Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
File: tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft (raw, json)
Hash identifier: z9OjTIHVg9Bhit4KEbsPzy+CNIQk2dKk/ilUJADF3Ck=
Subject key identifier: 1E:B1:34:BD:B7:E6:D0:D0:73:EA:35:DA:53:C6:5D:DB:D3:5E:1D:1F
Authority key identifier: B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
Certificate issuer: /CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Certificate serial: 0194BBCEA91F40BEB30BB0237D90D0C48AB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
Manifest number: 06C8
Signing time: Fri 31 Jan 2025 10:01:10 +0000
Manifest this update: Fri 31 Jan 2025 10:01:10 +0000
Manifest next update: Sat 01 Feb 2025 10:01:10 +0000
Files and hashes: 1: Tj8ieaPk-ZVdznj4QGZQsDa6PTU.roa (hash: rpKu+SpVkA4o9g3c9SIuQedHFHqzu4mcB4TaNuy/SKw=)
2: tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl (hash: f5z7mZ5c3SyAp4l1uBczy+kBTOOlB95Tbs/uZzkb1m0=)
3: uWZIzr5sI_obeqk4P_AP6Hrzzsc.roa (hash: Ao6L2xVS/ORm+dRe6MtZy2PpenoZKqpKXENIdtVG26s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a9:1f:40:be:b3:0b:b0:23:7d:90:d0:c4:8a:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56a8c91ad31745ff727da0482ede1b2fab462e7
Validity
Not Before: Jan 31 10:01:10 2025 GMT
Not After : Feb 1 10:01:10 2025 GMT
Subject: CN=1eb134bdb7e6d0d073ea35da53c65ddbd35e1d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:6b:c8:2b:44:88:b1:ad:2a:88:cf:a9:fc:
93:04:85:b7:29:d4:e6:af:45:29:24:e3:47:84:e7:
95:0c:13:73:e9:34:cf:95:d9:f7:d0:fd:aa:a2:d2:
e3:7d:29:17:58:37:34:67:05:f5:ac:d7:49:36:c1:
74:9d:6d:3f:60:33:4c:28:38:67:6e:73:7e:ff:15:
11:7e:b5:0c:14:81:fc:75:43:aa:e9:c2:e2:e2:ff:
56:d6:98:cb:ab:9d:21:a3:3a:d3:7b:d9:fd:1e:64:
86:20:e4:83:b2:f7:bd:de:0e:10:26:9a:6b:23:6a:
26:3e:64:eb:d9:f2:40:f1:6b:60:1b:8b:e4:5a:02:
2f:df:57:e6:ea:d4:5a:ea:19:cc:80:22:61:59:5d:
b2:0d:40:85:8d:57:6d:cf:8d:e8:ed:fa:32:cf:48:
8d:60:c8:2b:8f:99:56:9e:86:bd:a1:b9:f5:42:6c:
38:3d:19:68:ce:38:d5:31:e5:24:ce:f8:f0:75:fb:
75:8a:af:7a:7a:4b:80:ca:6f:62:be:2f:89:0e:e3:
8d:28:c4:63:44:86:d2:6f:a8:de:6d:3a:77:3d:11:
07:52:25:d1:26:53:9f:ae:76:26:30:44:c1:d5:79:
4f:c1:f0:07:89:49:2c:6c:61:b6:94:c6:98:4d:6b:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B1:34:BD:B7:E6:D0:D0:73:EA:35:DA:53:C6:5D:DB:D3:5E:1D:1F
X509v3 Authority Key Identifier:
keyid:B5:6A:8C:91:AD:31:74:5F:F7:27:DA:04:82:ED:E1:B2:FA:B4:62:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWqMka0xdF_3J9oEgu3hsvq0Yuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/35ff32-a687-4f50-969a-98648901688f/1/tWqMka0xdF_3J9oEgu3hsvq0Yuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:e5:cf:96:18:c0:8f:26:ab:92:b4:6e:c8:7b:c5:d8:67:b1:
b1:5b:9a:14:e3:b6:a4:3e:4c:eb:b6:83:ba:43:b9:06:a7:07:
42:1d:1e:8d:8e:51:fb:d2:90:75:4a:f8:4d:d0:7d:79:00:05:
50:b0:7b:8d:18:e9:45:33:35:1b:1a:31:64:65:01:5f:e7:db:
0f:c6:51:6a:91:e9:68:4f:b3:6b:6f:96:52:ec:9d:a5:30:15:
e1:97:31:86:f1:3a:44:b2:e2:ce:33:d7:6e:37:1a:c7:08:d1:
2b:13:7e:39:87:76:bc:ce:96:51:2d:7b:d3:22:eb:18:15:48:
92:d9:de:d7:92:ed:44:55:1b:81:70:f5:92:ad:57:79:e8:db:
4e:5c:58:73:a5:bb:18:67:d2:3a:b8:c5:94:d5:57:60:d2:24:
b2:9b:87:5f:53:d5:5f:97:e3:ea:42:36:49:b1:9d:c9:e3:a6:
06:4f:38:26:88:2d:0c:ba:49:d9:4a:a8:56:a4:94:d4:89:1f:
3b:b6:4b:66:60:dc:7d:c4:95:e2:05:bd:56:ff:ae:14:4b:a0:
be:6b:7d:b7:70:59:5d:ac:47:8e:dc:e2:60:06:e3:2a:f9:4f:
ec:7a:12:2d:ad:3e:02:24:28:5f:4b:a9:2a:0c:65:e7:6e:58:
a9:a2:51:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:10 2025 by rpki-client