Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
File: t6hswzTG4Oq4PyUr2D7ulWklykA.mft (raw, json)
Hash identifier: CLr6G17T3K9dgZtREtYJYA/H4B+wBjGoIeKlkl02kCs=
Subject key identifier: D0:71:80:82:49:82:D1:79:8D:67:A8:6E:BF:B0:F2:12:46:B4:B9:ED
Authority key identifier: B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
Certificate issuer: /CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Certificate serial: 0194BC3C9438D01E5C51ABA7B5281C7DA521
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: YDZQqJLg6f9-JdbHT4bYmgUJjh0.roa (hash: cInsk0zvLYwt9OlQZPLFwtQxycESn1Vx2ttrJFC0hi8=)
2: t6hswzTG4Oq4PyUr2D7ulWklykA.crl (hash: hZxuuVCXOHshMXSyYM3BrduhOj0ynK8AEJetutTMl4g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:94:38:d0:1e:5c:51:ab:a7:b5:28:1c:7d:a5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a86cc334c6e0eab83f252bd83eee956925ca40
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=d07180824982d1798d67a86ebfb0f21246b4b9ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:a4:63:25:15:61:45:69:ce:22:5c:b7:9d:f6:
96:fd:fa:aa:b7:e8:f9:d4:cf:63:1d:92:19:c0:42:
72:ac:1c:2d:50:33:ef:c7:f1:de:7d:56:80:db:7b:
7b:c3:c9:7d:86:2f:46:fb:5e:93:3a:9b:90:eb:a9:
ae:7f:1b:28:5c:5f:80:b4:3c:32:ab:ab:66:f7:e3:
ee:de:09:e9:06:0f:d5:ec:77:6e:09:f8:1a:1b:2f:
64:b4:82:20:b4:91:f2:f5:d0:aa:e4:e6:37:0e:0f:
8d:1f:ee:9e:ad:c6:49:b1:ed:f9:2e:01:10:b3:4b:
dd:35:e9:a8:12:73:43:f1:2e:a8:2a:b0:76:44:d7:
fc:83:b1:c1:e0:50:66:4f:b5:41:03:43:c3:6d:9e:
36:0b:d9:d1:b6:22:7a:4f:42:f4:14:c1:9e:85:1c:
d8:64:46:fa:b3:17:8a:c4:82:01:42:e1:09:18:d9:
80:fc:9c:7e:99:2f:c6:43:e0:1b:cf:a7:29:d1:b7:
61:63:09:e6:82:4f:48:38:2a:22:bf:f8:c3:c9:c0:
3e:24:62:c1:c5:db:18:6d:f9:61:37:e6:f6:b0:9a:
7c:c9:57:24:43:2a:90:37:1f:fd:5d:ae:40:4e:45:
df:a9:3d:c9:63:47:4e:cc:0f:86:a5:21:2f:c4:66:
07:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:71:80:82:49:82:D1:79:8D:67:A8:6E:BF:B0:F2:12:46:B4:B9:ED
X509v3 Authority Key Identifier:
keyid:B7:A8:6C:C3:34:C6:E0:EA:B8:3F:25:2B:D8:3E:EE:95:69:25:CA:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6hswzTG4Oq4PyUr2D7ulWklykA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/5036be-138b-442e-963f-57cd72957b89/1/t6hswzTG4Oq4PyUr2D7ulWklykA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f2:db:b1:2a:8b:5b:1e:01:eb:0e:8b:e5:33:62:91:e8:8f:
eb:cd:03:bc:43:94:00:84:2f:87:e5:bf:db:64:ef:03:99:6b:
1c:ec:3d:3a:28:a4:55:0a:d9:39:9c:e1:4c:74:bc:43:c2:e4:
a6:5c:15:29:83:6d:7c:38:3d:92:d3:3c:72:73:25:ad:e3:c0:
b5:b7:13:5e:e5:95:8c:18:3c:d1:b5:ca:95:f2:24:e0:fb:78:
b5:93:b9:05:81:bf:c1:30:af:b9:54:ac:fb:d8:65:a6:97:bc:
95:d8:58:3f:96:92:19:4a:d5:18:44:e0:13:1a:19:e6:26:ba:
14:23:86:d0:82:5e:7f:39:4e:c7:37:2d:4d:b9:fd:60:8b:61:
f4:dd:f8:42:6d:03:0a:74:8e:1d:47:37:e1:d1:e3:5f:df:42:
ad:b8:be:31:6b:1f:ed:5e:f3:65:64:24:ea:58:d9:7e:64:b4:
5c:3d:e1:e4:51:f7:cc:2b:9a:ce:4f:80:71:8e:26:9c:3c:ee:
06:24:6c:e3:d3:1d:81:5b:c4:c8:77:10:84:08:c5:ba:09:9f:
06:0c:e0:2f:bf:ad:f9:6b:b6:41:87:66:69:92:ff:55:aa:dd:
c2:b0:c3:bb:a3:96:47:2c:87:6c:0b:99:6f:e8:eb:96:1a:ad:
e2:2f:36:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:41 2025 by rpki-client