Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
File: t6nDTT-EPNsDW3wws-hOIkElIsU.mft (raw, json)
Hash identifier: SUvBHG/NmNzcG+PSApFjYAIe30z8a3WnswufByQV6aE=
Subject key identifier: E8:67:F1:A5:BA:55:49:3F:76:5B:F6:3B:77:03:24:97:E0:1C:FC:DA
Authority key identifier: B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
Certificate issuer: /CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Certificate serial: 0194BD17A12EE9D8A749F2B90543126CCC54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
Manifest number: 0C9B
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: StPgXcpmiy5JYaEeTseShVrOOPw.roa (hash: 2TP419yQVLSPbiDET0BATqZqoaVVJJbtbUq/1dj+vY4=)
2: t6nDTT-EPNsDW3wws-hOIkElIsU.crl (hash: vcUUdQVFYbpvpfw81WRoh97T10XrfYGZgqfQVZ9pGEU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a1:2e:e9:d8:a7:49:f2:b9:05:43:12:6c:cc:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a9c34d3f843cdb035b7c30b3e84e22412522c5
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=e867f1a5ba55493f765bf63b77032497e01cfcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8b:ea:c1:51:3d:15:33:67:e8:78:41:36:88:
1e:4e:f9:40:66:0a:e5:ba:5f:33:da:36:4a:17:a7:
2d:d2:eb:89:8d:6f:0a:b1:b1:ac:d0:f7:0d:09:56:
3f:21:24:04:00:31:49:b9:21:05:2f:d4:68:27:00:
86:be:92:d5:ab:14:0a:07:3d:35:15:f1:7f:4b:16:
8c:71:0d:35:61:2c:04:c4:bb:ea:22:b2:06:22:fb:
04:f3:18:b2:b3:9d:c9:25:14:57:55:9e:84:b6:55:
77:b0:96:7f:10:97:6d:c5:a0:84:a0:de:c4:47:59:
4b:60:25:78:f9:82:bb:67:00:01:46:e8:bc:e5:47:
ea:1f:77:2f:20:2b:24:36:ba:9d:84:ff:7a:60:d8:
d7:74:7f:53:c9:7b:a9:04:5b:34:44:23:4c:2f:9e:
df:cc:04:c0:a3:39:3a:3d:60:85:ef:63:33:87:69:
76:d4:dc:e6:fa:50:58:eb:a1:0a:73:60:99:d2:af:
fe:42:0b:31:af:3e:84:c6:5e:44:4e:59:8d:ad:a8:
fe:f8:98:bd:c4:2b:f7:e9:17:19:f8:22:ae:92:73:
05:cc:a6:d1:6e:41:bd:5f:68:a4:7c:7c:4a:3c:8a:
b6:87:82:a4:8e:63:20:75:b6:89:54:bb:d1:14:46:
15:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:67:F1:A5:BA:55:49:3F:76:5B:F6:3B:77:03:24:97:E0:1C:FC:DA
X509v3 Authority Key Identifier:
keyid:B7:A9:C3:4D:3F:84:3C:DB:03:5B:7C:30:B3:E8:4E:22:41:25:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6nDTT-EPNsDW3wws-hOIkElIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/da8767-279a-493f-8b2a-3a5768021418/1/t6nDTT-EPNsDW3wws-hOIkElIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ba:52:09:e5:f2:bd:60:7c:5a:10:a4:cb:7c:72:f9:2e:ab:
04:7d:01:44:ab:6a:e7:b5:2b:26:59:e8:5a:e4:78:c0:93:ae:
6e:94:7e:c8:15:4a:35:0a:d1:f5:67:4c:65:07:bd:d0:ce:d6:
36:07:94:e6:65:5d:a2:97:c4:5f:96:3b:e3:6b:69:5f:04:9a:
f8:93:c7:0a:52:45:12:82:6e:c8:19:1e:22:10:8b:bc:39:a5:
09:48:d9:77:b1:4a:ec:6f:bb:24:d9:f1:a5:5f:7a:b2:0d:cf:
5a:14:d3:99:04:59:ac:55:2f:03:57:3e:c0:ba:2d:3b:f7:a4:
1d:e4:71:bc:f7:3a:b0:ed:fc:15:b8:6e:44:fd:b1:9e:c0:d6:
73:94:f6:39:ec:f3:0d:b2:20:03:1a:71:93:a6:85:58:3e:fb:
3e:2b:f8:36:db:1c:0a:05:3c:dd:ab:f4:43:89:6a:61:41:64:
54:46:c9:7c:85:1f:5c:cf:16:ec:06:a8:61:02:a0:9a:cb:30:
32:66:f5:65:49:3e:fe:b2:10:33:6c:b8:17:ea:f9:31:8d:31:
28:71:c3:70:b4:7b:80:4b:54:33:ba:15:da:6c:69:36:67:86:
a1:62:54:f1:f5:2e:34:39:f6:0e:f5:a6:65:f8:8d:f7:12:8f:
e8:b9:2d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:15:25 2025 by rpki-client