Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
File: tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft (raw, json)
Hash identifier: iG1FVgPI8DmqQnUKPTdi88QQ49ZXa5gByy2mqn3KQ/s=
Subject key identifier: 4E:2D:B3:60:4F:E1:D7:DB:A4:FC:C9:3F:15:9C:DD:14:0E:CD:C7:BF
Authority key identifier: B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
Certificate issuer: /CN=b46320188098520c366277f749a4f77a1d444439
Certificate serial: 0194BD85AAF7F847FC933994E573E6B4F909
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:41 +0000
Manifest this update: Fri 31 Jan 2025 18:00:41 +0000
Manifest next update: Sat 01 Feb 2025 18:00:41 +0000
Files and hashes: 1: 1c-Abo0LxBVDDE4sBrG9JS_ePzI.roa (hash: rxDs0I1CVbIWmreeYb6ePZfwtg9Spev7LU71wCrsp/4=)
2: tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl (hash: 6prXmQCBSRMINsWaaynfhDLCifs1QkIUq0nhCk8NRtw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:aa:f7:f8:47:fc:93:39:94:e5:73:e6:b4:f9:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b46320188098520c366277f749a4f77a1d444439
Validity
Not Before: Jan 31 18:00:41 2025 GMT
Not After : Feb 1 18:00:41 2025 GMT
Subject: CN=4e2db3604fe1d7dba4fcc93f159cdd140ecdc7bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8b:5a:9d:ff:75:e9:99:19:94:e3:b4:a1:29:
89:23:7b:56:81:98:2a:8e:40:62:d4:d7:ca:3b:f9:
9d:09:5c:46:27:a3:15:c8:88:0c:1a:1f:9b:8b:2e:
84:84:93:f6:80:1c:e4:04:7a:07:78:f7:5e:da:6d:
0e:10:53:9c:f7:81:a0:fe:b2:70:40:92:b3:92:fd:
f0:98:94:31:b0:6c:98:04:2b:29:db:d0:92:88:97:
9f:17:27:34:62:b9:8f:c7:ca:4b:91:9b:c8:1d:65:
c5:56:79:9c:0c:5e:e7:ec:37:35:97:ce:8c:53:6d:
ae:c0:4a:89:1c:e6:e3:81:ea:89:7d:7d:ae:56:e7:
47:9e:85:f3:4f:ed:8e:a8:95:4b:6f:f0:e0:09:7d:
06:ec:78:2b:a8:32:03:aa:6f:82:a4:d4:a1:6f:c3:
2f:68:69:d7:92:2b:2a:46:a9:74:97:b6:97:7d:e5:
15:de:ad:0c:42:c1:59:8a:a5:13:07:a2:15:49:2f:
ed:46:c2:92:34:d2:b9:be:8d:e3:5b:70:fe:3d:bd:
b1:23:78:c3:fa:29:e3:70:f5:8c:f7:f1:97:a4:aa:
56:d4:b6:b3:8e:70:5c:6c:e7:59:10:48:85:72:cb:
7f:03:31:57:48:05:cb:4b:94:ee:3b:31:81:56:3f:
6f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2D:B3:60:4F:E1:D7:DB:A4:FC:C9:3F:15:9C:DD:14:0E:CD:C7:BF
X509v3 Authority Key Identifier:
keyid:B4:63:20:18:80:98:52:0C:36:62:77:F7:49:A4:F7:7A:1D:44:44:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGMgGICYUgw2Ynf3SaT3eh1ERDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/4acb83-f940-4766-bca9-608e7d779bc7/1/tGMgGICYUgw2Ynf3SaT3eh1ERDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8a:09:07:f3:55:7a:6f:6e:94:3b:bd:fa:15:da:dc:9b:9d:
55:d8:c5:6e:07:e6:83:aa:8f:2a:ce:4c:20:1d:c1:b0:b3:9c:
ec:51:e4:fb:ff:a6:0c:2a:7d:ff:26:63:33:de:51:d0:84:00:
c3:b6:a2:71:6e:ae:3c:7c:7b:1c:4e:8d:9c:f6:ed:a1:d4:71:
97:6f:c3:0d:38:53:14:ea:0f:52:73:74:1b:54:8f:43:a7:a4:
2e:d9:ce:c6:ec:f1:d0:11:bf:8e:60:dd:cb:49:47:fe:d4:2d:
18:a9:0d:8b:85:89:cf:f7:d2:60:c6:5d:fc:de:94:ae:c3:12:
f3:e0:ba:20:47:24:a3:40:72:cd:b1:e7:ec:89:ba:63:73:63:
b2:47:5d:47:19:3b:2b:5d:cb:ef:66:21:75:63:e8:a2:09:b4:
db:9e:52:23:98:06:74:0d:ac:24:b7:b0:a2:64:df:86:45:7c:
66:35:5d:95:00:ff:ea:7b:92:d1:6f:8f:e7:b0:9e:c9:77:c7:
31:6a:e2:88:41:7c:47:5c:0f:3b:c2:3e:3e:a5:50:b1:66:ae:
d2:ff:f6:5c:0a:97:ed:f1:02:fd:7f:b4:4b:b6:9b:c2:b5:9f:
2a:a3:21:77:7b:a1:b4:39:9b:84:46:2f:fc:bc:8f:0c:6e:86:
41:52:49:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:45 2025 by rpki-client