Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
File: T2F9awPi_l-JEcvrX64tyjvWZ38.mft (raw, json)
Hash identifier: q2rHI9gOi+PV926VHn/5t/T+SUoB8OwCfun+TZD9sRg=
Subject key identifier: 39:2C:34:CB:C0:CD:C9:00:2D:EC:CF:6B:91:9B:C5:CF:3B:65:DA:D0
Authority key identifier: 4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
Certificate issuer: /CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Certificate serial: 0194BC72F80C4796CC21A8CEA1090583BFB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
Manifest number: 110B
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: NwaNp5L0RusVDFFM4pIExblfTEU.roa (hash: B2/PCGdwG+WPaQH+f8v2+xUGdjLlo6CPicFBvC+Ii04=)
2: T2F9awPi_l-JEcvrX64tyjvWZ38.crl (hash: m8BvNIxWOAllSWPKo47OtZASqZI60XYRIhqxZtNFb1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f8:0c:47:96:cc:21:a8:ce:a1:09:05:83:bf:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f617d6b03e2fe5f8911cbeb5fae2dca3bd6677f
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=392c34cbc0cdc9002deccf6b919bc5cf3b65dad0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:82:0c:63:a9:38:ec:bb:d9:84:43:b8:c5:4b:
0c:a8:5e:86:fd:42:ef:00:44:9d:56:b1:5c:af:0b:
77:ce:1d:76:b8:6a:77:cd:ff:31:f3:c8:47:22:05:
5a:d8:7a:0f:76:38:43:4a:bf:29:5f:ab:0a:9c:e0:
d1:01:74:c8:16:41:b6:42:48:c7:a5:5a:03:85:39:
04:26:d1:17:ac:6a:13:12:86:1f:56:a5:2b:2d:22:
39:2f:13:c7:26:64:d5:47:b1:bb:4f:30:58:49:bc:
82:a3:5c:00:4d:92:a6:06:87:d6:40:e2:9e:18:90:
35:5c:0b:3f:1c:f8:25:f3:c9:bc:d9:40:00:bb:ed:
ef:28:b6:d0:92:ca:86:90:cc:59:37:82:65:f3:ab:
1c:d0:4a:c8:87:7d:51:88:a0:a1:fe:45:a5:6c:0a:
58:94:87:f6:82:27:11:a7:f4:f7:12:8c:e4:d4:3c:
2e:87:cc:21:91:cf:14:f6:9b:9f:d0:6a:be:06:bc:
6a:c8:57:02:3f:f0:dc:cb:4e:a2:ad:f4:72:09:18:
30:cd:e7:5f:1a:49:12:40:29:0c:64:75:c6:a7:e6:
33:a1:72:2f:8e:28:31:e2:92:71:65:a6:59:a6:2f:
14:b2:f9:90:46:95:02:c8:56:26:37:8a:ad:a7:e6:
09:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:2C:34:CB:C0:CD:C9:00:2D:EC:CF:6B:91:9B:C5:CF:3B:65:DA:D0
X509v3 Authority Key Identifier:
keyid:4F:61:7D:6B:03:E2:FE:5F:89:11:CB:EB:5F:AE:2D:CA:3B:D6:67:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2F9awPi_l-JEcvrX64tyjvWZ38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/1b1272-83c1-4864-9cd3-027c7f7dc6d5/1/T2F9awPi_l-JEcvrX64tyjvWZ38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:c6:0d:8e:e1:e9:d9:d0:41:9f:53:53:76:c9:20:43:e0:04:
51:7c:9a:5b:e1:8a:23:ac:3d:88:1d:3f:1f:52:47:06:02:be:
8c:60:9b:55:65:6a:9e:35:cc:a0:6a:eb:5f:2c:0d:b6:70:39:
7e:ef:15:d4:96:d1:c6:c6:90:2b:a0:15:e1:a8:f9:83:bc:e7:
b4:97:53:97:f8:a8:f9:13:40:67:50:86:61:45:77:51:fa:68:
3c:8c:90:0e:eb:59:bf:60:22:60:fc:6a:06:e9:c3:62:35:e3:
1d:04:97:c1:16:42:e9:4b:23:82:11:a5:58:78:da:44:26:aa:
0e:cc:67:4f:43:00:60:63:2f:dd:46:7d:26:03:b5:15:e2:e9:
df:7b:50:85:f4:9f:65:b5:e9:6b:df:e8:01:82:54:11:ec:a5:
d6:ce:76:69:ad:8c:65:76:88:7e:f4:1d:a4:ea:bb:bc:11:1c:
c2:b6:41:a9:e7:e2:62:a3:a7:85:bd:67:58:56:51:12:d9:0b:
15:ab:5d:30:54:cb:b8:89:fa:42:c6:e2:62:be:9b:f3:1a:39:
62:d1:69:30:13:4d:d3:fe:f7:49:4c:f2:64:1f:b4:87:c2:73:
74:11:47:ca:8d:61:e3:89:6b:17:1e:e8:f0:4e:a2:c7:b4:bb:
61:16:a8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:13 2025 by rpki-client