Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
File: TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json)
Hash identifier: 9hUHKZh9LBKNWNkwhl0kdHE/vq/xEC/PXY2NLXRDq/c=
Subject key identifier: 73:19:5F:34:6D:96:F4:31:27:3D:F1:5C:4C:12:6F:4F:91:D7:96:B4
Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Certificate serial: 0194BC04BE1FAABE5E4797E985DEAA2C18AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
Manifest number: 148A
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: O9nHfOl2QVEFkw8z5PZAG-bDmQE.roa (hash: CmUudjBRBoLhGNB6o4EaSfh+UkgJVlz+52jeWbtrV5A=)
2: SzyIBUJURbOXMTDJ4Z_haTgvNpI.roa (hash: wJIDwOiFxDwrE3GURrkhai8iWOYh1f3lI6qeGAaNPyc=)
3: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: IKwodI3w7FE0hVwznPmI7KLHKQz8AkcjaaQCzGXy4qg=)
4: UVW-IEFCCq7ahpPdj9WY7Kn8QqE.roa (hash: MZl++GgZA3uWjf7S8QTsOZZtzVITuzAAAAPegKRXupI=)
5: VIrZrIPn5JgwIWuerakwG37U7jA.roa (hash: +9EBlzR1H7BphSJTPeOlUDa4YDh16MokR5NsBCSFTMs=)
6: dQ4y2x688XsG8rEL7o8Sp4uIl8M.roa (hash: LuvxH8ju8nmShoj6OHN3o8s0V6hBxEddqrv3+BFDAgQ=)
7: gQDaBeXH0szJXrJTEvqe4lIGCV4.roa (hash: fhlImZ1nrh4i7H6LIP2R5ZbAmjbxd5MHcou/l4C25qU=)
8: lPoIPYo1ITlq-R71JXKfxiC_US0.roa (hash: 1ODRbC1wRix1ieOTK6Ku3fYNq0UfGPEvF5Esjd3aqDM=)
9: luug-CwXmvS54qQ88cgMGt-f5zU.roa (hash: HAfj14rHhfvfAv/i1MqUIJYZwmFczeoc01ZA/poLVk8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:be:1f:aa:be:5e:47:97:e9:85:de:aa:2c:18:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=73195f346d96f431273df15c4c126f4f91d796b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:5f:95:05:a4:3f:61:69:53:44:e1:85:73:eb:
eb:91:f8:d7:28:f9:ee:ee:5d:c0:f0:9b:bc:28:9a:
db:95:de:d2:15:df:54:b5:46:ec:ba:88:82:38:69:
fa:db:db:0b:9a:25:2f:12:20:0f:1b:b6:10:f5:20:
6f:c9:d9:48:61:2e:55:b7:31:86:e4:43:87:44:de:
2f:fb:96:77:76:b1:e8:88:42:b9:86:ea:e8:e7:d4:
da:44:b5:da:45:92:83:38:85:e6:b8:ec:90:ee:24:
b5:40:eb:ed:fa:19:8a:24:cb:be:2f:9b:50:ef:f3:
df:b0:5b:a7:80:28:ae:b8:f9:7d:9f:fd:7f:69:c8:
a9:b5:14:1b:19:e7:10:14:01:21:99:18:99:41:a1:
eb:fc:7e:1e:44:34:3b:a8:59:d6:80:ee:28:d7:bc:
7b:20:e3:2d:a4:8c:f1:a1:5e:36:ad:2c:42:1a:f4:
a2:fe:c3:ad:3c:d9:38:b7:bd:52:ae:d2:51:97:0c:
68:b3:fe:10:3d:7d:ec:7e:46:91:4a:db:c3:e1:1f:
de:ce:4a:07:05:66:2d:5a:15:a9:29:e6:f3:c7:96:
3d:3d:a6:c2:ae:49:1a:89:65:5f:36:d8:65:eb:bc:
57:ec:a1:78:8b:d5:37:c7:7e:97:00:9b:07:c7:98:
88:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:19:5F:34:6D:96:F4:31:27:3D:F1:5C:4C:12:6F:4F:91:D7:96:B4
X509v3 Authority Key Identifier:
keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2c:60:b9:05:4e:a3:e1:2e:1c:9a:3d:91:c3:92:29:b0:cd:
c0:00:bf:25:c3:e9:b3:f3:bb:aa:4b:e5:b0:9b:b7:cb:98:02:
a4:0e:11:30:c0:c3:78:fe:5d:59:47:f2:4f:2b:8b:1b:8f:03:
d2:88:65:ac:7d:0f:68:50:9a:73:99:ab:65:50:13:4e:0a:3e:
f7:d3:13:7a:81:01:5b:fb:c2:7a:94:0a:db:2c:3f:90:81:62:
ec:73:57:c5:80:ed:40:78:1a:ed:70:9c:db:0b:6b:2f:4c:81:
4d:aa:7b:a5:78:6e:9d:08:2b:c4:47:f2:d0:4c:83:d4:dc:6f:
7b:9c:f4:1e:d2:d9:18:18:fb:96:0e:b5:ef:0f:2a:9c:01:75:
4d:ca:08:79:72:87:0e:0c:e0:68:ba:1a:57:fc:2f:f1:cd:5e:
e6:0d:b6:50:43:84:3e:9d:e6:e7:3a:a8:7d:f4:33:ae:87:c4:
26:1e:0d:f0:9d:f5:dc:fd:88:b4:5d:21:28:61:a6:a4:af:f8:
c7:84:4f:09:04:25:bf:86:a5:b2:76:52:86:a2:52:c0:02:81:
c6:41:0b:e0:bd:91:bc:af:25:7a:b5:bd:e9:9f:e8:39:40:28:
c6:ee:d6:cc:34:4d:34:12:5f:77:ca:b9:bf:f7:a9:2e:56:a6:
4f:09:8e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:42 2025 by rpki-client