Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
File: tFBrzj9-GuOn4sua0gXEzfsC3bU.mft (raw, json)
Hash identifier: wSWWGgINICuZjGh/zEZqLpXV0uyvy7GFc5ga7MhUPcU=
Subject key identifier: E4:0A:3A:C6:F4:66:20:DD:0C:8F:DF:84:FB:6E:EA:1A:2D:8D:28:B9
Authority key identifier: B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
Certificate issuer: /CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Certificate serial: 0194BCAA1291DA1BE9B4845829917B669BE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
Manifest number: 1338
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: Kd39P6546NpKkTMGeJ0Di1Tm-dg.roa (hash: whkcH/ShQkUqu7p697My2+ymwjNji4wGQLqM0wmvkYA=)
2: To-uv46-3XmiPKg6c_GrFJdFcf0.roa (hash: SmXcvoxvyvRm/BeOwyu47J7sKwYa3+1oFy5V9rexUqQ=)
3: tFBrzj9-GuOn4sua0gXEzfsC3bU.crl (hash: +zZAZsvxOUqeBWNe417YomZBGxnHXfgCTEUdPT+mGsY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:12:91:da:1b:e9:b4:84:58:29:91:7b:66:9b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4506bce3f7e1ae3a7e2cb9ad205c4cdfb02ddb5
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=e40a3ac6f46620dd0c8fdf84fb6eea1a2d8d28b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:9d:29:41:4a:f6:57:be:d2:f2:73:46:a5:
e8:51:c3:50:59:19:42:39:2c:ec:e8:02:51:32:61:
44:99:e6:eb:8a:ed:8e:af:16:65:7c:c3:7f:83:10:
da:a6:bd:28:50:ab:23:ac:87:54:d6:50:09:11:fc:
7a:6d:75:01:79:50:81:38:8c:91:a3:2a:f0:7c:5d:
4a:56:8a:c8:88:85:3a:13:01:fc:59:b4:ec:05:a6:
df:23:c9:c9:71:96:86:9b:3a:7a:81:ef:6f:cd:71:
35:06:a8:e1:e0:17:22:89:a6:82:3e:72:47:54:94:
e0:83:84:3e:f0:a1:e9:98:0b:90:26:c7:d6:3a:fc:
de:c0:7f:33:73:ad:83:28:e0:39:ad:07:05:16:c5:
39:10:ed:04:27:9e:f8:9d:35:e9:3f:b4:b3:5e:60:
1d:1f:94:9a:f1:47:62:e1:f9:1d:97:bf:2b:65:51:
1d:70:5c:e7:67:ab:02:86:b1:0c:fc:8f:e0:81:b4:
b0:a9:46:c7:25:55:69:c0:8c:63:54:6f:df:79:e3:
55:1d:48:c3:53:cf:e0:c7:c8:da:40:b8:de:d6:5b:
df:1e:9a:6f:b2:26:00:d2:02:48:47:07:0f:9c:41:
58:92:d6:30:57:78:19:de:a7:32:49:16:1a:14:f6:
08:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:0A:3A:C6:F4:66:20:DD:0C:8F:DF:84:FB:6E:EA:1A:2D:8D:28:B9
X509v3 Authority Key Identifier:
keyid:B4:50:6B:CE:3F:7E:1A:E3:A7:E2:CB:9A:D2:05:C4:CD:FB:02:DD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFBrzj9-GuOn4sua0gXEzfsC3bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/db5989-19f6-468d-9fc3-f8a3780c348e/1/tFBrzj9-GuOn4sua0gXEzfsC3bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:66:45:96:e1:db:2d:c8:7b:e1:f3:1f:93:db:4d:f5:44:08:
66:fb:d2:7f:fb:ca:a7:b2:6b:64:c7:30:19:55:a9:5f:72:e3:
64:1b:a8:9d:c9:89:af:4d:60:a5:6a:f6:34:36:1f:63:10:57:
30:61:27:9e:e5:24:bf:3c:7f:4d:cd:87:87:6b:a4:da:5c:6a:
7c:13:1c:43:09:70:90:e5:4d:41:4f:7c:ed:db:26:2f:93:c1:
66:9c:27:fd:03:71:3f:c6:38:ec:47:b9:f1:ec:ce:98:d0:7d:
d6:31:0e:22:c9:33:59:08:55:2c:48:ab:aa:52:d7:db:7c:47:
d6:6c:8e:e4:ee:d8:e0:2f:74:ba:32:77:c5:33:ec:5f:d3:3d:
e7:6f:d4:14:90:ec:43:47:7b:01:77:47:01:7e:41:76:d0:da:
9d:d3:90:78:eb:72:94:b2:1f:92:34:e7:66:2f:01:78:f6:22:
b5:6a:05:a0:80:e6:e7:58:54:6d:20:85:7c:1f:02:1b:b1:03:
49:06:b2:8f:6d:cc:e4:01:db:05:cc:ad:e4:de:f7:7a:79:07:
b5:3f:71:f3:ab:fd:dd:7b:05:9c:25:98:db:5a:d5:48:00:71:
34:61:c2:b8:25:ad:3f:01:b4:6e:5a:15:a9:d8:4d:de:23:96:
13:a8:49:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:48:50 2025 by rpki-client