Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
File: tUXkNLukc3BtqDNv2gFrsuaLNiM.mft (raw, json)
Hash identifier: 2E4rsSWik1ivLiA2Ya7ClM7sm9uK1kS+qPgDEDtaU98=
Subject key identifier: FD:D3:AB:CF:8B:F8:43:08:58:2C:66:95:2C:13:D2:29:CC:81:CA:AD
Authority key identifier: B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
Certificate issuer: /CN=b545e434bba473706da8336fda016bb2e68b3623
Certificate serial: 0194BBCDC2514EC426BCE679868105D9AAB2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: 8c1jWLNSWx4cTuK9ZEnAPJAmwwU.roa (hash: zNldb7jsDCF4ycQz0X2hLLJLeALZnhbBqN35ToOj1oI=)
2: tUXkNLukc3BtqDNv2gFrsuaLNiM.crl (hash: 3GEAA2Jt2sz1WWWaMjKkJVITF0dCpnjZHPuG0cUXTPg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c2:51:4e:c4:26:bc:e6:79:86:81:05:d9:aa:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b545e434bba473706da8336fda016bb2e68b3623
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=fdd3abcf8bf84308582c66952c13d229cc81caad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:75:7c:bf:e7:a9:55:f9:3d:95:57:04:d3:47:
b8:34:e8:eb:39:a3:bd:47:60:2e:af:7e:3d:fb:7d:
e3:33:e9:c1:8e:48:fa:ae:b8:22:3e:55:65:6b:12:
3c:1b:cd:f5:80:0e:23:1f:1f:e5:5e:69:43:2e:79:
cf:0e:93:74:90:9a:eb:fc:32:ca:5b:ef:26:9a:4d:
42:d6:11:f6:0e:3b:52:08:38:a7:1d:95:90:54:39:
21:6d:00:da:a6:e9:24:88:5c:84:4a:ba:ca:dc:da:
98:1e:c7:c2:56:a7:93:7c:9e:56:25:84:29:81:87:
b3:cc:b2:42:0a:ec:69:e7:25:9c:dc:74:7c:93:ae:
16:96:cd:c5:7e:f0:d7:61:a5:95:29:d9:ed:25:f4:
08:48:da:ef:cc:ee:0c:2b:d9:67:16:a7:7f:73:84:
2a:60:24:93:0f:3c:75:6f:c1:e0:d5:91:c6:89:c3:
0d:a9:44:fe:ca:f0:1f:76:42:8a:dd:92:96:6d:c0:
17:26:0d:5e:56:9b:3b:5f:19:e8:c6:68:05:95:3b:
6a:79:67:2b:7e:93:4d:51:e3:71:bc:67:32:60:77:
78:bb:51:5f:70:59:5e:c4:d0:8a:5e:f4:50:90:1a:
7a:e9:89:41:66:98:17:99:0e:16:a7:82:8d:fe:8f:
db:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D3:AB:CF:8B:F8:43:08:58:2C:66:95:2C:13:D2:29:CC:81:CA:AD
X509v3 Authority Key Identifier:
keyid:B5:45:E4:34:BB:A4:73:70:6D:A8:33:6F:DA:01:6B:B2:E6:8B:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUXkNLukc3BtqDNv2gFrsuaLNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/533416-5192-4944-ab50-813c76ff40b4/1/tUXkNLukc3BtqDNv2gFrsuaLNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:54:ec:65:f5:2b:0f:ee:65:12:f5:7b:8c:ac:85:5a:c4:9a:
4e:72:26:36:0a:ce:1d:e8:a9:56:9b:e0:b6:55:50:d3:57:bc:
7b:24:53:00:1d:c2:ee:eb:fa:e0:ec:8a:96:e0:7b:e0:77:2f:
2c:0b:8e:00:63:ca:b2:98:c2:51:ed:60:4a:17:ec:4b:4e:af:
15:59:74:ef:32:b6:9c:01:b0:82:ee:da:30:5e:8f:ab:36:b7:
fe:0e:ce:c8:e1:06:a4:72:75:a8:8e:87:a6:ef:7b:d2:15:c5:
0d:78:2b:da:8f:81:6d:0a:1f:a6:12:21:db:97:f6:57:3b:6c:
f7:fe:2b:11:1a:13:1d:65:c4:e6:1b:21:a0:8b:9c:91:a4:3d:
22:ac:35:a6:0b:68:a9:be:8c:17:fb:21:7f:b9:23:cf:2a:37:
f4:d1:eb:9d:c1:a6:04:09:a6:0a:b5:61:e9:09:fe:aa:cf:08:
39:67:39:31:56:bd:b6:1d:5b:37:8d:d8:7d:51:a9:20:5d:07:
eb:c9:4a:ac:31:4e:52:f8:12:fb:81:a2:8c:54:6d:fb:ba:ef:
bc:61:2c:da:b9:01:cc:04:28:6f:8c:18:8d:48:5a:ce:79:fd:
1d:26:0a:b9:05:f4:00:1c:cc:ee:80:cd:b8:93:ac:74:fb:6c:
71:29:a6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:50 2025 by rpki-client