Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
File: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft (raw, json)
Hash identifier: ysGu2a0Z5SPNuri1O7hUXMkKWajJNQXhK28GAQkeJPA=
Subject key identifier: 8A:41:A1:D6:9A:33:E7:EF:F0:C8:1A:20:44:F6:97:24:9B:47:4F:61
Authority key identifier: B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
Certificate issuer: /CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Certificate serial: 0194BC3C8965A12192FD9F757284C34BF100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
Manifest number: 0659
Signing time: Fri 31 Jan 2025 12:01:11 +0000
Manifest this update: Fri 31 Jan 2025 12:01:11 +0000
Manifest next update: Sat 01 Feb 2025 12:01:11 +0000
Files and hashes: 1: XkoFzkhGOVU5LUerqTHh__leFZg.roa (hash: z0PB3OIVOF5qm40evjJvgBDDcdbv5T70mZxHdxYv7d4=)
2: lE8Zy8N-xpY9U-oK5WN375n1Ofw.roa (hash: eG5bABtFszI7d/P1aStzKC6pmrIphfH8b15K2w83lWk=)
3: tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl (hash: JbwRPxRfWdieCDHV5Y86oghWhBe7XAzEAU6ustaSX7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:89:65:a1:21:92:fd:9f:75:72:84:c3:4b:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b504bcceb9c363f13e3adaa4c0fa52780f064684
Validity
Not Before: Jan 31 12:01:11 2025 GMT
Not After : Feb 1 12:01:11 2025 GMT
Subject: CN=8a41a1d69a33e7eff0c81a2044f697249b474f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8a:3e:44:26:d8:c5:5a:85:4e:ea:29:cc:a9:
03:45:59:8f:10:91:32:b6:69:1d:8c:d5:24:54:78:
b7:69:d9:d0:3a:2e:0f:17:16:e3:05:a2:e4:86:99:
de:97:e3:b2:d4:e7:d7:20:cc:88:29:e2:12:b5:36:
46:f6:7a:bb:57:e0:47:21:fc:ff:9d:05:7d:03:d1:
d5:e4:5b:f9:c3:62:cf:fc:dd:69:17:3f:59:3e:45:
a0:b4:89:14:7b:df:16:c6:d2:74:4f:90:c9:a5:b8:
3a:ba:74:3f:83:fc:a9:7b:20:9a:22:52:82:c9:ec:
56:78:cd:6a:ec:4a:e1:d5:8a:30:b6:3a:26:d4:98:
a0:d2:76:9d:34:92:e1:66:94:d2:89:c4:9a:d7:2c:
d4:f5:81:54:58:80:f5:1b:20:50:19:e0:4a:77:da:
eb:5a:9b:d2:63:07:1a:cd:e1:ac:36:42:1b:fa:73:
a2:aa:32:4f:56:37:f0:ea:43:e5:f0:6f:88:fa:2d:
00:e8:24:88:15:cb:e9:04:bc:02:a7:0c:e0:8b:4e:
98:f0:17:47:e5:ec:fa:75:cd:73:3b:90:b7:e2:75:
a4:e3:12:54:2b:f1:43:2a:cd:52:b4:78:b2:51:91:
05:23:9c:f9:61:79:45:a6:9d:7a:de:32:cf:9e:cb:
84:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:41:A1:D6:9A:33:E7:EF:F0:C8:1A:20:44:F6:97:24:9B:47:4F:61
X509v3 Authority Key Identifier:
keyid:B5:04:BC:CE:B9:C3:63:F1:3E:3A:DA:A4:C0:FA:52:78:0F:06:46:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1d3cdc-d04b-4adb-b069-2a351ab3b8f6/1/tQS8zrnDY_E-OtqkwPpSeA8GRoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:05:9a:ec:84:c6:0b:e2:75:96:eb:4b:c1:6b:7f:b7:09:5c:
fc:7d:36:35:4b:58:cb:60:0d:ad:8d:54:cc:9e:8c:34:d1:23:
bd:28:19:44:40:49:7b:6d:4a:e1:27:c6:39:83:72:ea:12:cb:
a6:80:3f:b2:21:02:90:15:55:59:01:0b:84:77:19:35:d0:cb:
42:b2:90:d2:72:6d:05:f8:a2:9d:b2:2e:f6:b6:f1:35:5f:41:
bc:3c:41:fe:8b:3d:f0:de:64:d5:69:ff:dd:cf:f2:fe:54:a4:
7d:d8:12:04:6f:2c:37:f6:50:71:de:c6:25:69:aa:19:48:e5:
9a:c7:26:f0:7d:94:f2:1d:9f:84:1d:23:91:22:3b:9c:9b:16:
2f:b1:b4:c8:ec:b1:60:9c:5b:6c:52:07:29:0c:0e:30:f8:15:
03:d3:a3:90:d5:35:1c:7e:0b:87:c0:24:9e:54:32:69:9a:a0:
34:eb:ea:3c:3d:a4:d5:fd:77:6f:da:d5:85:99:33:37:ca:13:
e0:d5:cc:8c:a4:e1:1a:44:7e:84:81:61:85:45:43:f8:fb:0e:
7d:64:79:bc:ea:82:fc:88:c7:d7:a3:b3:2c:53:ac:bd:3e:03:
3d:db:cf:39:c8:27:de:eb:45:2f:19:bd:b2:88:94:61:6d:7d:
b1:ff:6f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:31:52 2025 by rpki-client