Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
File: tkB0qoRJgw2psgs6-waC08Ay-f4.mft (raw, json)
Hash identifier: O486/7roR6r1vcRyjnNMjnacvUhzyElcGwVGLnpSFFY=
Subject key identifier: D8:D3:A9:9F:1C:81:CB:4D:82:02:11:C8:7F:F9:D9:21:70:3D:C7:37
Authority key identifier: B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
Certificate issuer: /CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Certificate serial: 0194BC72D13CC4CE28DCB92229A5B475AEFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 13:00:28 +0000
Manifest this update: Fri 31 Jan 2025 13:00:28 +0000
Manifest next update: Sat 01 Feb 2025 13:00:28 +0000
Files and hashes: 1: BdOIN-x7p5NQNZFat3HBRk8aNP8.roa (hash: E6O+SQKCroETYNOj7yjRqDXwGgY2i2+LPEeaEfVM6HA=)
2: SvbWjBtA5USrFJEFyfsvP-SCofs.roa (hash: La++FukCI88aoCCAWTG9ojz1zryPe+WC1BNRSElIvDw=)
3: ZqMh09XL_OuL0ICq-TfvGdj4pmM.roa (hash: l5g5wXS3ZWKojPoOXqpehHnI+SHAfeYcurBv6Xo/WU8=)
4: tkB0qoRJgw2psgs6-waC08Ay-f4.crl (hash: q6ktEl/BYggLzyj28G4zQcjtWLlDNBr4bl+nNSJd3ak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:d1:3c:c4:ce:28:dc:b9:22:29:a5:b4:75:ae:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b64074aa8449830da9b20b3afb0682d3c032f9fe
Validity
Not Before: Jan 31 13:00:28 2025 GMT
Not After : Feb 1 13:00:28 2025 GMT
Subject: CN=d8d3a99f1c81cb4d820211c87ff9d921703dc737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:6d:84:ad:3a:45:cb:bd:00:b6:e8:77:2c:66:
5f:4d:50:4b:64:78:b9:9b:7d:af:41:a9:51:ad:0d:
c0:e3:c1:72:3a:b9:01:cc:f2:02:c5:a4:5e:4b:08:
de:8e:d0:85:46:27:fc:65:fc:71:80:41:4c:7a:99:
57:7b:c8:c2:c1:a4:a3:ae:a5:cc:46:44:51:98:6b:
e5:9d:1f:95:39:18:f5:ce:7b:e6:23:d3:bc:f9:66:
ae:7f:5b:e3:8c:f6:68:e9:94:68:57:90:85:b8:d6:
7d:fc:eb:64:3f:7b:85:a9:c2:48:af:55:8c:1d:e2:
64:cd:0e:b0:c4:08:96:2a:ea:5a:aa:a3:c4:17:3a:
bd:00:0e:33:cd:78:60:db:00:cf:85:6b:72:8a:88:
f2:73:b8:73:65:ea:b3:4f:ba:da:f4:a6:36:ba:3d:
e2:ba:01:4d:18:7a:9c:03:7d:89:38:bc:6f:16:3a:
6f:4c:97:b0:ec:2a:a9:6e:7f:38:16:52:64:7f:88:
3c:d8:48:8b:76:ea:d2:ba:86:af:55:6b:3d:45:48:
a4:6a:94:83:14:d7:a0:de:40:98:51:f4:22:bc:65:
ef:e3:e6:42:23:b9:21:43:a4:07:7e:6d:ed:54:25:
3d:11:ca:62:68:b5:ea:c4:04:c4:11:54:df:c6:25:
fc:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D3:A9:9F:1C:81:CB:4D:82:02:11:C8:7F:F9:D9:21:70:3D:C7:37
X509v3 Authority Key Identifier:
keyid:B6:40:74:AA:84:49:83:0D:A9:B2:0B:3A:FB:06:82:D3:C0:32:F9:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkB0qoRJgw2psgs6-waC08Ay-f4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fc7c82-3159-4d54-a0a1-35171aedd313/1/tkB0qoRJgw2psgs6-waC08Ay-f4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a8:0f:04:1a:ee:65:5b:f8:ed:7b:66:83:93:1b:30:02:19:
3b:59:f8:8f:b0:73:22:1f:77:d3:21:67:13:a8:ea:fc:12:5b:
b5:0f:1c:15:7c:8a:6f:0e:eb:b8:eb:49:a7:0d:dc:73:15:35:
40:aa:34:37:be:71:d6:53:76:4b:26:bc:cd:44:a9:2b:1f:a4:
65:0c:59:2d:0b:c6:1f:ab:ea:1d:12:86:7a:3d:8c:c3:b1:30:
28:ee:31:80:0b:5b:e0:dd:7d:24:f7:f7:d5:1b:b9:e4:97:d0:
81:e1:4b:d5:94:9b:71:cd:a0:c2:38:d7:32:03:8b:8c:ce:f0:
76:17:cd:48:de:1f:9f:fa:53:6f:86:db:af:a6:be:8e:3e:95:
4a:28:2c:a2:4b:9b:e5:78:c9:6b:8d:ee:24:50:99:43:1c:76:
fe:9b:6b:67:fe:bc:6b:56:bd:fc:7b:8f:56:7c:a7:05:5b:22:
db:a8:a1:40:87:eb:55:84:91:55:67:5d:49:a8:85:41:51:3e:
5a:72:72:de:69:67:e8:03:d0:64:df:7b:cf:e3:2f:1a:44:45:
93:13:de:f8:bc:d2:b9:27:c9:1c:3d:cc:1a:26:5d:cc:b1:3c:
27:49:21:14:b0:0f:6d:f2:a8:7d:37:14:d4:75:f9:dc:45:51:
67:d8:16:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:49:24 2025 by rpki-client