
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
File: tRhBzcn2NZTd3CulmkATMYK1efo.mft (raw, json)
Hash identifier: 8rUJqSzb2OBX052lqBK3eFuYsVKkZLk8AbKyuShUOZ4=
Subject key identifier: 73:CF:CE:BF:7C:3D:A9:C1:42:C5:EB:85:8C:2C:A5:0B:60:4F:77:04
Authority key identifier: B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
Certificate issuer: /CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Certificate serial: 0194BC3C2ACE785C07A1E6A32C3B0A44E10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: iQxCTqJc23IztH0qMtXGhii78xc.roa (hash: b/32KuHdgss/tEEpqliyL9nGxIGy3IsYTip4QREYlPc=)
2: tRhBzcn2NZTd3CulmkATMYK1efo.crl (hash: X4wH5lE1pqbiuDEExZUW9YlSLsoFrcXNtAgXmRzoV0I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2a:ce:78:5c:07:a1:e6:a3:2c:3b:0a:44:e1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51841cdc9f63594dddc2ba59a40133182b579fa
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=73cfcebf7c3da9c142c5eb858c2ca50b604f7704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:31:f9:83:01:5b:0d:6b:3c:48:da:40:9b:9d:
f5:a6:4a:51:0b:a4:92:4d:07:d2:ee:22:91:bd:d1:
0e:fb:3a:89:bd:05:38:08:01:26:a6:0c:38:b3:6b:
e4:da:0a:6e:00:da:c1:25:9a:18:a9:cc:bc:e6:2b:
4b:2f:c5:f6:76:58:fc:dd:ae:55:8f:48:c4:c7:ac:
5c:ec:b1:f6:b1:48:42:14:af:26:db:48:5a:10:c7:
05:a3:85:55:26:f4:9e:42:04:a7:18:d8:37:78:5a:
0f:c9:78:91:4c:b6:e1:87:aa:ce:91:d2:d4:9b:a1:
cd:4f:fb:ae:ce:ec:b0:9d:47:f8:fd:45:9d:6f:48:
02:1f:56:42:a0:6e:fc:af:07:d5:ba:1d:e3:41:e1:
28:ee:f4:d9:17:80:f4:77:53:57:33:04:a9:12:7e:
9c:c4:6f:1d:d5:39:e5:c3:4a:57:3b:30:ed:36:7f:
5c:48:14:ab:f4:9f:b7:ec:d9:3a:50:52:aa:b8:62:
db:14:3f:fd:ae:c1:e5:02:ae:7f:d8:a2:eb:b3:5f:
45:4b:59:ef:ec:86:9f:74:54:6b:8d:14:b6:12:b5:
e4:ec:8b:78:b9:00:e9:bc:dc:ca:26:a0:12:27:1d:
77:ab:42:ca:e8:7b:12:f5:eb:39:14:ae:3f:f3:54:
38:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CF:CE:BF:7C:3D:A9:C1:42:C5:EB:85:8C:2C:A5:0B:60:4F:77:04
X509v3 Authority Key Identifier:
keyid:B5:18:41:CD:C9:F6:35:94:DD:DC:2B:A5:9A:40:13:31:82:B5:79:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRhBzcn2NZTd3CulmkATMYK1efo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/f0af61-8ccc-4a3b-9010-6910f399d38f/1/tRhBzcn2NZTd3CulmkATMYK1efo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:cf:c1:f6:9d:52:19:75:0b:6d:9b:bf:87:f4:4c:2d:b1:de:
d6:99:42:86:4b:ea:78:04:0a:81:dd:b8:a1:1d:42:73:0d:7e:
ac:72:1c:b0:46:8f:ba:b6:96:59:69:5d:eb:9c:01:cb:c8:33:
fb:4b:31:f9:4e:7b:0d:49:bc:6c:24:5d:bc:36:59:aa:4b:68:
5a:e8:54:6b:99:9c:67:d9:a3:ec:18:5a:34:19:17:bf:68:de:
5e:11:34:58:35:7e:77:b5:5a:6f:2e:ab:da:cd:eb:5a:29:44:
4e:bb:84:33:7f:b5:26:ae:f3:8b:fa:68:3f:ca:61:db:26:9f:
5a:da:74:13:74:bf:7e:20:73:4e:34:38:d5:07:af:42:4a:9f:
1b:fa:06:17:45:d4:34:64:8c:52:72:b8:48:d6:23:dd:bd:fc:
be:ca:36:ce:7f:0f:09:76:84:72:56:68:5c:a3:d9:b5:81:ea:
9f:ce:72:09:82:89:60:46:f9:e7:28:e5:cf:85:29:97:18:63:
a3:9e:0d:7f:27:98:5a:6d:69:f1:16:14:8b:1c:0d:f7:8b:45:
db:db:8e:ef:6b:c6:c9:a7:7a:ac:b4:89:2d:ee:e2:8e:1b:2d:
e1:96:6c:8d:8a:d1:ac:0c:93:f1:34:1b:8c:db:4c:a8:6f:ab:
7d:68:da:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:05:08 2025 by rpki-client