Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/tAqlFjSW4FOna21pzcRfdQBs2N8.mft
File: tAqlFjSW4FOna21pzcRfdQBs2N8.mft (raw, json)
Hash identifier: C9ueFWQfuuPtVB8RtmEFOeLFVqabr/t9+Roceh+xKZE=
Subject key identifier: C6:DD:DE:1E:C8:C1:E2:D1:CC:02:2D:00:7A:8A:6C:AC:CE:D6:31:00
Authority key identifier: B4:0A:A5:16:34:96:E0:53:A7:6B:6D:69:CD:C4:5F:75:00:6C:D8:DF
Certificate issuer: /CN=b40aa5163496e053a76b6d69cdc45f75006cd8df
Certificate serial: 0194BCA9BF8609D5307D6DA8CF29DFD0C9D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAqlFjSW4FOna21pzcRfdQBs2N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/tAqlFjSW4FOna21pzcRfdQBs2N8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: 1-d6DUI7mmJKHILGE-ACGJbIFV40.roa (hash: WM+ispXO9qKwdYzXWtwDmpPip6PK1PIBVYZaFFY6Sl4=)
2: tAqlFjSW4FOna21pzcRfdQBs2N8.crl (hash: QYTsV2lwLraOY6PYt4GPB82qCD2TZlW1IiHzgezoHMY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bf:86:09:d5:30:7d:6d:a8:cf:29:df:d0:c9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40aa5163496e053a76b6d69cdc45f75006cd8df
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=c6ddde1ec8c1e2d1cc022d007a8a6cacced63100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:cd:dd:60:11:0d:89:0f:24:ae:83:27:ce:c3:
4c:76:97:47:a7:9c:e1:bc:c2:8d:55:a2:b6:e6:85:
fc:c1:39:b6:74:c6:38:ed:e4:f3:77:96:de:60:60:
7a:c7:ec:4c:44:98:9f:00:b4:12:ed:ef:75:d8:97:
b7:5d:b5:4d:11:c8:b3:19:8b:70:a3:18:09:ce:44:
a1:82:a9:8e:cb:de:6c:c5:e0:48:7a:db:7f:81:25:
79:8f:56:47:da:69:c6:83:36:80:9d:25:a0:2a:82:
3c:3c:d3:36:1f:3b:6d:00:2c:57:d6:3a:09:71:1e:
69:dc:24:34:c1:3e:d1:ed:d1:f2:ef:22:c1:43:6a:
37:83:f9:77:fc:09:47:98:90:2a:67:16:52:8e:4a:
83:b0:c4:6b:3a:69:62:6f:06:4c:61:58:62:af:de:
32:6e:b6:8a:8f:0b:eb:a8:c9:9e:96:f3:2b:cc:7e:
84:be:7b:ea:48:58:ae:40:e6:2b:b0:ed:49:d9:41:
b4:8d:db:eb:63:4f:42:6a:7e:ca:50:1f:c5:95:52:
de:8f:bd:7c:f1:cd:25:37:e8:e9:0f:cd:a3:1e:0a:
6b:65:7d:42:91:a4:4f:f0:95:9a:73:48:fb:c5:02:
b3:d4:97:5b:c0:f3:20:c7:e9:b2:7d:0d:46:66:ae:
ca:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:DD:DE:1E:C8:C1:E2:D1:CC:02:2D:00:7A:8A:6C:AC:CE:D6:31:00
X509v3 Authority Key Identifier:
keyid:B4:0A:A5:16:34:96:E0:53:A7:6B:6D:69:CD:C4:5F:75:00:6C:D8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAqlFjSW4FOna21pzcRfdQBs2N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/tAqlFjSW4FOna21pzcRfdQBs2N8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/tAqlFjSW4FOna21pzcRfdQBs2N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:33:ab:ac:b2:d2:95:ab:9e:b5:9c:e9:7f:85:fe:c7:48:6b:
79:1e:b1:55:1e:3e:aa:82:78:9c:58:53:d2:6e:82:f8:f7:e7:
d6:03:38:10:aa:af:15:3b:85:10:5f:06:0a:98:83:16:cf:68:
6d:59:aa:c9:b1:f8:02:91:df:be:67:e9:86:d0:6a:00:fd:03:
c8:2c:27:95:75:f3:93:88:f9:63:d2:63:29:4e:15:07:56:fe:
5d:57:15:45:6d:f5:92:64:fc:7c:a1:5d:f8:3f:6f:99:1e:d9:
a2:db:65:55:f6:96:70:b1:52:22:10:a6:07:1f:29:5f:0f:35:
64:56:cc:f1:75:a8:b3:a7:57:d9:81:e9:74:97:8d:88:dd:2f:
f7:1c:c0:52:ba:a3:6f:31:72:ea:99:eb:a9:fc:b2:a6:4e:8b:
93:7b:94:99:ae:6b:a6:53:4e:fe:b2:5d:ef:ba:54:b6:35:a1:
97:2d:38:ca:ad:c7:c8:f8:77:11:1d:26:b5:80:2f:21:40:4e:
33:ed:6d:37:70:be:6a:51:35:b0:6a:92:8f:ed:7d:02:9b:32:
60:3b:5e:9e:f8:8a:2a:50:2b:02:30:6d:65:8b:03:a4:88:4a:
1e:67:63:1a:7f:5c:19:39:0b:0a:b0:25:0a:d7:e6:07:35:80:
97:a0:86:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:14:20 2025 by rpki-client