Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
File: RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft (raw, json)
Hash identifier: 7Y795H6GxP8WaPxLWyNDuAuria441p9t0HVPFr+D+jQ=
Subject key identifier: 3B:DA:33:B2:3A:8F:04:0F:B4:77:28:42:0C:72:0F:2E:A6:9F:7D:D9
Authority key identifier: 45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24
Certificate issuer: /CN=4534cab4450404862b201fe733f2c70a6bf52924
Certificate serial: 0194BC72BA661607C217F2D859D50B294D13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl (hash: fBfz1ATUDRMFiZDB5HzAQb3xDri7yJ/tmdUViiivWvc=)
2: t9aRg7EBYi_eHqwtU6HeqBVRtO0.roa (hash: guaRd+4F8a2eF9Z9YS8nsI0hSSMT45GD3G3ESCtdqNI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ba:66:16:07:c2:17:f2:d8:59:d5:0b:29:4d:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4534cab4450404862b201fe733f2c70a6bf52924
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=3bda33b23a8f040fb47728420c720f2ea69f7dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e7:77:d1:4b:5a:dc:20:b4:e1:5b:d3:ee:2c:
30:0d:4c:3d:70:8a:51:c3:58:bd:9c:e9:cf:20:fd:
0f:b9:cb:44:53:50:5e:95:cd:a1:e2:4a:cd:ed:d7:
d7:79:f9:1b:b9:30:a1:33:42:e2:54:13:dc:df:d7:
fa:fe:f9:a7:24:7b:03:73:b7:f0:34:7f:a9:cf:18:
d2:4e:42:2b:03:b3:72:f9:5e:66:8a:9c:82:8e:c9:
18:cd:34:2f:84:0a:4d:0a:87:b3:85:7f:ae:8a:7f:
88:be:8b:8b:40:99:db:47:3c:5b:09:22:b0:78:8d:
81:dd:ed:30:ee:0d:f8:b7:33:de:47:c5:98:4d:52:
7c:88:a6:90:01:52:cc:b6:80:26:98:19:64:12:ea:
04:12:f5:77:a8:0c:43:8f:a0:ea:73:07:a4:06:9c:
46:02:72:22:2f:29:7b:af:59:ef:06:c0:75:95:89:
0c:eb:d9:aa:f4:35:04:70:9e:ea:0e:6b:8b:f8:6d:
83:b2:21:0c:4d:06:c0:9a:f5:c3:07:d5:cb:f6:c0:
51:81:37:35:f7:89:19:02:4e:5b:4b:04:9c:dd:f4:
63:42:d0:b8:60:e9:48:e1:17:e5:6d:17:ee:79:91:
fb:e7:2f:d6:5b:9e:30:0c:19:5a:c2:e4:ee:60:87:
70:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DA:33:B2:3A:8F:04:0F:B4:77:28:42:0C:72:0F:2E:A6:9F:7D:D9
X509v3 Authority Key Identifier:
keyid:45:34:CA:B4:45:04:04:86:2B:20:1F:E7:33:F2:C7:0A:6B:F5:29:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/5d4678-497c-4740-940f-6b084ea9993f/1/RTTKtEUEBIYrIB_nM_LHCmv1KSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:8a:19:74:a2:0e:05:e2:05:a8:a7:5e:aa:32:2f:7a:8b:e4:
2d:cd:71:6a:69:d3:53:aa:a4:69:d2:fc:db:89:a9:56:45:24:
f1:0d:c0:fe:de:8d:5a:bf:b5:46:60:dc:cf:5c:e8:9e:52:45:
7c:db:9b:c9:f7:a1:e5:9b:14:b7:1e:c5:2d:f5:ad:d6:30:6b:
8d:7d:ac:28:82:e2:01:24:dd:9c:bf:b0:3c:1c:62:9a:32:c5:
3a:a8:fd:01:81:f8:88:b4:2f:78:51:f3:2e:c7:07:8b:2e:c6:
95:11:45:31:00:58:94:a9:f7:39:6a:10:75:0f:06:5a:b7:38:
4e:4b:c0:98:54:c1:4d:f8:f9:a2:c0:8e:ad:af:f7:d2:4f:80:
df:56:a4:3f:63:b2:66:ea:3c:72:d7:2c:4c:ef:02:87:e6:f3:
1a:c1:82:4c:c6:f1:2e:20:00:85:aa:01:9e:ea:bd:04:bd:9a:
e8:59:88:4e:0a:77:1f:cc:8c:e2:83:e8:87:80:92:9a:66:84:
ee:07:6f:df:30:b0:6f:26:72:97:2d:ce:f8:2f:19:5b:d9:02:
31:78:a0:01:ed:17:04:a3:2f:be:b7:e6:1d:a8:dc:27:c3:6c:
c9:13:c9:db:00:b9:d9:1b:bc:55:38:14:0c:a6:bc:0d:c1:60:
e1:ea:f4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:16 2025 by rpki-client