
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
File: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft (raw, json)
Hash identifier: VwPlXTZ7Bnb1bG2K2AXNmTnFpvly6r+qc8uKaHACAnA=
Subject key identifier: E4:0D:C2:BF:F6:13:01:21:1B:8D:87:EB:2D:D3:9E:CB:A8:47:39:3A
Authority key identifier: B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
Certificate issuer: /CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Certificate serial: 0194BBCE45F8D6BFB8B21060D6FD7EC5AF1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
Manifest number: 0501
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: G4FFwIyiIU29W95QZk9-MWiLljM.roa (hash: iDaSzS67wgh1om9NMNs4mTJZEfMH7AGf6ifeuTsPDRg=)
2: tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl (hash: fRG9/K9O8ET8SK8a2O7o6CaQdTeQb8/M0Vo0nRT50cY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:45:f8:d6:bf:b8:b2:10:60:d6:fd:7e:c5:af:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a2b3fb83d86c7806cc0660d829119d9375b4
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=e40dc2bff61301211b8d87eb2dd39ecba847393a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:52:db:b2:25:88:4c:d5:01:c9:00:71:30:73:
a4:26:10:88:07:c7:da:5a:96:cd:5e:5e:e9:4d:c1:
86:77:e4:43:9e:df:46:d5:19:df:e8:41:24:0b:0c:
9f:40:ad:d8:a7:74:6b:a7:91:04:ff:64:53:ae:40:
a6:c3:7a:49:6f:be:4d:05:de:df:c7:d5:ba:b2:9c:
ba:b8:80:6a:14:a5:c4:23:06:87:f1:09:25:c1:57:
56:54:aa:c4:23:a1:16:cd:48:05:7d:b2:c2:a7:9f:
51:58:b6:23:2c:e0:f6:ba:e3:b5:af:74:fa:2c:bb:
76:7d:63:e5:38:72:65:fb:7c:fc:31:5e:3a:12:3c:
a8:48:1f:a3:87:56:c2:81:3e:1c:c1:b2:bf:fa:da:
12:c1:47:48:a8:6a:11:9d:3a:4d:1e:38:7c:94:03:
15:52:51:3f:48:72:8c:b3:aa:92:dc:08:7c:a2:b7:
2e:2d:47:74:8e:aa:42:3d:2c:30:59:d2:62:68:e8:
f8:f7:1b:0a:75:36:02:d3:bc:5a:02:9c:60:43:c9:
76:84:93:cf:ac:9b:a0:82:af:2a:4f:c8:7d:72:5b:
88:ea:fc:8d:b4:f3:ed:55:9d:15:71:d3:77:dd:7f:
bc:3f:bd:5a:2c:0b:18:9e:fa:b6:71:f3:79:8b:ca:
69:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0D:C2:BF:F6:13:01:21:1B:8D:87:EB:2D:D3:9E:CB:A8:47:39:3A
X509v3 Authority Key Identifier:
keyid:B4:53:A2:B3:FB:83:D8:6C:78:06:CC:06:60:D8:29:11:9D:93:75:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf748d-c4ca-4fd1-a59d-4060f211f3c3/1/tFOis_uD2Gx4BswGYNgpEZ2TdbQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:34:2e:62:6f:32:63:dd:67:dc:de:bc:8c:a1:f1:98:33:4d:
ba:d0:8d:b0:19:68:74:03:c1:99:f8:23:79:2e:db:a2:a7:5a:
b3:34:b0:be:b0:5f:a8:b7:27:28:bc:99:f4:e2:29:02:4b:e0:
fe:2c:b7:56:a7:0b:87:63:2a:fc:7c:e9:9a:42:ed:9c:2d:41:
ff:cc:f7:71:88:9d:3e:69:e0:66:ae:cf:2c:77:0f:2e:22:fb:
e4:bd:31:60:08:60:8a:7d:b3:ab:c6:7e:e0:83:8e:17:2d:38:
fd:3f:ec:e4:e0:f2:82:b8:0d:dc:dd:48:82:94:4c:3f:8e:14:
81:81:73:bf:b1:25:b4:da:00:ee:cc:e3:fe:50:c3:fa:9e:4e:
31:ab:f2:72:b7:db:ed:e3:9c:6e:c3:95:4a:31:8d:3b:ce:a4:
af:1a:27:70:96:32:2b:80:5a:c9:4d:3a:dc:e4:16:95:79:84:
c0:01:69:35:4b:60:ce:78:35:b0:d6:d3:f9:cd:6e:cf:dd:44:
16:72:2d:ae:70:12:37:6e:06:cc:44:c6:63:3a:f5:07:c7:76:
ed:85:1b:09:5e:f2:f8:fd:1f:49:5e:06:99:c7:a2:46:3b:ce:
0b:7b:87:7f:1f:d4:6f:86:9e:60:c9:dd:c1:2b:37:03:29:f2:
6d:8f:54:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:38:06 2025 by rpki-client