Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
File: tUcxKN5Ul222LZvRYU53xD3uObU.mft (raw, json)
Hash identifier: 8z/8CDuXRm5vt10hG4fPK1e9xpOy0OmJVypcPnTiaOc=
Subject key identifier: 22:59:86:8F:46:46:66:44:06:83:AE:FF:E3:E1:9B:8A:6F:09:93:DA
Authority key identifier: B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
Certificate issuer: /CN=b5473128de54976db62d9bd1614e77c43dee39b5
Certificate serial: 0194BBCE01E46F10CA0F57EAC9BDF079A467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
Manifest number: 1101
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: WT51Xxp6wSpnMPjyEAyyUhxOXPk.roa (hash: GG3W3sv/8g51OizpERxg8YmbMm76mWXeFGoFM/wpQ9M=)
2: tUcxKN5Ul222LZvRYU53xD3uObU.crl (hash: 8LnClb52sbS5TZrkFtMhDoDfu+kOMehWPprbSdnLDt8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:01:e4:6f:10:ca:0f:57:ea:c9:bd:f0:79:a4:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5473128de54976db62d9bd1614e77c43dee39b5
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=2259868f464666440683aeffe3e19b8a6f0993da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b0:68:58:0c:68:47:c8:29:99:42:3f:09:9d:
85:55:fa:b1:bf:18:81:84:0e:c6:e0:72:47:55:75:
03:01:9f:49:10:8b:06:70:e3:21:6a:d3:97:3e:95:
5c:8b:99:f3:0f:af:fc:00:9f:47:0c:17:46:3d:80:
04:ce:86:4c:61:5d:5c:d3:85:9b:55:98:21:99:71:
69:84:93:3a:ce:60:fd:58:6b:f0:db:44:70:79:ae:
24:a4:21:71:83:ec:20:27:f3:ba:03:40:08:4d:e7:
c8:a9:37:8e:eb:3a:0f:da:9d:a3:99:df:73:02:e0:
33:de:13:61:00:34:e4:69:fe:22:f4:57:4e:e2:8b:
d5:89:cc:54:e8:a9:c4:f6:e0:7d:a8:6e:22:12:35:
31:e2:b1:ca:da:fd:50:39:44:0d:8a:30:90:01:b3:
6d:31:21:90:18:e4:26:6e:b9:fc:77:a8:7d:25:6b:
be:c4:c0:56:fa:e4:bd:99:d5:ba:28:85:e0:00:6b:
a5:fa:14:c1:91:0a:7c:5d:db:f8:55:96:ab:7c:10:
18:ae:8c:1b:71:22:17:6f:e1:1a:62:be:2c:62:0b:
01:1a:5b:0b:7b:bb:9f:ad:fa:7c:20:33:d5:8a:3e:
f9:02:40:78:92:2c:c3:19:29:d9:1d:77:ad:2c:f4:
c2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:59:86:8F:46:46:66:44:06:83:AE:FF:E3:E1:9B:8A:6F:09:93:DA
X509v3 Authority Key Identifier:
keyid:B5:47:31:28:DE:54:97:6D:B6:2D:9B:D1:61:4E:77:C4:3D:EE:39:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUcxKN5Ul222LZvRYU53xD3uObU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/70de80-50e9-4c1d-a7b4-e904318342ee/1/tUcxKN5Ul222LZvRYU53xD3uObU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:87:49:07:78:94:c3:8c:68:7e:cf:99:96:0a:a2:15:0a:c7:
03:56:41:4e:de:18:b7:b8:f2:d8:2b:e5:8e:04:dc:d7:a3:0a:
1c:92:98:58:39:b9:a2:6a:4c:1b:4e:d6:fb:6c:65:45:b4:ed:
84:0f:6a:4e:5d:53:42:8b:f6:76:01:bb:ed:8c:59:11:63:d7:
6a:11:8e:a6:6b:4f:ff:42:24:12:e8:58:73:5d:cd:e0:31:36:
9d:92:5c:d4:02:1f:91:cd:68:3a:d0:54:5b:41:be:cd:d4:f6:
42:df:19:90:d3:fe:ff:c8:49:bd:78:4c:03:a2:e9:44:f0:d4:
33:16:98:ef:04:5b:c1:8d:9b:fc:4d:f9:75:c2:fb:c7:fc:43:
2a:e7:2f:4e:37:e3:a3:f8:37:d6:ee:0e:0c:0a:e7:25:a7:4a:
c3:d4:65:7b:92:d8:91:30:c2:09:c2:de:35:67:fc:8c:86:e1:
bd:e0:1c:28:34:ff:4c:5b:27:81:59:72:10:6f:d9:d7:5a:7d:
c2:5c:c0:86:d1:f0:fc:41:77:56:5c:48:74:cc:7e:72:ad:f1:
05:3a:74:2d:07:29:aa:14:bb:0b:19:b5:bf:7c:ac:27:f4:f2:
94:5a:da:ee:70:8e:73:45:0d:e3:58:5d:e3:f2:50:7f:41:b5:
04:1b:fa:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:36 2025 by rpki-client