Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
File: tW-ivPsboZnQpll_uIlUwKbFEtU.mft (raw, json)
Hash identifier: um9Zo+T1WTCA1MKUHonE7rnd0Za0yOeLOrttYI0ClCA=
Subject key identifier: 6F:7D:DE:2A:DA:04:E2:7A:E9:15:CA:E4:62:36:E8:F5:23:9C:2B:63
Authority key identifier: B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5
Certificate issuer: /CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
Certificate serial: 0194BD857ACF09D779CD91E8132FECF2BEFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
Manifest number: 091D
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: iJgFNTZ7IhnRGcD9bd_FqPtqDEU.roa (hash: IcZI5thj3Qr91vjQiVj5vIexM3iUd5S8V76AbgBrsvg=)
2: tW-ivPsboZnQpll_uIlUwKbFEtU.crl (hash: NFPhr+Agp5kQcg12V2zrP5/hKnvtgjkY9G/NarDiiHM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7a:cf:09:d7:79:cd:91:e8:13:2f:ec:f2:be:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56fa2bcfb1ba199d0a6597fb88954c0a6c512d5
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=6f7dde2ada04e27ae915cae46236e8f5239c2b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:15:e9:f2:96:27:bb:87:75:81:41:ca:a2:
a9:e1:1d:00:46:47:d4:ce:05:32:ca:3f:2b:90:a0:
e6:d5:6d:44:9e:81:05:c2:2a:5e:3b:7a:5b:08:22:
06:09:78:f9:0e:6d:6c:b7:ca:82:c5:c9:b9:20:a3:
b8:a7:8d:8e:8b:17:e2:da:f1:7f:ed:bd:1a:32:30:
82:51:9f:f0:6d:71:1c:7b:32:ab:6c:18:ed:63:8e:
1b:ee:41:4b:74:40:7f:31:88:ff:29:2d:52:2c:b1:
ce:ac:62:0e:f5:58:c5:a6:ed:48:86:29:c8:94:8f:
45:4f:5d:e6:3a:ab:05:b1:62:5c:02:71:93:b3:ce:
cf:e5:99:2c:d5:e5:00:5c:23:7a:2d:44:f4:cd:89:
08:2c:66:8b:75:22:76:34:1d:f2:08:be:47:c1:33:
02:c4:47:4b:73:74:de:30:f2:c7:f6:0f:5b:7c:77:
b6:ec:ce:06:f4:dd:d9:08:e3:44:be:39:f1:f7:20:
42:61:60:12:b5:3e:8f:90:20:ed:11:d7:72:7a:a7:
76:e8:41:b1:a6:6d:f4:f9:b2:03:d4:fd:e4:37:01:
b0:5a:5b:1b:69:2b:79:6a:b4:11:f3:be:a5:8e:ca:
3a:75:92:b5:1b:e8:ab:8e:a0:88:5b:0d:45:96:39:
3c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7D:DE:2A:DA:04:E2:7A:E9:15:CA:E4:62:36:E8:F5:23:9C:2B:63
X509v3 Authority Key Identifier:
keyid:B5:6F:A2:BC:FB:1B:A1:99:D0:A6:59:7F:B8:89:54:C0:A6:C5:12:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tW-ivPsboZnQpll_uIlUwKbFEtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/8146d8-31b0-4022-af7e-fa5b2199a739/1/tW-ivPsboZnQpll_uIlUwKbFEtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:23:47:fe:1d:b1:5a:42:ff:2d:f8:f7:8b:59:62:16:a5:85:
a8:3f:8a:4c:88:41:27:44:da:32:06:07:67:35:97:44:be:da:
05:73:ca:86:31:5d:da:17:02:bb:e5:e9:ca:00:d5:17:13:bc:
9c:a5:88:4f:55:19:12:ef:0c:4d:a1:dd:31:06:d8:d9:ee:7f:
57:8e:59:62:18:48:b7:56:be:00:53:6b:f5:b1:48:cb:63:d9:
56:c9:6b:03:26:88:27:2f:50:ea:e5:2f:46:c1:81:6f:d2:9c:
57:d1:aa:cc:d7:32:1c:4d:6b:c5:39:1c:5f:de:c0:66:05:c4:
3d:b1:b0:e7:81:0f:b5:9e:25:33:2e:b6:b8:57:3f:25:d4:db:
42:51:11:e3:17:9f:47:49:28:2d:15:df:43:1e:ff:93:c1:34:
c0:eb:05:0f:85:28:35:70:a9:b1:69:0c:01:62:6e:c1:f0:a9:
87:89:17:0b:a8:fe:85:9d:65:f1:f6:72:f5:0c:af:86:e7:e5:
b8:bd:b2:0d:df:d0:63:0c:36:d3:fb:14:69:77:9f:65:1e:87:
e5:26:b8:04:94:b3:53:57:32:7e:3a:15:61:24:60:38:13:4d:
83:63:82:d8:92:0e:8c:84:a4:af:42:0d:2c:9b:2f:77:7b:bd:
ee:a6:a4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:00:18 2025 by rpki-client