Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
File: temngBMLfFKwEP1xOL8LcjviB8M.mft (raw, json)
Hash identifier: QKPDKP40UVrwiJvueqMfb9kYQ+s8sOWzZEe9eXAlXYI=
Subject key identifier: E6:2E:0D:56:28:17:45:EB:6E:97:40:4C:52:8A:84:6B:18:57:C6:90
Authority key identifier: B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
Certificate issuer: /CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Certificate serial: 0194BBCEB3A94D4F7F99D4D61C7D0E982386
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
Manifest number: 032D
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: KrjmV6dA9ju5vRf_FpDJeVff1Zg.roa (hash: 0t4qGhYAlNNMecASk36kf27GCM4uwfcfNK8pYxGSBbg=)
2: temngBMLfFKwEP1xOL8LcjviB8M.crl (hash: fvDiYIDlvONNR8neh2kl837Z0DeKdLiXf51TJ58ZIBM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b3:a9:4d:4f:7f:99:d4:d6:1c:7d:0e:98:23:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5e9a780130b7c52b010fd7138bf0b723be207c3
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=e62e0d56281745eb6e97404c528a846b1857c690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:02:9d:ec:54:01:e5:bb:2d:ff:b1:12:35:
49:fd:14:fa:a0:98:c1:74:40:4d:c1:dd:41:a5:27:
0f:ea:7c:07:5b:93:2d:14:2a:51:d3:45:73:66:e4:
0d:63:0d:0d:18:f8:20:c1:19:12:14:3f:38:b0:f8:
fb:48:f3:36:93:c2:67:43:6f:30:a1:c0:5f:b8:23:
58:b8:ba:34:b2:6a:02:14:4d:56:fe:81:c4:aa:62:
59:71:87:88:b3:af:0a:8c:17:b2:30:8c:3a:6e:9c:
5a:cd:ec:3b:aa:31:ff:c1:38:5e:92:41:12:3c:fd:
64:e0:38:c2:e5:8a:37:6f:d5:5e:b3:34:c9:1f:03:
07:4a:f1:47:70:81:ae:af:f2:f8:68:9b:74:cc:44:
de:43:0a:08:e4:f1:a9:8c:22:be:3a:67:4b:b5:b5:
70:df:dd:82:a5:6d:c1:d5:ef:5e:5a:3a:25:5c:8c:
e4:44:85:9c:f0:e1:0a:85:9c:81:1b:82:e6:39:01:
0d:d1:f1:b4:d5:37:00:52:d4:8c:b5:85:ff:db:9c:
ea:c1:8e:c8:b0:5c:bf:b5:9a:4c:47:da:a3:f3:78:
e1:c1:55:2b:1e:e5:34:14:e6:11:c2:1b:18:24:af:
39:19:a7:99:17:55:1e:a1:c5:38:92:23:eb:ae:77:
01:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:2E:0D:56:28:17:45:EB:6E:97:40:4C:52:8A:84:6B:18:57:C6:90
X509v3 Authority Key Identifier:
keyid:B5:E9:A7:80:13:0B:7C:52:B0:10:FD:71:38:BF:0B:72:3B:E2:07:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/temngBMLfFKwEP1xOL8LcjviB8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/3b0009-f152-4d9c-af96-a5e5d0084701/1/temngBMLfFKwEP1xOL8LcjviB8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:78:8c:c1:ad:61:1f:77:9b:2a:ac:ca:3f:a5:a9:14:1e:23:
07:4f:48:c6:b7:68:1a:a1:19:f6:68:3f:70:ec:dc:b0:c7:4a:
9e:31:b9:7c:df:1c:a8:10:d0:15:2e:63:4f:94:ee:7b:0d:4e:
66:7b:ce:e5:58:4c:a8:e5:e6:4b:ea:92:99:7a:a0:b6:06:bc:
73:25:2c:56:cd:2c:5d:4d:eb:66:9a:5f:01:73:c3:5b:c2:a0:
06:d4:e2:0a:81:58:fe:ad:e3:a8:45:b7:66:8a:60:e5:65:c3:
dc:2e:8e:60:4a:6b:af:b0:ef:86:52:a2:6d:21:fd:56:9e:51:
24:ff:64:cc:ab:99:69:84:d6:3e:6e:82:cb:08:bb:15:5b:9c:
01:1a:ec:bf:da:67:7c:fe:53:85:17:4f:31:a0:96:40:77:22:
14:6e:d4:80:61:b0:b3:e6:ac:6c:29:38:09:a5:e8:de:1a:bc:
bf:00:54:80:32:34:aa:dd:57:63:ca:9c:07:93:b1:2a:18:69:
09:b9:ef:9c:2e:c3:77:bf:e1:66:e9:25:1f:b2:0d:85:31:19:
54:a9:85:87:a2:2d:e4:c6:29:ae:11:37:36:cb:d8:77:0f:e2:
0d:4c:25:ab:a0:3c:f5:8a:75:4b:4e:cb:c0:26:ac:76:a9:ae:
ee:bb:99:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:38:59 2025 by rpki-client