Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
File: tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft (raw, json)
Hash identifier: ca4WPJLBc+m6tLu/pUCLUXcH8efp7p3xKR8W/UGxeI8=
Subject key identifier: F3:AD:D1:9A:BE:0B:C5:E7:47:0E:4E:4C:B5:AC:90:29:15:0B:30:48
Authority key identifier: B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
Certificate issuer: /CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Certificate serial: 0194BBCE53B710C88C89EC6DBB6F298889E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: 0WgKhjREJrZPp5eivCc5Ledwy08.roa (hash: g1cMz695Vu5b1v4C7JspTc1yMqOrx6XRuND1g3o80ZU=)
2: c4XFDsuP3oiOPuoN5dW6Mp7swps.roa (hash: RShjOJ6yyL7rh4X46zYbqRc79tC1/dWZp0uZXHk88jM=)
3: tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl (hash: 1SZONXOI/x/mjBrmxI+3IPuo+yDg90jcFrpMTYSq/mc=)
4: x8qy1V86ggKXIYJ47lPp7-bEQ08.roa (hash: Tid2ObTc99hFnnGIy0KhVlQV4ZEsaX9AQcsvz/R/sw4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:53:b7:10:c8:8c:89:ec:6d:bb:6f:29:88:89:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ec6c0a5ebec5817d91b91e79a6bc6132eb9d2c
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=f3add19abe0bc5e7470e4e4cb5ac9029150b3048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:11:62:39:ce:a9:de:89:93:98:f9:0e:2f:
29:d2:83:d1:c2:b1:42:9a:30:fc:ca:9c:da:7f:d4:
3b:3d:ab:2d:2c:62:93:97:58:52:a7:27:02:c1:df:
d7:f1:14:d3:a0:8a:37:ab:3f:44:93:d0:38:77:ba:
3f:91:95:49:1a:4e:d6:2a:07:db:b1:a7:cf:ef:d8:
06:bc:88:ca:43:10:c3:c9:7a:b2:15:0d:9d:d2:71:
77:a3:4c:2e:58:75:ab:9e:a8:5d:db:89:73:44:71:
d2:d5:68:3e:73:a0:6c:af:db:9f:5a:41:26:e9:61:
34:5b:69:46:ed:5a:19:6c:17:7d:d3:45:4a:68:81:
7b:5b:ab:56:f3:a6:b6:9b:87:93:39:63:5f:3f:73:
eb:66:94:79:f9:f1:7b:cb:dc:1a:77:8c:41:64:6d:
fb:7b:9d:73:d7:e5:85:27:08:04:e0:48:18:68:91:
23:c8:fb:7f:a2:c7:ad:65:aa:0f:ec:be:e0:67:9f:
62:41:64:e0:fb:80:81:f9:5d:f5:4e:82:7b:75:f3:
f3:a3:8f:03:90:36:d9:f7:ed:d0:f8:09:a0:31:ad:
11:6b:f3:12:a2:7b:51:3d:4c:9f:62:59:35:ec:7d:
11:75:13:bf:36:d2:12:38:59:89:f7:d4:3b:63:de:
cf:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AD:D1:9A:BE:0B:C5:E7:47:0E:4E:4C:B5:AC:90:29:15:0B:30:48
X509v3 Authority Key Identifier:
keyid:B4:EC:6C:0A:5E:BE:C5:81:7D:91:B9:1E:79:A6:BC:61:32:EB:9D:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOxsCl6-xYF9kbkeeaa8YTLrnSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/20974d-6403-4107-a75b-13fb7a5130ca/1/tOxsCl6-xYF9kbkeeaa8YTLrnSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:29:2f:63:00:c3:e6:5d:be:e0:f2:50:74:eb:e4:cc:3e:04:
82:06:99:a4:db:bd:71:2d:bd:a1:b8:dd:c3:79:57:66:02:3f:
70:5d:cb:f5:6a:97:ee:39:09:4f:93:fe:ec:10:e3:c6:b7:6c:
fd:8b:bf:fc:39:1a:9a:25:a1:ca:85:03:01:23:f1:d0:53:1c:
74:b1:13:e7:82:55:d7:8f:49:c1:30:09:18:ae:1c:b0:41:99:
fa:4e:2d:f8:e4:59:c0:b5:48:c4:bc:48:40:5a:96:0f:82:88:
d5:aa:0d:d0:8e:3a:b7:6f:b9:d4:b1:11:4d:05:b2:dd:38:4a:
fb:3c:b8:a5:ec:cb:03:9b:2b:e4:f6:c9:9b:7b:83:f6:de:5d:
f5:f7:24:5e:c1:1a:bf:ca:e2:c1:38:a1:3f:2c:4c:ce:ff:29:
fd:e8:bf:b8:be:8f:c9:62:db:a3:07:d2:cc:b6:e6:c5:78:0c:
6d:3e:2b:99:bc:c8:41:63:e9:c1:c2:6f:9f:40:3d:a7:df:59:
29:d8:af:56:26:83:33:56:83:6e:7c:6f:bb:6f:21:73:26:7f:
c9:ca:82:15:f4:32:03:52:1f:f3:c2:19:04:12:d8:ec:1b:32:
7b:d1:2f:11:1b:49:6e:42:2a:50:b3:5f:41:f6:e7:3f:a4:00:
ea:1d:21:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:00 2025 by rpki-client