Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
File: T4BFzPUJd-vDBmo87tj9MvHwI94.mft (raw, json)
Hash identifier: MfY5IgnhbAcfCPryvAOncoqT2HOzbzK2JOuYPEpz2Sw=
Subject key identifier: 33:57:3C:12:2E:FC:F8:84:C9:DB:F2:64:2B:55:D3:0A:D2:41:77:73
Authority key identifier: 4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
Certificate issuer: /CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Certificate serial: 0194BC7302B4004BE9262165196A5EB8A79B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
Manifest number: 1368
Signing time: Fri 31 Jan 2025 13:00:41 +0000
Manifest this update: Fri 31 Jan 2025 13:00:41 +0000
Manifest next update: Sat 01 Feb 2025 13:00:41 +0000
Files and hashes: 1: T4BFzPUJd-vDBmo87tj9MvHwI94.crl (hash: Eq2MJXNASJPycZbzbkEh0mrhDzwkrSpwEICaG5iioRQ=)
2: YKTSjuC1HFTX7b7hXOaQuasHjw8.roa (hash: DCJ4Y27xyiCClFTgENixBHPREjuVymaDjhE/h8glQl4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:02:b4:00:4b:e9:26:21:65:19:6a:5e:b8:a7:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8045ccf50977ebc3066a3ceed8fd32f1f023de
Validity
Not Before: Jan 31 13:00:41 2025 GMT
Not After : Feb 1 13:00:41 2025 GMT
Subject: CN=33573c122efcf884c9dbf2642b55d30ad2417773
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0d:f0:ec:a8:61:09:e7:12:f0:c0:99:c3:ea:
49:6f:2e:ef:c7:d9:cc:00:e4:0c:79:52:81:b9:7d:
dd:fc:20:ce:5f:08:f5:c1:ca:70:46:84:31:52:ca:
c6:e4:3a:f0:04:96:0c:da:b8:9a:e9:7e:c6:07:29:
3c:25:d6:a6:fa:9a:88:6f:13:50:0c:0d:0a:2f:4f:
d5:20:58:fb:27:ef:47:6e:4a:3b:44:ab:52:18:17:
f8:83:f6:6b:fe:00:58:6b:f8:49:c7:f0:5b:a3:7b:
bc:8b:c5:0b:cc:87:fc:f3:9e:06:17:c7:9f:d3:97:
15:cb:ee:3a:4e:35:f8:11:5e:88:71:f8:04:06:90:
7c:74:3a:d0:46:98:e4:f7:ff:50:d1:7f:e9:9f:27:
91:83:62:4c:11:8d:6e:50:dd:b4:d6:e2:79:9f:3e:
95:54:6e:f4:bb:78:a0:50:16:0a:60:51:c7:e2:52:
b5:8d:ec:56:45:57:3b:f2:72:b8:01:3c:8e:2a:df:
f1:19:bc:cb:e6:a7:de:18:6f:dc:24:c0:16:37:23:
cb:4c:58:b1:20:6d:dd:1a:21:ed:f0:f7:00:67:b4:
3e:56:a8:bf:22:a6:a5:f4:c7:5b:aa:33:1c:3a:26:
b5:77:58:81:bd:2a:3e:72:a7:01:ac:99:35:77:e5:
74:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:57:3C:12:2E:FC:F8:84:C9:DB:F2:64:2B:55:D3:0A:D2:41:77:73
X509v3 Authority Key Identifier:
keyid:4F:80:45:CC:F5:09:77:EB:C3:06:6A:3C:EE:D8:FD:32:F1:F0:23:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4BFzPUJd-vDBmo87tj9MvHwI94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/7d9e10-2c19-4dd8-a80f-40c8697bbde9/1/T4BFzPUJd-vDBmo87tj9MvHwI94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:66:b5:bd:50:79:22:a0:b3:d2:6d:e8:1f:da:e1:7c:51:ad:
91:10:70:45:b7:02:05:ae:6f:7b:5a:fd:16:6d:20:b6:54:4d:
ce:6d:75:e8:97:be:54:a4:e3:31:9e:0d:03:1e:3a:6b:9c:48:
9a:4f:92:bd:d3:6f:7f:69:44:10:b6:d9:3d:c5:b2:68:a8:e5:
3f:84:38:f4:34:41:cd:10:15:c3:17:9a:ad:05:05:4b:fe:4e:
19:9e:5b:69:fd:3d:35:67:ef:89:8a:26:ee:83:65:79:b2:29:
7d:f9:5e:d6:83:77:ee:b5:2f:4a:19:b3:01:08:dd:22:a7:7e:
a1:33:0a:52:04:d9:93:01:95:1b:42:5e:4b:73:38:63:b4:ed:
ac:40:22:68:d8:6f:71:23:40:d4:1e:64:c2:38:cc:11:12:19:
b8:dd:97:b4:9a:ff:fc:06:bd:99:5d:c4:16:18:64:f8:6b:b3:
b1:c8:f1:5d:72:12:9f:96:bf:17:c1:16:35:a9:9f:65:02:b0:
7a:43:e4:45:20:16:4b:4d:1c:d4:e0:63:9b:62:58:62:9f:1b:
3a:dd:19:8d:14:6c:7c:d5:79:66:dc:15:e9:a0:8b:d3:4c:f3:
45:c6:ba:92:b8:55:8d:36:01:87:81:c7:81:7f:46:1f:52:67:
54:6d:89:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:25 2025 by rpki-client