Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
File: t-0w6W6la5gOa3k9GobGLdXAvB8.mft (raw, json)
Hash identifier: tyv5UI8AgHJ5/1czhR3iQhbm78w/isU9340zb5mF39I=
Subject key identifier: 42:AE:0F:BE:E0:58:B5:00:A7:84:00:05:1F:AC:5A:3F:B1:0F:1B:E5
Authority key identifier: B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
Certificate issuer: /CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Certificate serial: 0194BC3C9309BFC3E102D21A9DC254C37DC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
Manifest number: 045D
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: 8HKSdNrm9QMyoSA380bXaBqQQ0o.roa (hash: n0TkThrqHtx1QI4h5bmhzme4/EVU3X+pkCgBWj6DraA=)
2: t-0w6W6la5gOa3k9GobGLdXAvB8.crl (hash: 1GFRqyzGsdGBbtN4/eyuOW3OALhxB6pd/UueVKHsWuo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:93:09:bf:c3:e1:02:d2:1a:9d:c2:54:c3:7d:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ed30e96ea56b980e6b793d1a86c62dd5c0bc1f
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=42ae0fbee058b500a78400051fac5a3fb10f1be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:63:76:55:0c:31:68:54:84:75:e1:8a:a8:a1:
f2:a8:f3:08:3d:1a:58:2a:d3:b5:c5:5c:67:05:7d:
f9:98:de:1a:0f:08:07:42:dd:bd:d6:65:f3:d4:ce:
d0:af:91:c2:a7:94:a0:e2:fe:6c:22:30:18:5b:46:
2a:b9:7c:32:bf:2f:18:70:34:41:b7:fc:b6:29:fc:
d6:be:09:f3:c9:a2:45:72:bc:06:a5:6f:35:ea:c1:
a5:0d:d4:5b:d2:af:75:0f:d3:6e:2c:16:06:14:ac:
07:9c:61:57:59:65:a6:45:82:8a:c5:c7:62:b9:31:
a4:cb:1a:10:9a:3c:68:1e:d5:15:be:39:40:8d:c5:
c3:d5:3d:b6:4d:d3:71:26:4c:88:4c:f0:43:69:28:
09:4e:f4:be:a9:80:42:01:c7:d6:95:fc:2d:db:7e:
c3:4e:ff:64:57:6f:e2:03:35:54:35:b5:4f:8f:8f:
52:84:38:a6:57:26:f5:44:dc:b6:0e:eb:4c:92:27:
33:6e:99:43:61:2d:60:76:65:12:c0:7d:e5:8d:90:
d3:01:da:51:35:cd:df:49:64:6a:a5:8a:86:8a:1b:
70:d7:35:eb:aa:4f:02:38:c7:a6:61:34:b9:ef:6c:
32:6b:19:e3:69:e1:05:fb:a6:55:e0:25:13:54:e9:
78:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AE:0F:BE:E0:58:B5:00:A7:84:00:05:1F:AC:5A:3F:B1:0F:1B:E5
X509v3 Authority Key Identifier:
keyid:B7:ED:30:E9:6E:A5:6B:98:0E:6B:79:3D:1A:86:C6:2D:D5:C0:BC:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t-0w6W6la5gOa3k9GobGLdXAvB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/fa79dd-0fca-4661-8864-955537cb69f2/1/t-0w6W6la5gOa3k9GobGLdXAvB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:eb:e8:f1:57:13:d8:ba:23:08:4f:c9:cd:06:d9:37:97:e2:
4d:62:08:09:b7:0c:3a:f4:fb:97:1f:65:61:35:49:a1:6a:67:
35:08:ee:9d:c7:51:7e:d2:d2:5f:73:33:78:ae:7f:1d:c3:c5:
5f:69:3f:6a:0f:b3:a6:90:b5:46:13:ef:eb:18:3b:80:5a:bd:
d6:3c:a5:f9:f0:9d:aa:7a:c7:80:3c:26:b6:ff:d3:b3:54:c1:
20:59:45:0b:dd:b2:74:14:fb:ba:ef:03:42:ad:7c:40:4c:1c:
9c:99:61:07:e8:47:36:8b:77:e9:d2:70:b7:64:5e:d1:8e:56:
9b:5a:4a:d3:5e:cd:07:96:7c:02:15:bc:3e:5c:ce:47:08:3a:
e9:55:e2:82:0c:9c:39:8e:67:1d:30:3a:16:45:0c:58:e4:49:
31:bf:d5:40:79:d5:04:d7:6d:f3:cc:e2:1c:f1:69:e2:fc:18:
02:9f:58:4e:3f:ff:a4:f4:81:e4:95:8d:79:19:ee:42:5c:4d:
ca:f0:d3:fc:81:88:f6:a6:36:fc:90:f5:9c:68:8d:e7:84:26:
9e:5a:c3:0b:79:4e:ec:b4:e2:3e:f8:db:c8:e2:97:1a:d8:10:
2d:ad:b7:15:e1:1d:d8:c2:02:05:b4:63:cf:48:7e:76:58:0d:
b9:6c:fd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 07:46:27 2025 by rpki-client