Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
File: tEJc9VATRKxazDB6vQrwE_rGcHM.mft (raw, json)
Hash identifier: xCgHR1HfWflMdvQH8vRpd1/EAZG1wqahfMZsoeG++kI=
Subject key identifier: 91:CC:5E:97:66:B0:62:CD:22:B4:3E:7F:30:26:B5:C2:05:D8:B6:92
Authority key identifier: B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
Certificate issuer: /CN=b4425cf5501344ac5acc307abd0af013fac67073
Certificate serial: 0194BC3C1B2E3046A47B7B20AF67BA61A061
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
Manifest number: 1034
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: iP514Grfm7HoMaMSlriqRZUp57w.roa (hash: uxTzsQkoKG+2gHXofBTy3Sd+QDMMkyYiw3WNGMp0rf8=)
2: tEJc9VATRKxazDB6vQrwE_rGcHM.crl (hash: o5X7hucbudU+mppuK/AeXC4NN1JjlSYDYz2QMGgKAOw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1b:2e:30:46:a4:7b:7b:20:af:67:ba:61:a0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4425cf5501344ac5acc307abd0af013fac67073
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=91cc5e9766b062cd22b43e7f3026b5c205d8b692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:27:1d:a3:3d:dd:49:36:85:14:cc:42:c7:ff:
78:ff:bb:65:30:ea:4b:21:4d:a5:fc:2e:61:4d:98:
e6:59:1d:9e:0f:cf:3b:42:7f:61:6c:1a:c9:69:4f:
fc:c4:18:f6:30:49:8d:92:7c:cc:8b:3c:65:30:76:
77:ec:3c:fb:38:95:2c:e2:e9:f0:67:d8:f1:d4:9d:
2a:9a:e2:db:33:23:a3:3d:ba:a2:e3:74:31:3d:37:
ac:e5:c0:44:87:ee:bb:05:88:30:cd:3a:dc:2b:2c:
08:80:ee:97:a1:59:d0:a8:43:db:fc:4d:6e:e7:e8:
7f:2a:72:c7:9a:c7:06:d3:85:5b:3a:76:77:66:f3:
7e:a5:ce:69:d6:5b:49:c2:84:f0:9e:ca:c9:fa:cb:
15:61:2c:43:6d:97:c7:12:eb:4e:f3:78:17:e3:7a:
4e:60:d1:97:31:16:b5:42:fe:33:9e:40:1e:ba:b3:
68:65:5b:1b:ff:1c:a8:3f:eb:92:21:54:9a:ab:a0:
61:01:fd:53:88:6b:4d:9f:d0:f1:18:43:a4:e1:6f:
7d:37:48:b5:e1:7d:6f:24:3b:0c:68:2e:57:e6:f0:
bd:56:e2:1f:34:30:35:04:53:14:00:27:65:e2:a8:
15:ad:14:0e:83:41:e6:8e:64:62:0a:a6:bf:a0:d6:
e3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:CC:5E:97:66:B0:62:CD:22:B4:3E:7F:30:26:B5:C2:05:D8:B6:92
X509v3 Authority Key Identifier:
keyid:B4:42:5C:F5:50:13:44:AC:5A:CC:30:7A:BD:0A:F0:13:FA:C6:70:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEJc9VATRKxazDB6vQrwE_rGcHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/6ac0a2-5c6c-4357-97e4-ceb8ab6d112e/1/tEJc9VATRKxazDB6vQrwE_rGcHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:89:7f:f7:12:dd:37:d5:fd:1a:65:89:89:ab:d9:c3:f9:cc:
91:df:ad:27:ba:52:94:8c:ef:1a:fa:63:af:82:fd:09:63:5f:
28:9b:b7:ea:38:2f:cc:36:a2:ae:2b:61:63:e1:81:ba:2c:85:
ce:b1:7b:ed:02:97:b8:d8:69:43:26:e1:93:7f:cb:af:73:53:
ac:10:c2:a0:e5:ba:82:0b:88:84:d6:7e:ea:eb:eb:a2:48:a1:
36:cd:27:a6:42:7f:49:5a:49:ca:d6:47:83:c6:18:57:a2:b3:
62:98:ab:90:bd:9e:a2:38:3c:3f:b0:26:0a:87:7a:2d:60:63:
15:50:75:0f:2a:9b:66:b6:c1:6e:4e:52:1b:2b:d6:b3:30:55:
3c:0b:38:aa:ac:72:a2:e5:9b:43:e9:a6:c1:ab:a6:42:04:0c:
6b:e3:40:ce:1a:30:e9:23:ec:e6:f5:98:05:e0:8d:60:62:7a:
e6:97:ad:0c:72:e8:28:34:12:eb:1c:70:f9:3c:11:49:f8:18:
4b:75:f3:39:a2:6f:9e:01:3f:d4:b8:a8:ed:04:66:f7:f5:bb:
e0:dd:c4:76:b4:38:e3:68:5c:3e:04:00:54:3b:d6:be:71:5a:
75:ae:08:67:60:6e:f4:8e:2c:17:e3:34:2c:7a:59:f3:0b:79:
e2:1c:8c:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:14 2025 by rpki-client