Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
File: tQJsmXQJLiIFQkASgfm9_TVsKEI.mft (raw, json)
Hash identifier: FS/NFOJy2usc0BeIMQKxOKg98iQYdcFM3D89ZB8sowQ=
Subject key identifier: 10:75:1C:9B:38:53:F6:AB:CA:4B:9C:8D:54:E1:DD:70:A8:EA:85:D0
Authority key identifier: B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
Certificate issuer: /CN=b5026c9974092e220542401281f9bdfd356c2842
Certificate serial: 0194BD1777601CE967E77A9CC9F2258C5CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
Manifest number: 0617
Signing time: Fri 31 Jan 2025 16:00:19 +0000
Manifest this update: Fri 31 Jan 2025 16:00:19 +0000
Manifest next update: Sat 01 Feb 2025 16:00:19 +0000
Files and hashes: 1: JyF5UhD9cVqjqquiR-hK995tZzw.roa (hash: 5AXS3YhQ0/Ke6SUL+/AhBjypj7cC6zgjHgX8v/ujINo=)
2: pTQKkEXtOvhz7EuIYUqt-o1qzFk.roa (hash: OW+foSbaeoc9zsDW/uMWemQINFvQAo39Gw9c3A0iOPI=)
3: tQJsmXQJLiIFQkASgfm9_TVsKEI.crl (hash: mp+uWzQkkKKYZyB6fEKDefunnWdA6ySogi49HoHE/Xg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:77:60:1c:e9:67:e7:7a:9c:c9:f2:25:8c:5c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5026c9974092e220542401281f9bdfd356c2842
Validity
Not Before: Jan 31 16:00:19 2025 GMT
Not After : Feb 1 16:00:19 2025 GMT
Subject: CN=10751c9b3853f6abca4b9c8d54e1dd70a8ea85d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e5:8b:b0:88:23:81:34:70:b0:b1:ad:54:ee:
7f:0d:1e:24:f8:74:85:81:70:13:b3:75:1b:40:be:
c7:fc:da:2a:a8:02:97:17:93:2a:ce:d8:e1:fb:85:
65:32:9b:00:c0:2f:93:2a:42:fe:93:45:5d:00:34:
8a:ef:30:3a:18:18:25:28:22:98:81:67:4c:ca:1a:
50:de:06:58:3a:51:5f:b4:87:23:21:7b:74:66:17:
8d:71:6f:7a:0b:5a:4e:75:31:e0:ea:e1:42:c3:87:
18:2f:1a:3c:a3:7a:3d:48:16:fc:c7:d1:ce:1f:22:
73:65:ca:df:c0:6f:a4:d3:2a:1f:a1:6a:74:27:13:
68:26:b8:7b:18:66:ba:db:aa:95:a2:87:83:f2:d7:
c2:d8:8f:79:d2:1c:90:f6:99:a3:70:9c:d8:27:69:
ed:f0:ae:43:9d:bc:aa:cb:6b:e1:03:9e:c0:bb:53:
dd:b4:df:00:53:76:41:b7:d3:65:7b:0a:0e:73:1e:
6b:f3:dd:07:6b:6e:d1:54:d3:16:7a:a6:49:eb:36:
3e:f9:ec:e0:da:92:47:3b:22:9d:73:f4:8c:ef:4a:
32:50:42:0f:2f:9e:08:bc:29:84:9c:ec:fc:61:37:
8e:60:ba:33:10:7c:12:15:a0:10:be:c1:c5:0b:85:
f6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:75:1C:9B:38:53:F6:AB:CA:4B:9C:8D:54:E1:DD:70:A8:EA:85:D0
X509v3 Authority Key Identifier:
keyid:B5:02:6C:99:74:09:2E:22:05:42:40:12:81:F9:BD:FD:35:6C:28:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQJsmXQJLiIFQkASgfm9_TVsKEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/af6232-a4f5-4244-9436-eea267a58494/1/tQJsmXQJLiIFQkASgfm9_TVsKEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:50:bf:41:ba:05:3e:7d:16:cc:ec:1f:2c:51:d2:75:5b:0a:
67:31:62:d3:8b:56:d7:2f:37:4e:37:db:4a:a3:c8:4b:01:4c:
2b:68:17:03:6a:00:ee:ab:0f:93:58:05:51:7c:76:b1:ce:2b:
64:46:bc:fa:ab:dc:68:0e:22:de:4a:dc:41:44:a1:9f:3c:07:
b3:fe:3d:af:fb:54:04:71:84:65:11:b8:7b:c0:4f:d6:c1:d9:
e3:28:f0:05:d2:0f:bc:14:0f:18:7e:7d:81:f9:00:bc:13:f2:
eb:2a:fd:31:72:b6:d0:da:42:1f:c6:5f:b2:e0:b7:79:da:17:
57:6c:7e:73:7c:4c:01:42:50:a7:b4:17:6d:bb:fe:8c:c3:a6:
66:0f:fa:50:b6:2f:ef:aa:40:a3:4f:5e:eb:9b:0f:c2:65:3e:
af:8e:f9:32:d0:dc:d0:97:f3:f4:bf:e2:91:ea:5a:93:7f:dd:
f1:17:f6:44:24:92:91:f0:79:1a:7f:11:9f:0d:95:e4:dc:69:
99:db:e0:e4:35:ed:14:ce:ae:48:41:e5:bd:97:31:c1:c8:db:
a6:46:93:42:88:97:f0:bb:07:6c:91:cb:18:7b:a9:57:22:29:
be:7d:83:4d:ff:55:43:95:c7:ea:2c:af:0e:72:f4:16:f6:57:
81:1b:d4:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:09:54 2025 by rpki-client