Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
File: Tchxtd3wdAsxfR4042smgQu5gCY.mft (raw, json)
Hash identifier: BG+TrBg20j98JuwUos2BO2gNUhBVLHHs9wNPkQ9Qn9Y=
Subject key identifier: 50:37:0D:CD:74:4E:38:95:7A:6F:C7:C9:CF:1E:81:F9:E9:57:83:C6
Authority key identifier: 4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
Certificate issuer: /CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Certificate serial: 0194BBCE925597E29FC44E65A28652B47BA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
Manifest number: 06FB
Signing time: Fri 31 Jan 2025 10:01:04 +0000
Manifest this update: Fri 31 Jan 2025 10:01:04 +0000
Manifest next update: Sat 01 Feb 2025 10:01:04 +0000
Files and hashes: 1: SUUG2kKjexSvWz7hisQBB7MKXJ4.roa (hash: bTiVKxnx7l7XrKQSBNs5e26ay+4FQ9U506Q1Nlisl1M=)
2: Tchxtd3wdAsxfR4042smgQu5gCY.crl (hash: 1+E2ewcScRmWcV1Bp91LqU99quF9dimJgS4A/IAZVU0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:92:55:97:e2:9f:c4:4e:65:a2:86:52:b4:7b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dc871b5ddf0740b317d1e34e36b26810bb98026
Validity
Not Before: Jan 31 10:01:04 2025 GMT
Not After : Feb 1 10:01:04 2025 GMT
Subject: CN=50370dcd744e38957a6fc7c9cf1e81f9e95783c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:24:9a:12:40:62:ea:65:ec:4f:a9:98:58:02:
d1:9e:1f:8c:4b:14:0d:6c:82:32:10:f9:a8:a8:db:
f6:79:37:c7:8f:2d:73:14:72:de:d0:bb:28:ca:6f:
9c:d5:da:e9:5e:be:f3:08:37:f4:12:2b:f5:1a:85:
ba:2f:05:48:5c:6f:83:99:a9:c3:8e:f1:cb:e1:33:
a7:19:91:a6:43:ee:10:ca:a5:06:1c:b4:c3:5d:0c:
4d:4c:bb:de:bf:b9:40:26:f8:8b:98:d2:cc:da:6e:
be:7e:57:c4:bd:fa:31:e6:67:33:af:14:bb:90:ea:
33:26:aa:0a:4a:f3:b4:1a:c4:80:08:bb:c9:dc:63:
e6:9d:49:fc:1f:e5:35:2d:de:3b:3f:a9:b8:d8:79:
e8:3b:4a:64:7e:a1:84:98:9e:54:8e:ef:eb:1c:7a:
8c:46:e1:64:96:e9:e7:fd:35:17:94:bc:19:82:04:
bc:cb:45:c1:24:45:9e:e1:1c:96:65:b6:1b:9b:e1:
7d:c2:f2:9f:93:64:4c:64:0d:aa:cd:01:6b:22:e7:
53:1e:6d:d6:19:d6:82:16:2f:42:4d:b0:68:1f:34:
1b:1a:bc:99:0d:72:14:09:2e:5b:72:9b:d8:c3:eb:
eb:99:c0:21:32:34:ce:4f:4d:db:99:9c:34:e5:fd:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:37:0D:CD:74:4E:38:95:7A:6F:C7:C9:CF:1E:81:F9:E9:57:83:C6
X509v3 Authority Key Identifier:
keyid:4D:C8:71:B5:DD:F0:74:0B:31:7D:1E:34:E3:6B:26:81:0B:B9:80:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tchxtd3wdAsxfR4042smgQu5gCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/355efb-26b0-4112-b4b5-93c29640bbfe/1/Tchxtd3wdAsxfR4042smgQu5gCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:c7:11:91:25:8e:3b:f1:05:8d:40:d3:84:09:80:ea:75:5f:
15:10:90:bb:3f:d2:3b:16:47:99:34:c8:5e:f8:f2:a4:05:0f:
8b:7a:4b:0a:b2:b3:54:1a:67:e7:29:7b:e7:46:74:f9:b3:b3:
b5:8b:4a:61:b4:3a:f4:64:95:f3:40:10:55:0d:ca:c5:65:79:
a4:db:e5:98:89:93:6e:93:c5:84:34:56:01:da:45:fa:b3:12:
dd:1e:3e:2c:e7:e4:5c:2e:b8:1e:38:79:d1:70:2f:ff:1a:81:
41:44:30:4c:68:4f:08:ae:20:4c:bc:9a:fb:f0:8a:e2:51:cd:
2c:7b:8a:47:68:16:f3:b3:7d:a3:53:61:12:65:16:33:cd:4e:
49:27:04:0f:24:21:72:41:89:b0:5e:73:24:29:48:dc:18:a1:
5e:66:53:d5:93:8a:da:10:33:de:af:92:57:e9:5f:e9:4d:51:
04:60:e1:e2:4d:d5:d2:ea:8f:81:16:e6:21:2b:82:73:3f:be:
48:66:ef:2a:f4:a5:43:84:03:c4:ad:5e:d5:b3:c9:0c:ad:89:
a6:ac:db:d9:65:cd:69:fd:49:72:07:1c:3f:39:e4:28:4d:ee:
d0:42:7f:73:4b:3c:18:97:22:f0:de:f2:54:93:87:54:d8:0d:
18:fc:db:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:06 2025 by rpki-client