Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
File: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft (raw, json)
Hash identifier: jIst+sG76nBJLWBUE1GQJy2YNIc7Jhp1mIOPr9p+ic8=
Subject key identifier: FC:F7:0F:B3:6A:E3:2A:DF:5B:5D:65:BF:6B:42:CC:51:4C:14:04:D1
Authority key identifier: B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
Certificate issuer: /CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Certificate serial: 0194BC3C90F6232A8A6EE1BCD0D033E68007
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:01:13 +0000
Manifest this update: Fri 31 Jan 2025 12:01:13 +0000
Manifest next update: Sat 01 Feb 2025 12:01:13 +0000
Files and hashes: 1: A19KF2VhmqgRITxahuDcRts8KJs.roa (hash: YirbVHhxW1CKNUwQAz3dz5QapLv5A3zZT5MHBNEVZ34=)
2: tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl (hash: 79VMmn1rrS3I5rVHo1lbeFVERks+LpkfEBCldG+yiqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:90:f6:23:2a:8a:6e:e1:bc:d0:d0:33:e6:80:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f0f838afbc1322680544ed1c9c5a2b09965d9f
Validity
Not Before: Jan 31 12:01:13 2025 GMT
Not After : Feb 1 12:01:13 2025 GMT
Subject: CN=fcf70fb36ae32adf5b5d65bf6b42cc514c1404d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:73:c5:66:00:37:f7:66:1c:56:7f:7d:e2:4e:
4c:96:23:79:40:1a:42:7c:b5:61:52:69:47:cd:6c:
fb:30:35:fa:2d:6c:18:8f:26:61:16:70:1f:a2:9b:
f0:c0:1c:06:61:fd:78:ab:a3:a3:fa:58:8c:88:b9:
6f:a8:71:b3:a0:73:76:1f:33:bc:5d:10:35:49:13:
65:fd:2b:ec:4b:d8:c9:d7:d0:48:72:31:ee:df:72:
1a:84:5f:7a:5c:b2:b3:c0:ae:04:82:46:db:ce:fa:
15:8e:c5:cf:63:7f:67:2e:cc:39:a1:92:94:aa:41:
e8:26:62:4d:45:13:32:02:9d:b8:1e:e3:90:84:06:
ac:49:ef:e4:99:a9:79:74:bf:0d:ee:78:66:b0:c1:
f4:2b:eb:a7:f3:21:28:2f:90:56:88:cc:35:4b:6f:
11:38:93:f5:b1:ac:e3:bf:b0:be:a0:5d:ca:2d:00:
ac:20:ab:85:12:82:d6:96:57:b6:00:ff:23:9d:c2:
24:4a:a4:2e:ff:c8:ec:e5:d1:ad:6d:5a:f8:60:bc:
a8:35:18:2f:79:22:40:93:15:cf:f6:d3:40:62:ed:
8c:a5:87:11:48:4d:f9:a6:21:8c:22:b6:99:24:d3:
ac:8d:a0:6b:06:4b:80:6c:3f:88:ea:73:37:a3:5b:
91:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:F7:0F:B3:6A:E3:2A:DF:5B:5D:65:BF:6B:42:CC:51:4C:14:04:D1
X509v3 Authority Key Identifier:
keyid:B5:F0:F8:38:AF:BC:13:22:68:05:44:ED:1C:9C:5A:2B:09:96:5D:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/320512-91cb-4383-9761-a52dc9c2207c/1/tfD4OK-8EyJoBUTtHJxaKwmWXZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:5b:80:ba:38:62:e4:e0:ef:d9:72:6f:d9:48:15:32:9a:54:
a6:4c:72:28:be:19:5e:db:23:42:f4:d0:9f:58:50:2c:de:15:
2e:a7:ba:9b:58:1c:66:3c:0b:a3:4d:8d:0e:8d:19:a3:80:18:
fd:6d:ca:fe:fb:0f:b6:ad:ce:ac:13:14:49:4d:df:70:81:e0:
3e:5d:f8:b3:41:ef:9c:8c:3e:b6:ab:c4:37:8b:9f:61:3b:96:
7f:87:76:01:7d:1c:fe:97:a9:72:0c:0f:2f:76:73:ca:58:18:
42:56:a5:24:a9:7e:6d:97:bc:3f:8c:00:0e:2a:d1:1a:7f:73:
38:5a:c3:83:21:e4:d5:4c:5a:93:33:8a:b7:9e:f9:65:89:df:
21:eb:23:ba:45:3b:b6:6b:ef:5a:e4:3a:73:bf:c5:78:90:96:
c7:01:c3:89:78:4f:20:98:ae:b0:8d:30:90:79:9e:fd:90:11:
46:95:43:3e:c6:3a:23:ba:95:2d:5e:93:08:c8:89:de:35:22:
06:d3:a1:39:1b:02:9d:ce:74:f1:ca:59:b1:e4:48:fb:7e:5d:
ec:0a:af:78:ff:7e:f1:00:8c:bc:fd:11:09:b2:3a:ec:86:68:
c8:74:18:6f:af:d1:db:c4:64:75:71:c8:f6:03:72:d5:0a:1c:
aa:11:da:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:13:12 2025 by rpki-client