Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/tPszH6QvtFHkVRxvkcu5wZ7jek4.mft
File: tPszH6QvtFHkVRxvkcu5wZ7jek4.mft (raw, json)
Hash identifier: YdAJPiRlrADe4aQ9IF7VvHmhlF/b4TwprDl6nE3I3kc=
Subject key identifier: BB:50:90:4C:78:4D:FB:E0:90:09:84:B2:1C:09:49:4F:19:DA:48:62
Authority key identifier: B4:FB:33:1F:A4:2F:B4:51:E4:55:1C:6F:91:CB:B9:C1:9E:E3:7A:4E
Certificate issuer: /CN=b4fb331fa42fb451e4551c6f91cbb9c19ee37a4e
Certificate serial: 0194BCE08AD79EE89AE0780677D4E9A29BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPszH6QvtFHkVRxvkcu5wZ7jek4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/tPszH6QvtFHkVRxvkcu5wZ7jek4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: DvRXNlTCR35yGxJPggKI6LQ1TXY.roa (hash: uCs5edSvBBj2KY6s6HL8wAMD7pMX49G3e3NvxavAQGo=)
2: tPszH6QvtFHkVRxvkcu5wZ7jek4.crl (hash: 5DjT1Vqvv6f9vDzB1Ycwo67QyBiIRe5JvN94sse2IQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8a:d7:9e:e8:9a:e0:78:06:77:d4:e9:a2:9b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fb331fa42fb451e4551c6f91cbb9c19ee37a4e
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=bb50904c784dfbe0900984b21c09494f19da4862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fd:37:7f:f8:65:47:07:d9:6c:97:0d:4d:39:
5d:af:0e:14:05:a7:dd:4a:9c:af:3b:1b:c7:3c:11:
e7:ce:fa:22:68:52:da:28:b5:97:88:60:be:ac:1f:
f9:06:64:e9:d2:1b:ad:d8:0a:d2:6c:83:77:b2:8f:
31:80:b5:b2:88:07:e9:56:ac:4f:4d:39:39:8c:1e:
e8:6a:10:12:ab:a6:d8:f1:03:8d:2e:7b:55:23:e0:
d1:3a:e0:ed:50:ae:e2:bd:5d:1b:44:98:41:3b:74:
2d:de:7f:da:09:ff:1c:cb:e7:ee:fe:ca:e0:4c:73:
10:b9:fc:e3:17:ac:d6:83:c2:9d:76:6d:8c:71:dd:
2d:fc:31:a3:32:25:72:d1:ff:4d:bb:1d:28:c5:b3:
de:da:bf:37:24:e0:e6:a2:ba:83:6a:74:63:eb:bc:
1d:5b:7c:05:a7:e0:89:7a:bf:a3:dc:6c:31:51:b0:
e4:de:79:93:60:f1:75:d3:90:b7:ea:59:98:66:3a:
26:8b:3c:96:cb:33:c3:93:07:23:b6:65:fb:21:2f:
3f:1a:b2:b8:ba:92:68:c6:21:f4:e0:7e:6e:69:6b:
3b:29:e6:06:38:d8:44:d5:c9:4e:20:98:bd:36:b8:
3b:10:85:e3:68:55:02:58:c8:b2:26:85:47:01:90:
ad:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:50:90:4C:78:4D:FB:E0:90:09:84:B2:1C:09:49:4F:19:DA:48:62
X509v3 Authority Key Identifier:
keyid:B4:FB:33:1F:A4:2F:B4:51:E4:55:1C:6F:91:CB:B9:C1:9E:E3:7A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPszH6QvtFHkVRxvkcu5wZ7jek4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/tPszH6QvtFHkVRxvkcu5wZ7jek4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/d9a672-26c3-4ab4-b53b-099fd2101385/1/tPszH6QvtFHkVRxvkcu5wZ7jek4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:17:50:56:6d:68:e4:97:0d:d4:88:4c:72:f8:99:d5:73:74:
30:53:90:1d:3a:43:97:65:b7:6d:7c:3a:c0:2d:0f:48:20:89:
5e:d6:0d:3c:43:79:65:a8:a9:33:f4:ee:23:ba:74:1b:72:a7:
44:0a:2e:81:2c:a3:55:cf:27:85:29:8d:c7:01:2b:bc:5d:e2:
8c:27:f0:11:d1:24:cb:68:63:d0:31:05:06:f8:e0:c8:34:7b:
8e:63:78:f9:5b:a8:64:79:91:71:e7:5e:3c:80:25:73:20:9e:
3f:fb:2d:6e:9a:bc:15:fe:f9:86:94:29:e1:01:da:db:1f:03:
7e:d7:71:62:7a:28:89:6f:30:a5:2e:7c:59:80:d9:5d:da:06:
e0:be:df:9e:e1:64:5e:c3:b0:96:c8:b1:0f:52:d9:69:84:a9:
30:83:3a:f6:38:5b:da:e4:99:07:39:10:8e:d3:76:76:bf:b0:
0d:74:9b:9d:96:12:e3:fd:77:5d:ec:49:40:63:25:bb:cd:5d:
26:a2:c4:1c:2a:57:22:88:8e:41:d5:f8:d1:c5:d9:cf:96:b4:
0f:6a:44:fe:05:b4:93:7a:32:5e:32:56:6f:82:51:ef:bf:6e:
ae:73:f8:ef:26:73:fc:44:ae:9a:9f:3b:a2:68:0d:9d:db:96:
cc:54:85:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:00 2025 by rpki-client