Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
File: geTmB1l46pR2tkHOAIx4erKOXRM.mft (raw, json)
Hash identifier: R4th2pEBp4c+/zBuKJ61uBKL2woLwf0MFSStn1cys70=
Subject key identifier: 0C:56:87:3C:97:0E:F3:AA:D7:C5:F3:11:88:98:D6:69:EA:B9:B5:B9
Authority key identifier: 81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
Certificate issuer: /CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Certificate serial: 0194BC7315198A91C6C53F44677D0BDECDA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 13:00:46 +0000
Manifest this update: Fri 31 Jan 2025 13:00:46 +0000
Manifest next update: Sat 01 Feb 2025 13:00:46 +0000
Files and hashes: 1: dBbI1Z81Mloa7W2OzhoKXchOrRQ.roa (hash: cFMz5yq3xJCpOCH1TXFzmCMMTxw6N/8cLdoB9ZDvza0=)
2: geTmB1l46pR2tkHOAIx4erKOXRM.crl (hash: SWH633QvukE7aHan6qdzJ+pcwvFusY6+Hc4b/AoMat8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:15:19:8a:91:c6:c5:3f:44:67:7d:0b:de:cd:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e4e6075978ea9476b641ce008c787ab28e5d13
Validity
Not Before: Jan 31 13:00:46 2025 GMT
Not After : Feb 1 13:00:46 2025 GMT
Subject: CN=0c56873c970ef3aad7c5f3118898d669eab9b5b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:c0:ee:e8:35:51:cf:cf:e3:ce:f2:4d:ce:
53:6f:2d:a7:84:7a:55:a9:53:24:3c:a5:aa:16:ea:
86:d0:19:a7:06:2a:f8:7a:a3:e1:ca:ba:c1:c0:65:
ca:34:7d:4e:60:b8:4d:ef:6a:c8:0c:ca:df:46:a3:
38:95:77:55:6d:c9:43:ec:54:3a:32:31:dd:7a:b2:
fb:44:dc:9e:f4:71:45:48:3f:ba:1a:10:28:a9:2a:
07:ae:54:c2:3f:ec:27:69:c0:9b:6b:f3:e5:83:45:
03:9e:2f:e9:8a:3f:1e:86:c5:6a:86:d9:85:c0:2b:
be:a6:39:41:66:4c:b0:d5:5a:3a:85:b9:2f:c5:a9:
76:73:9c:d6:bb:af:32:cf:c7:7b:13:c3:b2:e5:ad:
6f:2e:bf:b7:21:76:04:3b:8e:b7:f9:e3:05:8e:6d:
d2:a3:85:1f:93:7a:8e:18:f9:71:8d:83:0c:93:e2:
c7:49:cc:34:e7:9c:3e:ad:07:a1:09:4e:22:37:88:
c1:01:63:4e:00:b3:cd:a2:cc:61:fe:97:91:af:1c:
68:c0:9e:7e:2a:12:6b:0d:1b:37:b4:e6:9e:c6:a9:
00:09:f7:26:a7:3b:29:6c:80:b4:89:94:5c:60:47:
50:57:33:a2:fb:01:d6:a7:a3:d1:f3:9c:fd:72:58:
26:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:56:87:3C:97:0E:F3:AA:D7:C5:F3:11:88:98:D6:69:EA:B9:B5:B9
X509v3 Authority Key Identifier:
keyid:81:E4:E6:07:59:78:EA:94:76:B6:41:CE:00:8C:78:7A:B2:8E:5D:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geTmB1l46pR2tkHOAIx4erKOXRM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/793709-ee58-4f76-b308-862b86b6e642/1/geTmB1l46pR2tkHOAIx4erKOXRM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:1f:b7:f7:fa:4c:11:d4:72:c8:cd:9f:2d:cc:30:04:9c:ce:
03:e3:16:17:98:ee:33:f5:ff:0a:92:60:87:62:5f:ec:be:e1:
e7:60:d9:1d:86:d9:2d:7f:44:fd:b2:e7:33:5d:51:45:53:f7:
31:0c:2f:41:eb:87:32:12:0b:79:f3:52:74:80:9a:a8:16:dd:
7d:77:31:02:c7:66:04:b1:f0:1a:a4:86:d5:df:43:e5:a8:1b:
00:c3:a7:89:02:af:3f:ba:89:88:1e:68:2f:f4:3d:9f:5a:62:
bb:cb:f3:b4:5d:c6:9d:6d:72:a0:e3:a9:80:e2:55:ed:80:37:
aa:46:fb:03:57:a9:64:02:b8:4b:99:16:a2:f9:3a:b0:5f:e6:
3b:f3:39:b2:33:5e:e8:f5:9f:8a:22:71:f5:24:a0:5d:0c:ff:
d0:87:91:43:95:af:2c:78:38:67:2f:5b:79:30:17:d0:f8:48:
65:3d:f6:c2:22:da:dc:69:0d:ee:4f:41:c5:31:8d:25:a4:bd:
9f:3a:e1:63:49:99:f2:ae:e5:d2:42:40:a6:f0:b5:d6:89:bc:
88:b1:7b:82:dc:36:6a:ae:c1:b5:c1:e2:e1:cc:24:94:c4:8d:
88:2f:a3:c6:5e:7b:e6:af:be:f8:fc:85:80:72:c9:5d:6e:97:
ca:59:37:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:18:22 2025 by rpki-client