Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File: tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier: 8mMT010mkVhjTYVEGhWbnz1Yk6c5m4d0CpLvMM0qq3s=
Subject key identifier: A9:6E:32:1E:0C:D7:42:AB:41:3D:AF:EB:25:59:D2:F2:57:4A:A9:DD
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial: 0194BCE08A11E6D31154387923619027A7E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number: F8
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: CsJolUKPAKDNy1KcLpLhR3tuSdk.roa (hash: sIH3zpsSjeIlWnxi8kN5tTCXCFBIRKCDeUWKdAfj29s=)
2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: XsAEwh0+KIfcyME7/JeXzoa5RfrDNgNM/ciLL/8HUek=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8a:11:e6:d3:11:54:38:79:23:61:90:27:a7:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=a96e321e0cd742ab413dafeb2559d2f2574aa9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e3:fb:23:8e:bb:c9:6b:ef:16:7c:47:b5:ad:
58:3e:75:b2:92:b8:cb:a0:dd:6c:6b:ef:aa:8e:c0:
68:da:b8:95:74:ea:c7:01:33:1b:41:9a:fb:a8:3a:
36:80:20:ef:64:5f:de:f9:0f:39:a2:a6:fb:6e:16:
7d:04:e9:ca:49:0e:31:d5:36:d5:a1:d3:f4:18:43:
c4:61:c0:ec:d8:f9:a4:36:79:fb:77:1c:0d:d8:cd:
6c:7c:ff:d8:29:b5:58:9a:0f:df:fc:be:e7:23:af:
11:84:1b:d2:7b:30:e4:ba:1b:72:77:00:77:e6:fe:
37:f8:a9:2d:6b:ef:31:79:fc:5b:68:97:1f:24:16:
7e:09:fb:d2:22:28:5d:de:af:e2:58:9b:41:5e:01:
8b:a3:e4:52:a1:6a:fc:93:d9:40:0d:81:39:0e:af:
1a:7c:1f:09:a0:2c:fd:b8:24:da:72:bc:07:6f:b6:
e0:89:5a:0f:ac:b8:72:59:7b:4e:0c:09:8d:9c:48:
66:54:a6:8e:8a:e8:89:1a:12:1a:93:1e:25:f3:62:
43:b1:50:18:8b:55:68:0f:55:64:be:4e:fc:1b:03:
c1:95:4a:88:f4:7b:87:20:8b:e2:b5:ca:39:76:d3:
f6:94:c5:0c:00:76:6f:a6:2d:b1:cd:fd:e4:bc:f2:
b8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6E:32:1E:0C:D7:42:AB:41:3D:AF:EB:25:59:D2:F2:57:4A:A9:DD
X509v3 Authority Key Identifier:
keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:d1:5b:f2:80:e9:6a:25:cb:a9:19:a5:a6:23:41:fb:b6:32:
af:89:8e:0a:01:09:a1:4d:41:17:21:3f:3f:f2:e9:ac:0a:f6:
41:06:d9:dc:40:8f:47:a6:4f:b9:49:f4:84:ee:5c:73:00:a7:
75:1b:c6:f4:af:f1:0e:d1:3a:fe:67:46:50:b0:4e:6b:99:9b:
e8:be:89:f2:fe:c2:2c:91:32:92:e8:c8:f2:36:14:b7:ab:6f:
2d:d7:3f:ec:2f:22:8a:b5:90:da:9e:09:01:36:ce:84:a8:82:
3b:7d:91:44:c5:3f:41:38:8a:be:bc:d7:c5:a1:61:81:45:c8:
ed:bf:78:ed:03:a6:0a:a0:46:11:2e:6c:1f:03:17:52:1d:73:
67:d4:8d:37:e6:43:1b:db:a4:ad:8c:98:a3:e3:91:ee:cd:11:
98:29:0e:b6:34:bc:4a:0d:14:86:ad:c2:f5:5a:57:8b:e0:a1:
76:01:db:66:ee:11:eb:0c:91:37:6a:e4:b9:b7:45:76:0c:21:
bd:5b:dd:19:2f:f6:7b:68:50:56:f7:de:54:d0:c6:7e:1a:cc:
5e:e3:df:09:22:4e:d3:93:33:9e:82:67:a5:5d:fd:57:c0:5e:
5e:8b:38:a2:9e:07:ea:e4:3f:ef:5b:d5:58:a3:8d:05:74:6c:
f5:e1:a5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:37 2025 by rpki-client