Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
File: 1tk74RT4LQJYkWqXjKy_sVu1hAo.mft (raw, json)
Hash identifier: l78RnIkS7dN/uJV/NhxS7+UZOtsGJaObEPbHODyTWjs=
Subject key identifier: C5:AF:D3:B9:E6:E8:A9:F9:58:D0:AD:AF:67:AC:5B:97:EA:2D:0A:14
Authority key identifier: D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
Certificate issuer: /CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Certificate serial: 0194BCE0D0D53F416ECCB38211AA2FBE063B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
Manifest number: 0E9F
Signing time: Fri 31 Jan 2025 15:00:37 +0000
Manifest this update: Fri 31 Jan 2025 15:00:37 +0000
Manifest next update: Sat 01 Feb 2025 15:00:37 +0000
Files and hashes: 1: 1tk74RT4LQJYkWqXjKy_sVu1hAo.crl (hash: RB3RglOr12veMRTX4XxULN0y2jxb/Cj3FteCmycj0qI=)
2: EjxEvyFrbjIutBBjgjTn5G6eW5c.roa (hash: dmAYBtW0oaeyULNatDjSeKws5fd+ZFknimkAFUD4KMQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d0:d5:3f:41:6e:cc:b3:82:11:aa:2f:be:06:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Validity
Not Before: Jan 31 15:00:37 2025 GMT
Not After : Feb 1 15:00:37 2025 GMT
Subject: CN=c5afd3b9e6e8a9f958d0adaf67ac5b97ea2d0a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:a5:79:86:e9:6e:60:8f:41:e6:da:40:8f:54:
dd:f3:d0:09:ef:51:9d:be:e5:06:23:a7:c9:c2:fc:
cb:60:77:f6:57:21:e8:68:de:2d:63:9f:55:b2:83:
12:9b:4a:c8:92:16:ff:64:a5:80:14:1a:88:6c:4a:
6a:ba:09:c4:0f:e3:af:17:5b:e9:00:6c:fd:7c:d2:
0a:0d:a0:ff:7d:bd:d8:be:1e:1a:5d:9f:b9:e2:45:
5e:18:a5:a0:07:12:6c:49:9f:92:50:1d:30:e5:83:
7f:2f:88:1a:35:44:09:d5:d5:7e:06:8e:c8:b1:b9:
44:1e:7c:86:e3:52:0a:4a:63:e6:29:52:a7:23:fa:
5a:3b:6f:9c:0d:fd:f2:58:b7:00:81:f5:d5:15:9c:
a1:85:bb:f0:73:57:71:7a:4f:b5:ae:3a:41:05:20:
4f:48:d9:13:b3:e7:6e:bf:96:05:ce:39:96:cd:34:
64:48:67:29:75:f8:65:0b:43:48:fe:27:83:79:51:
c4:ff:cf:40:75:b2:23:80:c6:34:d4:45:ab:9d:ee:
3d:79:13:93:d6:84:20:40:fc:2b:f6:3b:0a:73:0b:
e5:64:97:c6:e2:9d:4b:fd:9e:23:a6:74:43:c5:f6:
2f:fd:ca:15:7f:8d:56:97:f4:94:79:c7:fe:e9:67:
9c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AF:D3:B9:E6:E8:A9:F9:58:D0:AD:AF:67:AC:5B:97:EA:2D:0A:14
X509v3 Authority Key Identifier:
keyid:D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:db:b8:82:cd:c8:7b:fe:74:35:29:e7:99:c1:64:c5:6c:44:
23:12:ff:59:82:7b:97:68:1b:27:da:62:ee:ab:8c:90:47:a2:
43:0a:1f:ce:8e:f6:5f:d1:e5:07:76:90:1f:ae:48:a8:ea:d1:
62:eb:22:c0:71:46:bc:cc:3f:30:59:ec:b0:d0:20:fa:97:ec:
d8:7e:d9:94:7b:06:bd:07:5c:f4:f7:e9:a5:f4:e1:0a:67:49:
89:47:ae:42:2f:45:df:ca:02:c4:3f:35:e6:26:30:c9:9b:b4:
92:5a:5e:26:97:9e:ea:01:2f:ae:2d:91:67:c6:7f:a0:46:78:
b6:60:6a:5a:3a:c0:ac:ab:34:f0:11:f4:a0:50:6a:92:b8:bd:
8b:35:06:1a:8a:ff:17:b4:1e:6b:5f:8b:5a:7a:d2:a1:c1:4e:
18:9f:45:a3:7f:e3:38:0c:22:4a:e4:bc:9b:85:8f:ed:e5:8a:
9a:e3:67:12:e0:6a:57:9d:a7:0a:c0:ee:40:f9:dd:40:41:32:
22:82:68:fd:38:c5:79:02:6e:44:da:d3:0a:e8:1e:86:d7:3c:
79:8c:2c:70:35:8b:82:13:f9:32:51:bf:ff:f7:86:e4:e6:4f:
44:fe:cd:a6:03:09:ee:21:29:3f:dd:9e:cf:92:a2:7e:84:75:
f0:63:a1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:42 2025 by rpki-client