Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier: 5XBszaL8CO+FYUPlijVphugorVLUs4c/LXxwfFzOyuw=
Subject key identifier: EC:C1:9F:43:34:79:9F:56:44:D1:00:72:70:30:1D:76:C7:F1:16:17
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 0194BD85B50843486A16F424E82A3162D774
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: bCO5bqFLQTtaSqSwTRLhrpm3wCA.roa (hash: xHiR4ALGk4+cM6JODCM19LWc7pantvAdvK3viET0qj4=)
2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: vtUjjgEvx70WZzZtabGiBFlC6M7FK8OrbT0z7QPSP+g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b5:08:43:48:6a:16:f4:24:e8:2a:31:62:d7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=ecc19f4334799f5644d1007270301d76c7f11617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:d4:81:14:17:04:ae:1b:97:78:3e:04:4a:e4:
a3:4e:a0:38:70:77:e4:55:05:1f:04:0f:cb:2d:9e:
ff:4f:df:d6:45:7d:0d:8c:40:23:40:ab:0c:5c:4c:
bc:a6:55:0b:ff:a4:ee:ca:0b:00:e8:ba:08:e4:f5:
c4:84:b8:fc:70:ca:85:1e:13:8a:b5:9a:f4:1e:35:
09:2a:46:ea:f2:2c:66:7a:54:59:ef:31:b4:3d:89:
f5:3c:cc:ef:6b:23:89:9f:51:bf:c2:28:51:4b:53:
d4:a1:b2:c1:8e:aa:13:44:4c:66:b2:93:af:99:e5:
b2:cc:bb:28:4e:9b:85:34:5d:be:99:9c:8b:dd:a2:
5d:7a:81:9b:52:32:d8:ee:4f:91:3a:da:1f:b3:99:
c3:17:68:a5:a9:06:f9:cb:84:2c:20:c7:bd:25:f6:
37:a0:ee:5c:e6:2a:ab:9e:d9:9b:c9:a6:44:23:c7:
97:12:78:01:50:dc:b5:12:96:5b:cf:d2:76:c6:ff:
15:c9:ab:7f:ed:d0:25:fe:b4:f8:a2:30:d6:f9:e4:
5b:f2:db:bf:5e:09:49:c6:ce:9f:b0:b5:50:b8:06:
81:3d:d8:57:6b:15:f3:8a:99:fb:ed:09:5c:97:1b:
cc:ec:10:4e:3b:44:bd:4c:c7:c7:fe:ba:53:ac:20:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:C1:9F:43:34:79:9F:56:44:D1:00:72:70:30:1D:76:C7:F1:16:17
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:11:23:f4:97:61:f0:eb:de:a3:53:c8:34:90:d1:38:f8:8d:
28:66:c9:59:c8:64:87:fb:ec:a3:05:5f:00:ea:4d:e3:ac:64:
1e:1d:0f:20:d0:53:4f:17:4e:fc:03:57:0e:de:17:85:8d:18:
b2:42:95:55:56:1e:37:09:90:4b:dc:e8:76:93:c9:6d:e3:84:
70:01:e6:e9:01:65:cb:91:7f:8f:e9:3c:bf:79:61:ef:de:a9:
04:b7:0b:c2:72:58:b7:26:de:95:b4:f2:20:18:b8:51:af:bc:
c6:ee:c4:27:fb:4a:42:90:0f:b7:b3:df:dd:56:ab:57:79:e0:
94:6a:8b:9d:6c:48:7f:18:c4:37:ae:de:ea:10:75:fb:8e:42:
7c:f4:e3:fb:f2:29:b9:bb:4c:fb:ed:de:1c:65:5a:6e:1c:44:
94:0b:c2:20:4a:0b:1e:79:1d:a7:12:e1:c7:b7:33:32:7e:04:
8f:e5:71:23:8e:95:b1:31:c0:ad:87:5f:df:51:c6:5c:c3:17:
76:19:9e:a8:a0:44:a6:fa:63:a3:6a:54:0c:59:0d:55:7a:a1:
fc:32:bb:75:8e:db:99:91:3c:21:40:7a:74:19:a0:40:da:81:
78:cf:3e:94:38:39:cd:39:90:29:2e:06:3d:d2:ee:3a:c4:ca:
f7:01:1e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:18:36 2025 by rpki-client