Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
File: tXikYahZ3cmGwIqI6VEtXD0iEOY.mft (raw, json)
Hash identifier: XJioOrM7RteBK/N/hK8eEVaisPvIpQ3uLHLxnw4IDE4=
Subject key identifier: 42:B5:49:BA:D4:06:88:D7:29:02:37:DF:01:9A:EF:C1:2C:CE:99:53
Authority key identifier: B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
Certificate issuer: /CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Certificate serial: 0194BD4EBAA2EE679E028017D813104F0274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
Manifest number: 1104
Signing time: Fri 31 Jan 2025 17:00:40 +0000
Manifest this update: Fri 31 Jan 2025 17:00:40 +0000
Manifest next update: Sat 01 Feb 2025 17:00:40 +0000
Files and hashes: 1: fOeHWLSvpiv5KgmUiK2xlWpmRm4.roa (hash: 70iF+LPpbMiVmu1EBYdz2CkmI0h0sZ5SaRk5YWSmNI0=)
2: tXikYahZ3cmGwIqI6VEtXD0iEOY.crl (hash: kLDATZqVogHR4V9vSGzdIfAwBt1b+veG7N+VyM1uazE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ba:a2:ee:67:9e:02:80:17:d8:13:10:4f:02:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b578a461a859ddc986c08a88e9512d5c3d2210e6
Validity
Not Before: Jan 31 17:00:40 2025 GMT
Not After : Feb 1 17:00:40 2025 GMT
Subject: CN=42b549bad40688d7290237df019aefc12cce9953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a3:95:1a:dc:28:1d:91:43:1e:78:40:08:50:
0f:46:6b:6d:9b:f7:4b:70:36:fc:35:5b:d7:90:ae:
87:4f:8d:ea:eb:87:04:f3:c1:95:6e:7e:94:5d:4f:
32:9b:3b:85:74:35:6f:f4:bb:d5:66:24:5c:5c:8c:
98:aa:c9:7e:29:bc:8e:c7:92:f6:70:cc:c1:c7:33:
b5:4f:0d:16:33:88:6c:10:51:8a:0e:bf:72:49:c4:
0c:ea:99:36:e0:35:01:fe:c7:3f:5a:17:74:a7:bc:
c1:dc:7a:5a:87:64:12:61:1f:55:1b:8c:50:f4:36:
a5:e1:cb:31:7c:61:a7:23:f9:39:8a:46:b0:6c:00:
f9:f3:61:bf:7e:80:8e:c2:26:2a:d6:70:0d:76:b0:
37:60:e7:64:d5:f3:41:4a:31:ef:49:88:d9:22:ff:
24:94:7a:fe:f3:44:5c:68:d7:16:3a:92:84:ab:19:
77:da:72:20:66:c8:8b:cd:e2:07:88:b1:e7:a7:81:
8b:77:c5:62:65:3c:20:7b:76:1e:cb:a0:8b:11:f6:
7e:e1:ec:96:b9:26:e9:05:ca:5c:61:59:b1:b8:cf:
d0:14:ef:de:3f:29:cc:e4:d4:a9:40:b8:f7:c3:be:
fc:8c:08:3d:d1:99:40:1e:c7:5c:32:1c:cb:09:56:
05:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B5:49:BA:D4:06:88:D7:29:02:37:DF:01:9A:EF:C1:2C:CE:99:53
X509v3 Authority Key Identifier:
keyid:B5:78:A4:61:A8:59:DD:C9:86:C0:8A:88:E9:51:2D:5C:3D:22:10:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXikYahZ3cmGwIqI6VEtXD0iEOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/0cee34-5acc-42d5-a5bf-fc1c0ccbc0b7/1/tXikYahZ3cmGwIqI6VEtXD0iEOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:17:50:77:ab:2a:38:4d:5c:8b:88:f3:13:ba:2d:72:d0:c1:
d2:90:45:51:9e:78:42:0b:68:50:83:13:c5:9d:68:4f:bb:fc:
72:5b:1b:fa:ef:11:2a:7a:a6:b1:34:36:8b:11:65:00:28:c4:
1c:87:0e:33:15:7e:0e:89:2f:35:d8:a2:96:8f:07:d2:f7:52:
3e:a2:cd:e9:72:30:53:17:96:ed:cb:ba:af:d6:ee:78:70:a5:
4c:2c:c9:73:e0:49:e7:3a:99:7e:6e:df:16:57:f5:0b:ad:65:
18:8e:9d:59:09:a9:57:b9:d3:d0:72:b8:f4:d2:fd:80:24:8b:
9b:68:12:00:a3:3e:01:89:08:59:da:60:99:f4:62:6e:4f:c3:
65:39:f2:2a:81:65:86:b9:5d:10:8a:46:f1:06:89:cd:6d:6b:
23:7f:a1:1a:c2:70:5b:e5:ea:d2:05:7c:32:37:26:d0:05:11:
c6:b8:c7:17:47:af:2f:bc:0e:4f:4b:41:d4:0c:3e:06:c5:67:
4e:a1:1c:21:0f:67:cb:94:97:26:46:6a:4a:ef:c9:4c:d1:4c:
25:04:01:ef:a4:88:ef:0f:d2:36:08:9f:5a:26:6b:44:fa:85:
4a:46:f4:47:28:d0:b8:17:24:30:4b:40:87:a6:a6:a3:0e:df:
bb:58:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:52:47 2025 by rpki-client