Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
File: tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft (raw, json)
Hash identifier: CkTjWaGGbSFeph24YB7Rx7bx/tzMykKBfw/Tr5jPqbI=
Subject key identifier: 50:04:7D:38:7E:A9:36:88:C4:02:FF:C5:B8:E7:26:BB:43:34:E1:FE
Authority key identifier: B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
Certificate issuer: /CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Certificate serial: 0194BD854C22BC3801ABDBBF8D0BD68807DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
Manifest number: 0501
Signing time: Fri 31 Jan 2025 18:00:17 +0000
Manifest this update: Fri 31 Jan 2025 18:00:17 +0000
Manifest next update: Sat 01 Feb 2025 18:00:17 +0000
Files and hashes: 1: rgegcxxJ3TsTdq27HR0NAjR9oC8.roa (hash: c0wEsNYvh664VokeqgrZS5bI3twxSLXX7CSRIaVE4Zs=)
2: tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl (hash: WhnACenHo+YQwXNT23ivOj8ICaS/0qANAQms30aIHxg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4c:22:bc:38:01:ab:db:bf:8d:0b:d6:88:07:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e3a2a4908dd96821c80c64d15d1714143aaa94
Validity
Not Before: Jan 31 18:00:17 2025 GMT
Not After : Feb 1 18:00:17 2025 GMT
Subject: CN=50047d387ea93688c402ffc5b8e726bb4334e1fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:6f:27:76:aa:b6:bd:88:71:d7:07:77:e6:
f2:e1:bd:a9:57:72:f1:7c:66:e0:ec:70:6f:e5:52:
86:e4:0d:cd:2d:ff:33:4d:1f:32:c5:19:af:9d:92:
3c:5f:3f:4c:b1:1f:a8:9a:e8:96:0f:49:57:16:66:
69:5a:f7:f7:fd:37:97:38:35:47:17:49:76:16:a9:
0e:45:4c:93:c9:65:80:4f:c9:4b:3a:fe:a5:f3:5a:
59:db:7c:fd:e0:94:5e:d6:c9:a3:76:9b:d1:96:10:
fa:a5:e1:4a:01:22:3d:b1:dc:16:ed:72:fb:25:23:
01:59:42:e6:1c:8a:74:4f:3a:d6:70:dc:26:c6:1f:
82:40:a2:29:e5:a7:cb:05:69:51:bc:97:89:8a:93:
87:f3:20:90:92:e1:69:9a:d0:6e:86:78:df:7d:31:
53:1d:84:f1:1d:65:f3:30:d3:e2:5c:25:40:56:2d:
3b:d0:4f:19:10:d3:7b:eb:f3:7d:f8:0a:88:69:de:
48:6f:eb:1a:c4:05:b8:9e:11:34:33:a7:08:47:b1:
58:f7:8c:60:34:51:c8:e5:b7:d8:6b:a1:f0:99:e4:
bc:2f:9a:5b:cd:4a:19:57:5c:94:88:65:a1:6b:4c:
b7:3a:5f:27:d0:60:f4:bb:22:62:7f:7d:73:88:16:
d7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:04:7D:38:7E:A9:36:88:C4:02:FF:C5:B8:E7:26:BB:43:34:E1:FE
X509v3 Authority Key Identifier:
keyid:B6:E3:A2:A4:90:8D:D9:68:21:C8:0C:64:D1:5D:17:14:14:3A:AA:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuOipJCN2WghyAxk0V0XFBQ6qpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b36f31-1ccd-4da3-9cf9-0edbdff9f8f2/1/tuOipJCN2WghyAxk0V0XFBQ6qpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:95:52:f6:fc:d7:cc:cd:80:be:18:32:3a:b0:51:2e:b0:4c:
82:b3:4e:c9:c0:11:6b:48:16:79:ac:1c:ab:48:36:d8:25:be:
db:8b:85:ed:e7:9f:1b:af:dd:21:fa:f1:41:bc:99:ff:9d:aa:
dd:12:c7:b2:31:b3:92:ac:9d:d2:db:17:05:ad:6b:ca:2a:93:
69:8a:9e:87:5e:2f:c6:b9:a8:10:86:4c:13:6c:f8:16:22:c1:
2e:d3:30:5a:6d:81:e1:b0:0d:96:f5:20:29:7c:12:b5:0b:e8:
ff:27:2e:b5:33:4f:1a:ea:49:6b:37:2d:94:de:87:82:11:b1:
21:7b:24:60:4a:3c:06:f4:ee:7b:a9:99:93:45:55:47:32:34:
0e:3f:52:8e:c1:90:78:91:ae:97:14:7e:75:1a:5d:f1:8d:b9:
75:ac:b9:be:5a:f7:94:4f:fe:3b:e5:b5:e7:6d:07:b7:e6:15:
14:20:96:3b:5f:4c:66:83:f1:55:39:bd:5e:ac:22:51:b4:16:
77:91:ea:09:cf:3e:f3:3f:63:ce:51:fe:e0:3e:6c:5e:da:50:
a3:3f:77:d4:95:e0:77:a4:4b:a9:06:b2:8b:a7:1a:d5:f1:e0:
48:c6:bd:1c:8e:48:57:0b:8b:90:23:83:95:ed:a3:cd:3a:43:
f8:b2:61:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:49:36 2025 by rpki-client