Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
File: tDuXodIfY3tUkTDwhXpoHMf2iEw.mft (raw, json)
Hash identifier: ZLmNdwnGZNXMkmsaAMtqfSFiSIvnDha4BXPhdQoRx70=
Subject key identifier: 12:B9:5F:9C:0E:FF:81:31:AF:F8:BC:75:D4:6B:F4:24:69:F8:71:3D
Authority key identifier: B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
Certificate issuer: /CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Certificate serial: 0194BCE0A0A8088376B67748920B2826094A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: Rg68-pzrr6gfhWgypMVfmtoKlgk.roa (hash: XpZ2I1CGwPpi3ah3Tduh3EFNHBVZBFc6didgCWOzzG4=)
2: tDuXodIfY3tUkTDwhXpoHMf2iEw.crl (hash: CEfdaT1Gsh7YnMmS5LUqKXTFGM9pYjCmd6dDlwP6lBA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a0:a8:08:83:76:b6:77:48:92:0b:28:26:09:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b97a1d21f637b549130f0857a681cc7f6884c
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=12b95f9c0eff8131aff8bc75d46bf42469f8713d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:ec:d8:62:cf:70:74:62:7e:22:05:36:a0:
bf:55:9f:b4:80:a9:b9:cc:69:e2:70:33:be:7f:a3:
0f:2f:c8:c6:f4:34:bc:48:ff:79:63:8a:bd:46:29:
cd:e8:85:c2:13:e6:a5:a0:b3:08:68:43:7b:4d:df:
6a:04:07:51:e4:43:aa:4c:17:1b:02:1d:15:44:84:
41:31:44:c2:33:6f:79:8d:c7:a5:cc:07:9a:70:9f:
eb:66:a0:a5:c1:dc:79:81:f1:04:e2:a0:11:2c:07:
64:63:4f:bc:00:3d:f0:3f:6e:29:9e:1f:53:1f:d7:
99:72:4a:3b:e4:7a:30:cc:23:bc:8d:6f:9b:bf:08:
d7:9f:96:14:f3:51:a8:ab:c3:ea:b6:b3:73:ef:b5:
73:aa:05:d5:92:0a:02:97:e7:e4:8e:bc:d4:ec:d3:
df:3f:1a:23:61:36:45:74:c7:8c:ed:37:b1:14:2b:
1a:69:a8:4f:16:96:76:95:3d:fc:4d:1d:9d:8f:19:
10:60:9d:b0:50:90:cf:79:c1:e6:1c:ac:7c:b9:d1:
32:e6:d0:06:07:fd:82:d0:f5:81:59:27:8d:c0:2f:
67:d8:e2:24:12:75:68:17:4a:32:e5:6f:9a:16:90:
33:7a:22:05:b0:8b:ba:5b:af:50:ae:9a:4b:17:56:
25:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:B9:5F:9C:0E:FF:81:31:AF:F8:BC:75:D4:6B:F4:24:69:F8:71:3D
X509v3 Authority Key Identifier:
keyid:B4:3B:97:A1:D2:1F:63:7B:54:91:30:F0:85:7A:68:1C:C7:F6:88:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDuXodIfY3tUkTDwhXpoHMf2iEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/5454ad-6cf3-4ee5-a4b9-0464e945f1cc/1/tDuXodIfY3tUkTDwhXpoHMf2iEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:79:2b:ef:a3:76:3a:90:56:d0:39:d6:4c:f2:e0:d6:3f:c5:
f4:6d:41:08:e5:65:17:52:ea:d9:f5:bf:3b:9e:ac:e3:90:ee:
2a:f0:d6:e8:7c:6c:e9:9b:59:d7:7e:be:e6:73:61:9e:6a:c1:
0a:df:ca:d1:95:e7:c8:85:8c:04:66:32:e2:5b:c4:0b:c4:2c:
78:99:49:1c:20:be:b6:4d:fd:af:b0:4f:e1:5b:f8:53:4b:b0:
01:c4:8e:d8:17:93:df:57:41:65:ca:4f:4b:81:df:5b:d0:dc:
da:f2:ca:f2:0e:bd:d7:c3:c3:5d:d9:14:f0:c6:5f:3b:a3:73:
1f:35:fd:80:03:80:0f:6f:ac:38:46:a5:2f:34:23:4a:45:23:
99:95:96:98:ed:59:47:76:ae:00:f9:60:a2:fa:c4:71:ba:f5:
ce:5d:75:cf:b5:34:f2:89:bd:06:5f:8e:c3:8c:b3:78:ec:8e:
e6:c2:3a:9b:3a:6a:ce:34:04:75:78:36:d2:9f:4d:c2:60:2a:
a3:18:f0:2c:ad:f3:47:ec:cb:fb:9d:3f:49:ab:74:0c:08:e8:
fa:79:78:41:ff:a0:0d:0f:66:ad:6c:56:a8:df:0a:e2:f7:4c:
7c:09:48:97:9d:76:d3:79:a4:d5:e8:aa:59:01:7a:60:f1:44:
b5:69:67:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:31 2025 by rpki-client