 2025 by rpki-client