Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
File: ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft (raw, json)
Hash identifier: q80sBkBddLurOpuFMDka+SDUjM69jYE2RfN5CCS0s4s=
Subject key identifier: EC:B2:76:3D:98:73:18:91:32:84:E7:2C:16:76:22:B2:12:98:88:7B
Authority key identifier: 4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
Certificate issuer: /CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Certificate serial: 0194BBCEF0F88D07BC639015E8B0D1C5322F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
Manifest number: 072F
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl (hash: t+4Wdfo6zke3F20RFFMPO5sIASw65tcUjQxp77YFMGc=)
2: dhaZ9rJEY3VSapdxzWuOpswb-w0.roa (hash: jRn4LzSctiGARclpcid7MOPCN0FjXXNaOIwerI8w1dk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f0:f8:8d:07:bc:63:90:15:e8:b0:d1:c5:32:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e129fbcc7ae8f5b4019f07a3d6d2e18496b5ee4
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=ecb2763d987318913284e72c167622b21298887b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:45:2d:36:90:c6:dd:ce:5f:bf:cc:d9:65:32:
69:18:71:c5:6f:33:51:c7:10:8f:6d:f1:09:5b:7d:
e2:49:ce:e8:4f:f3:fa:e5:34:a4:78:ee:96:93:5b:
7f:c7:49:66:f4:af:57:ff:99:2b:31:97:58:b6:a2:
62:83:50:92:10:0f:0c:fe:98:35:c7:f8:a8:2b:56:
9c:fa:89:f4:f2:e6:df:fc:c7:e5:e4:b5:a3:15:4c:
4a:a4:54:16:a0:5f:65:f9:fd:53:77:88:28:f2:4f:
50:67:95:df:1c:6b:a9:be:c8:05:1b:b2:e5:1b:ef:
7a:de:05:f1:0e:26:9b:bc:6c:28:19:ce:22:aa:01:
55:6d:81:30:4d:0f:bf:1d:00:7c:95:3f:77:9e:b7:
47:f2:e9:ac:f4:6d:0e:96:f2:64:0d:31:58:cd:58:
a9:fc:de:5f:d0:35:fd:c5:17:75:c5:fe:73:f0:78:
3b:20:94:ed:8f:6b:ad:e3:95:db:67:3d:6f:2e:5a:
30:43:71:1b:d9:0a:5d:a0:8c:dc:9a:0c:3c:1d:ee:
14:aa:c4:70:3d:9b:44:ce:de:7d:50:e2:51:54:f7:
65:8f:30:86:81:a6:85:63:d7:28:f9:ed:03:c8:c8:
c6:fa:25:50:8a:01:ae:c4:5f:d5:e5:e5:92:ca:ea:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B2:76:3D:98:73:18:91:32:84:E7:2C:16:76:22:B2:12:98:88:7B
X509v3 Authority Key Identifier:
keyid:4E:12:9F:BC:C7:AE:8F:5B:40:19:F0:7A:3D:6D:2E:18:49:6B:5E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThKfvMeuj1tAGfB6PW0uGElrXuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f29a52-3720-480f-80db-91d2b4890369/1/ThKfvMeuj1tAGfB6PW0uGElrXuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c3:d0:89:33:e6:2e:ad:7c:6e:07:19:64:c5:66:3e:d2:c7:
c7:c9:26:f8:cd:ab:77:69:98:7e:dc:22:99:74:7d:7f:65:ea:
13:b7:9e:9b:11:e6:47:96:7c:ed:88:9a:ab:03:2a:ae:0b:1f:
f9:e2:1d:de:26:df:14:e7:92:ff:89:23:06:eb:78:a1:5e:28:
04:6d:47:0f:f9:84:eb:61:41:e1:2b:73:32:65:92:13:2b:60:
be:9d:35:25:40:47:4f:1c:0c:35:a5:87:ba:5e:37:9c:5b:8d:
60:e0:3c:1b:29:e4:f1:89:7f:07:9c:65:c4:c8:e0:d5:32:fc:
11:75:bb:ff:5d:47:60:bd:99:6e:45:d7:71:1d:bf:60:39:6e:
73:ee:f3:3d:f7:83:5d:73:14:8a:d9:c8:31:53:07:42:0b:dc:
fd:fb:68:c6:63:df:5a:43:85:6e:fe:42:b4:6d:db:20:96:ee:
68:93:2f:4b:35:1c:88:95:8d:70:d2:35:70:92:28:1c:dd:08:
09:d9:2e:9e:74:10:77:5d:c8:1c:fa:e9:61:f1:6c:fb:5a:f7:
88:0d:91:e4:75:62:ff:bf:44:c9:e1:c5:ff:d3:3b:aa:1a:d8:
f1:05:81:49:6b:fe:f5:80:ca:6a:1c:e9:6d:ed:03:2e:ec:96:
7f:eb:d6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:10 2025 by rpki-client