Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
File: tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft (raw, json)
Hash identifier: +su/9KNwVuV5qdOLZLYy2l/a/FuKsT4JtNs/66ftXM0=
Subject key identifier: 1C:5C:C0:EB:41:00:24:7F:5A:3F:11:1E:4D:2C:73:FC:C4:8D:FD:1E
Authority key identifier: B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
Certificate issuer: /CN=b414b09beeab905ff41e6813256054b182294297
Certificate serial: 0194BD854F91A37AE047F1F1C7E7DF07EAE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
Manifest number: 098C
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: 9ie56jozGctsQMPeP2PnRQlQSUc.roa (hash: 5kDUdIA6jw7l4e4ssTIC7py/rMtiw/D++uBoc2CI0Qo=)
2: mT-8_dVnmXbsJKgoN35LXNaAywM.roa (hash: o5cN5KMUIwn/VQVHMV9OAvcCU4Z7KPV9dR9Yvh1kUlg=)
3: tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl (hash: 0GAFBm0N7UUPAM2xe1YwhAco+jatEeJVE2w88DaepQQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4f:91:a3:7a:e0:47:f1:f1:c7:e7:df:07:ea:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b414b09beeab905ff41e6813256054b182294297
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=1c5cc0eb4100247f5a3f111e4d2c73fcc48dfd1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:c2:7d:c7:cf:99:2a:af:e3:f2:04:32:13:29:
c1:a8:2b:cd:09:9a:fe:75:51:cd:52:b5:c9:a0:23:
44:12:e4:d4:a2:f1:47:91:bb:8a:0a:7a:68:60:4c:
f6:31:52:ab:ea:e9:7e:d0:ff:a1:2b:5b:8b:fb:43:
86:15:65:c9:2b:79:dd:3d:33:84:2d:fb:e2:f0:d5:
99:6b:18:0c:00:6a:74:f4:ef:00:ac:57:5b:66:d8:
ae:1b:77:5e:fb:d5:99:36:ea:bc:49:df:22:40:60:
41:c4:e0:af:a3:bc:02:8b:f6:9c:22:34:7c:a5:d6:
da:96:3e:fa:1f:b8:7f:bc:73:5e:63:be:ee:60:64:
19:24:be:fa:85:39:fd:18:47:f6:96:71:2f:f8:22:
cc:55:3e:f3:33:76:e2:06:44:78:58:ca:07:e4:97:
ee:ff:0a:7a:a6:fb:e2:82:8c:02:3a:49:29:65:64:
4c:5e:ff:ce:85:f3:79:89:aa:29:dc:3e:01:be:61:
9e:c5:3b:f1:44:7f:5c:26:c8:17:4b:dd:cf:12:99:
87:a6:1a:a4:5f:f1:88:f1:fd:c1:2e:a8:ab:da:1a:
d4:e6:c5:87:b6:84:70:6d:06:c0:dc:4d:11:ce:66:
3e:39:52:7e:a9:3b:e6:94:3e:fe:57:cb:f3:58:25:
de:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:5C:C0:EB:41:00:24:7F:5A:3F:11:1E:4D:2C:73:FC:C4:8D:FD:1E
X509v3 Authority Key Identifier:
keyid:B4:14:B0:9B:EE:AB:90:5F:F4:1E:68:13:25:60:54:B1:82:29:42:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBSwm-6rkF_0HmgTJWBUsYIpQpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/800eb6-868b-4a30-b402-4bce424723d9/1/tBSwm-6rkF_0HmgTJWBUsYIpQpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:2f:2c:d9:ef:ac:09:35:ab:20:42:ea:d9:69:84:cf:9e:ca:
25:87:a6:ef:73:32:19:f7:6a:fb:18:4b:ce:6a:c8:93:9d:6a:
f8:52:ae:e3:60:15:6e:24:df:a8:62:58:06:bf:4d:ed:5d:85:
24:90:bc:06:f5:8f:07:54:0a:b4:d6:b4:93:71:2a:ae:e1:eb:
7b:8d:f1:39:0a:ac:7b:1e:cd:92:97:cc:52:4b:dd:10:9d:4f:
d5:6f:ae:36:b4:1e:a9:48:65:b9:87:b1:ad:c8:8f:87:46:a6:
fc:9f:a0:43:d5:6d:e2:ca:93:a0:18:01:13:60:2d:ed:80:7b:
65:2d:a3:c3:21:48:20:12:dd:19:9a:d4:03:92:d6:70:ce:f5:
b9:27:39:96:2c:e8:49:d0:26:f2:ad:cb:97:d7:68:12:34:6d:
38:7b:b4:79:15:2a:9d:82:e0:17:8a:7b:b1:fe:fc:3f:ac:4c:
20:90:6c:61:64:96:3e:63:26:ff:53:17:b8:33:a3:bd:01:da:
e1:bd:b5:f8:5f:de:27:ef:44:89:f6:06:0c:eb:a3:ef:88:30:
5c:d9:e1:e7:c3:06:eb:f1:2c:2d:1e:2e:c1:ad:23:4f:42:cb:
ba:5d:1c:6d:90:1c:07:d7:b5:9d:bf:7e:2b:cd:68:fa:de:ac:
67:91:f7:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:32 2025 by rpki-client