Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
File: tcOYwHMlxA59dtI5ahvoXEL9wsg.mft (raw, json)
Hash identifier: /IjfydD8OMkzrWfvBdns2jXD9nW/0N9mabCEiQDs93E=
Subject key identifier: 61:00:77:82:17:27:F8:0B:DE:78:95:B3:68:25:65:3A:39:2A:3C:5D
Authority key identifier: B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
Certificate issuer: /CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Certificate serial: 0194BD854BFC2B4E30415450787D9ADFB479
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
Manifest number: 03A9
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: HeTNJZjhVHC3QazbToD7IxfPGhg.roa (hash: k/lPKk3dyIcZTARgL9fxQcpWqaVNc6/eODt+UcBvC5M=)
2: tcOYwHMlxA59dtI5ahvoXEL9wsg.crl (hash: luJ+v4usfcLKRU7PXdgRvcW6tSkLjH0M23q4gEy8WOo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4b:fc:2b:4e:30:41:54:50:78:7d:9a:df:b4:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c398c07325c40e7d76d2396a1be85c42fdc2c8
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=610077821727f80bde7895b36825653a392a3c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:f0:a0:34:b3:a0:7b:50:3c:30:39:fc:03:1d:
70:51:16:2c:38:a5:76:71:1f:f9:b1:69:ee:26:58:
be:4b:a3:aa:94:01:38:4e:4f:53:d9:44:e4:21:40:
df:88:94:71:54:a6:59:93:ec:5c:ce:e8:5a:af:f3:
16:89:e2:36:46:59:29:18:2b:65:bb:f9:3a:09:ae:
64:71:41:89:76:c3:4c:59:d3:27:6b:b1:3c:63:7e:
0b:6f:d7:c7:8b:82:b9:c0:0a:8e:9f:eb:53:7c:9f:
34:e1:aa:61:7d:97:d1:88:5f:6e:68:65:40:26:9d:
4c:9a:d9:92:46:b0:d7:5c:3f:3b:ef:99:d2:5f:73:
41:10:83:f6:cc:33:95:d4:90:e1:e6:83:ca:3d:f0:
41:fb:94:fb:46:61:8e:c2:1c:bb:b7:ee:49:54:26:
4f:55:ec:b0:f3:54:cd:ed:06:09:b0:5b:e9:7d:43:
fd:ba:e0:53:98:e2:97:c5:dc:e9:74:88:80:5b:a3:
2c:b5:5a:11:7c:d7:c8:48:2f:14:48:f6:93:04:7e:
89:34:08:e5:d2:0f:1d:19:41:69:78:c9:6e:0f:77:
36:b8:d0:3c:e4:5c:62:98:48:2f:59:97:8e:b4:05:
ec:2a:fd:1e:0b:b8:47:8b:78:c7:2b:5d:9a:de:56:
5a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:00:77:82:17:27:F8:0B:DE:78:95:B3:68:25:65:3A:39:2A:3C:5D
X509v3 Authority Key Identifier:
keyid:B5:C3:98:C0:73:25:C4:0E:7D:76:D2:39:6A:1B:E8:5C:42:FD:C2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcOYwHMlxA59dtI5ahvoXEL9wsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/283e8f-bda2-49dc-8afe-af137ccb2b69/1/tcOYwHMlxA59dtI5ahvoXEL9wsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:52:50:b3:af:75:65:7f:00:0d:9d:14:4e:a3:17:ce:da:f3:
15:a4:6c:06:a4:2c:86:02:a3:77:a0:58:bd:6f:c5:5e:3a:c9:
eb:f3:57:d4:90:32:e4:e5:52:98:c1:52:52:34:b2:f6:92:38:
10:70:cf:a6:e1:55:58:ab:60:b8:0f:f2:6c:c9:97:8f:bf:44:
d6:8d:b2:ad:74:cd:86:c5:d6:f0:f8:29:5a:f2:e8:7f:4d:0a:
d2:17:7a:e2:11:90:b5:84:6b:f7:b0:9a:49:f5:96:a9:98:9a:
8b:d0:93:60:15:9e:b2:54:0b:89:36:9b:cb:c2:ae:7c:31:ce:
11:87:fc:c0:4e:dc:50:7c:af:ba:2e:dc:f0:d4:3e:64:b0:64:
a1:54:e6:e7:79:a9:c3:43:ca:e8:d0:fe:24:00:d0:e4:1d:ed:
59:82:b6:8c:62:31:d1:61:67:e6:dc:7f:d3:87:91:58:f5:64:
72:dd:a4:93:45:5c:db:5b:cf:d4:8e:ec:f8:7b:b7:31:14:6e:
52:d4:5c:54:ee:d4:5e:31:56:d8:31:f3:2f:67:81:c6:b9:cd:
0f:84:d9:48:ab:a4:2f:43:26:66:ab:df:c3:f4:fd:74:c1:ce:
18:81:f6:ab:a6:e3:e4:18:0a:eb:9c:a7:1d:ff:87:56:99:47:
bb:24:69:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:00 2025 by rpki-client