Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/T03F1MB2_YQmOrcubxe1_0rLhEg.mft
File: T03F1MB2_YQmOrcubxe1_0rLhEg.mft (raw, json)
Hash identifier: y+MMPovj8skaeZh6tbnFRh6O7MW8TNiYecWMrQIgMdk=
Subject key identifier: 88:A7:0A:3B:B5:0D:41:89:4E:AD:56:A2:50:DD:A4:BA:5B:68:3A:1D
Authority key identifier: 4F:4D:C5:D4:C0:76:FD:84:26:3A:B7:2E:6F:17:B5:FF:4A:CB:84:48
Certificate issuer: /CN=4f4dc5d4c076fd84263ab72e6f17b5ff4acb8448
Certificate serial: 0194BD17771738EA6FEF8255161BE166DD48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T03F1MB2_YQmOrcubxe1_0rLhEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/T03F1MB2_YQmOrcubxe1_0rLhEg.mft
Manifest number: 0747
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: 5iUoguj_iK1nNW8vHsVzOldAdSU.roa (hash: pKY+cX83EfJeSDoR6xrNZru3sgyhL3gHqEm0luVXgrc=)
2: T03F1MB2_YQmOrcubxe1_0rLhEg.crl (hash: ojetwFUirrF6YcIReQapYWu2xpCsh396cdtMp9R7tVk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:77:17:38:ea:6f:ef:82:55:16:1b:e1:66:dd:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f4dc5d4c076fd84263ab72e6f17b5ff4acb8448
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=88a70a3bb50d41894ead56a250dda4ba5b683a1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1d:be:41:a2:04:e0:30:89:9e:79:24:a9:05:
80:0b:e9:ce:47:7f:a7:71:91:ad:80:7d:bd:77:75:
1d:18:00:c7:49:99:52:5f:f4:36:c5:92:b0:b5:a0:
f4:39:08:39:d9:81:f8:1f:57:1f:e6:d7:36:f7:9b:
cd:da:f1:ad:f7:d1:8b:e8:76:7f:69:af:3d:49:1c:
bf:83:5c:10:54:fb:1d:26:44:42:6a:18:60:04:ac:
5a:51:b9:1d:ec:c6:1a:37:38:6d:30:04:94:b1:7d:
45:4c:fc:85:fb:e4:b8:50:5a:0e:20:8f:6a:15:f9:
66:a7:d3:92:be:c5:70:af:03:6f:8f:5a:2f:58:c5:
00:b2:a9:d8:ac:18:6e:6f:cf:2f:3e:71:e9:7d:6b:
82:bd:8e:19:9f:87:c4:31:9c:bc:95:29:9c:ca:a5:
e6:f5:90:d7:fb:f9:0b:d3:6e:8c:ef:ae:35:8f:94:
dc:a3:93:13:08:a2:02:09:35:ee:91:59:a0:45:6a:
ab:82:62:9a:0b:0e:99:33:25:90:73:7b:b1:89:b4:
4e:ca:e1:da:17:16:e4:ce:5f:4b:f9:d1:0a:2d:04:
43:dc:9e:5f:43:e7:20:60:08:c4:fe:9f:fb:d0:af:
97:36:05:dd:9c:e9:08:fd:55:a0:d3:a4:52:9b:17:
cb:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A7:0A:3B:B5:0D:41:89:4E:AD:56:A2:50:DD:A4:BA:5B:68:3A:1D
X509v3 Authority Key Identifier:
keyid:4F:4D:C5:D4:C0:76:FD:84:26:3A:B7:2E:6F:17:B5:FF:4A:CB:84:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T03F1MB2_YQmOrcubxe1_0rLhEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/T03F1MB2_YQmOrcubxe1_0rLhEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2575fe-a526-4195-9745-fa96bdd2ffa3/1/T03F1MB2_YQmOrcubxe1_0rLhEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:38:8b:be:ed:9a:f5:bf:f4:5b:03:b7:0c:4e:2c:ed:33:ac:
7e:51:a3:39:ef:50:02:6d:42:ef:9f:34:48:51:b7:fb:72:d1:
44:9e:a6:df:95:e2:3c:1a:d0:82:da:e4:f3:06:3f:a0:29:8f:
ee:3f:e4:24:06:18:29:4a:ef:b8:00:83:b2:c7:12:d0:50:25:
90:d4:34:c5:a0:de:d6:18:cf:b1:f9:11:70:63:42:67:cd:22:
fd:6c:08:09:8a:e8:8d:22:e8:00:e9:fe:e4:fd:ba:80:d5:e1:
75:72:ed:98:3f:58:31:0a:c4:e6:81:f3:fa:b4:3e:a3:43:ed:
ea:11:55:16:54:02:8c:0b:84:7f:f3:ad:0c:95:e3:ec:1b:94:
b6:22:33:b5:74:89:ad:38:66:c8:b9:db:ac:fc:ac:57:7b:a8:
67:44:a2:2d:fe:47:78:42:80:c1:ba:4e:b5:8c:8d:24:f0:96:
db:a7:b1:4b:48:ac:9d:a8:33:d1:c2:72:7b:e7:0a:33:de:52:
ef:af:77:46:b2:04:a8:cb:75:52:a8:d9:92:c4:be:d9:92:8f:
16:df:0d:87:f2:a3:70:ce:10:56:0c:93:84:3c:5f:76:f6:bf:
11:ac:e8:ea:4f:18:90:eb:bb:36:c9:50:79:af:dd:de:7c:be:
19:2e:71:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:21 2025 by rpki-client