Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
File: tGasCkklUoPNUwZpcc17Pf4qPOg.mft (raw, json)
Hash identifier: ZhuAsErSNFySnGDC7ABpUNE2Bp5Lb0w3x6EeK5saUZE=
Subject key identifier: 28:50:C9:B4:92:42:BD:9B:39:4D:FD:4A:5B:A6:E7:55:80:A0:0A:81
Authority key identifier: B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
Certificate issuer: /CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Certificate serial: 0194BD8587C1F263DDC03D702808B319EAC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
Manifest number: 1373
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: doq0g_q616KoQiCYhBpjnY3GXAI.roa (hash: 2NaVQRnf2IQ50I0pWc2BZKlLLETET7Nu4U+ng9RipiU=)
2: tGasCkklUoPNUwZpcc17Pf4qPOg.crl (hash: zMaPRw9+UH3DiVftTfVBvN3SIZ3W03CGQIWcdw/z1RI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:87:c1:f2:63:dd:c0:3d:70:28:08:b3:19:ea:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b466ac0a49255283cd53066971cd7b3dfe2a3ce8
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=2850c9b49242bd9b394dfd4a5ba6e75580a00a81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:90:65:40:13:24:e0:a0:fa:d4:20:f3:37:af:
ae:8d:0d:a7:c7:a1:2d:a1:cc:b3:c1:71:c0:e8:c0:
4b:e2:4b:f2:02:df:c3:02:ce:50:cd:87:cc:32:3b:
c4:5e:2d:2a:5e:bf:cb:f3:72:82:86:7c:cd:7c:8d:
9b:e6:fc:4b:31:eb:07:60:6e:68:ba:6b:8d:d2:65:
09:b7:23:ef:a8:d2:26:52:b5:af:87:24:d0:2e:ad:
67:0b:e7:52:db:23:46:85:6e:fd:d3:05:0e:fc:e3:
83:13:0c:e4:45:64:9e:27:9e:08:e2:7f:66:56:4e:
39:b2:9b:c5:1a:65:ca:7d:d9:3e:70:8e:c1:59:87:
0a:35:59:53:25:3d:fd:34:60:2f:6e:1a:e5:0c:5f:
69:7e:6f:f3:e2:0c:30:a1:a2:5b:ee:59:3c:45:b4:
8e:6b:3f:19:05:76:b1:fc:2f:25:ef:a3:f2:02:50:
44:59:4d:b5:f5:05:bc:16:4d:04:f3:8d:06:b0:7d:
0a:fd:8e:b7:0b:7f:06:ba:0d:b6:21:56:71:5c:35:
07:b0:33:a6:98:1e:e7:b6:8f:7d:4f:54:72:12:f0:
b0:0d:c6:2a:63:33:c5:4c:85:fb:6b:be:af:08:77:
2d:16:b1:56:20:f7:de:91:f8:0c:91:75:ef:e6:6d:
bf:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:50:C9:B4:92:42:BD:9B:39:4D:FD:4A:5B:A6:E7:55:80:A0:0A:81
X509v3 Authority Key Identifier:
keyid:B4:66:AC:0A:49:25:52:83:CD:53:06:69:71:CD:7B:3D:FE:2A:3C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGasCkklUoPNUwZpcc17Pf4qPOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/133b52-7a66-41ab-aeee-c9b470dc240b/1/tGasCkklUoPNUwZpcc17Pf4qPOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:3c:3e:e6:3d:76:0a:3c:3b:f2:9a:16:ca:89:5d:8e:c3:00:
bf:36:76:f9:ef:58:5e:d8:88:6c:9c:78:b8:03:68:63:8e:08:
0e:3f:5f:27:8b:29:ce:5d:9c:55:0c:d5:1c:b3:30:19:d9:a4:
5b:8d:5c:d8:54:70:be:1b:1c:6c:4c:83:28:13:4a:b2:ab:7c:
4c:a9:a9:3b:06:7f:a1:31:1d:3c:af:1f:17:68:41:fb:14:1b:
50:7e:93:cf:55:8e:3d:63:91:cd:1d:cc:67:0f:ca:09:03:3c:
6e:43:20:53:35:a2:fc:b1:fc:93:9b:f6:3b:da:0c:df:51:b7:
87:97:fd:a8:f4:f0:62:7c:7f:39:1e:03:2c:0a:12:2d:a5:3b:
d2:c9:5d:2a:04:62:8e:6d:69:41:6b:35:b9:21:a5:81:3c:c5:
8f:f0:2a:85:5e:e7:47:b9:fd:27:7d:f3:4c:4c:15:d6:86:af:
a1:6f:ed:4f:c1:a3:46:23:2e:94:4a:89:96:9e:63:7b:6f:75:
5e:6a:b3:c7:f8:c0:6a:9d:e7:fe:46:fd:7f:3a:c2:c9:a1:0d:
8f:42:f9:c8:55:03:49:a5:0b:0d:b1:9f:4a:ef:3a:b7:95:e5:
d0:06:9f:e5:1b:c6:72:40:1b:84:0a:b6:fd:2c:78:45:73:49:
54:a8:4a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:17:46 2025 by rpki-client