Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
File: tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft (raw, json)
Hash identifier: kCUbMtVL6fgyRfmZ2c2p7Za1cOmVVw4JK03/oicsUTM=
Subject key identifier: 97:21:CF:80:4D:A5:3A:5A:3F:2C:5E:0E:9C:34:3D:84:38:DB:89:33
Authority key identifier: B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
Certificate issuer: /CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Certificate serial: 0194BC72A9B885300EE920018ECADAE2533F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
Manifest number: 0373
Signing time: Fri 31 Jan 2025 13:00:18 +0000
Manifest this update: Fri 31 Jan 2025 13:00:18 +0000
Manifest next update: Sat 01 Feb 2025 13:00:18 +0000
Files and hashes: 1: JboF5duYkSjIw0cFCDow2D7hhYA.roa (hash: 5ee85IvEdLLZLBu0IK/0DK9QgLyt71g8oPTMmxnM7ss=)
2: tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl (hash: m3KcpndzUtXF8gGsB9RxiCYJFk/upNJuqUe8zmKVQEA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:a9:b8:85:30:0e:e9:20:01:8e:ca:da:e2:53:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c814ffca5310862a2224f0afd90caa96ac0b54
Validity
Not Before: Jan 31 13:00:18 2025 GMT
Not After : Feb 1 13:00:18 2025 GMT
Subject: CN=9721cf804da53a5a3f2c5e0e9c343d8438db8933
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:da:b6:42:63:8c:b9:df:eb:6e:42:2f:d2:1d:
d0:dc:cf:4b:5d:f2:1d:c6:ce:a7:c8:97:c5:29:5e:
bd:9b:3f:23:49:84:5f:4f:d1:1e:e3:3b:cb:52:75:
22:21:bd:8c:b3:9e:ca:50:fc:b0:32:43:0a:4c:5f:
80:f6:a9:6b:dd:47:be:c5:c9:f4:31:c3:c7:58:d0:
6d:f3:55:8a:04:fe:fb:0d:0c:80:ad:b8:57:c9:78:
d5:97:5a:a9:d7:1a:ad:44:52:13:f9:4b:f1:ff:74:
ba:18:eb:b0:ab:70:e0:f1:4f:a6:9a:95:52:bb:8e:
8a:5e:42:d3:7e:df:0b:c0:e7:7e:4a:3e:ad:32:0c:
99:ab:dc:71:44:11:26:1a:82:74:c7:67:cd:8c:03:
bd:a0:e8:41:8a:55:2d:8c:4f:3d:17:bd:57:53:69:
f8:e0:06:06:64:f2:bd:74:a5:c4:b1:35:4a:8e:ef:
99:bf:6e:cb:9d:62:0a:49:84:17:00:7c:85:c4:2c:
e6:2d:75:e8:aa:24:b3:8b:b8:60:fa:0c:46:eb:fd:
83:2a:5c:0a:8f:c7:8e:82:a2:e2:2e:e4:f3:47:9f:
9c:61:84:6c:29:a5:a0:0a:a1:e8:e7:2d:c4:20:e0:
6b:06:14:12:0e:79:54:60:19:d5:c8:f3:72:0a:a8:
48:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:21:CF:80:4D:A5:3A:5A:3F:2C:5E:0E:9C:34:3D:84:38:DB:89:33
X509v3 Authority Key Identifier:
keyid:B4:C8:14:FF:CA:53:10:86:2A:22:24:F0:AF:D9:0C:AA:96:AC:0B:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMgU_8pTEIYqIiTwr9kMqpasC1Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1aae45-f6be-401c-b3d0-f467b2f42af6/1/tMgU_8pTEIYqIiTwr9kMqpasC1Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:1c:28:c2:6e:b6:93:ee:f8:93:79:e5:af:16:9a:8e:1a:49:
71:f1:41:d3:23:5e:a8:6e:99:15:bc:e2:55:96:8c:09:76:61:
07:7b:b6:48:09:a0:3e:dd:bd:97:a9:f8:55:d2:a3:fc:8e:c5:
51:6b:2b:c2:40:4f:61:78:21:43:09:e1:8a:9e:4f:67:b2:89:
e1:2b:31:a0:66:59:45:93:b3:94:29:4e:7f:16:72:62:47:69:
0a:a8:69:40:8d:64:3c:d1:0e:f6:14:12:40:fa:e9:d9:4a:98:
80:70:56:e7:dd:3a:45:46:73:42:5f:79:0f:3e:c5:00:74:5c:
0c:63:8f:b9:d0:52:1e:2a:b0:b9:56:02:ce:2c:9e:e9:bb:be:
1b:55:2d:c4:f8:d6:89:fe:cf:bf:88:73:c0:67:b8:c0:a1:5e:
18:c8:fb:cd:4c:6c:c9:84:60:f9:12:5b:12:c9:5f:e8:df:cf:
85:38:1d:c6:51:06:32:3b:e4:7e:a1:14:2e:ea:78:6d:d6:4b:
45:0a:0d:1f:67:19:f6:da:5c:80:5a:37:32:64:70:a7:1c:66:
df:05:63:17:3a:e5:da:a9:0b:dc:05:99:be:31:1f:98:cc:6e:
8c:73:d4:09:73:7b:7c:7c:e5:9a:74:9e:8a:22:3c:1c:25:7e:
d1:c1:a5:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:45:12 2025 by rpki-client