Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
File: tNftFLjVGiC67HtmDwioDNz4F78.mft (raw, json)
Hash identifier: fIuMLkQuKh8sD4Maiu6SCeIvQrvqnerqnfBvas7fbdg=
Subject key identifier: C9:B5:88:90:8E:EB:23:28:EA:51:F1:A5:F1:A6:D0:41:61:5B:E5:F7
Authority key identifier: B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
Certificate issuer: /CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Certificate serial: 0194BBCE35FE87646283A2EF5D117F10B6C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
Manifest number: 1388
Signing time: Fri 31 Jan 2025 10:00:40 +0000
Manifest this update: Fri 31 Jan 2025 10:00:40 +0000
Manifest next update: Sat 01 Feb 2025 10:00:40 +0000
Files and hashes: 1: OM4t4OW9a4XttmaFZY8Bn-w6jbg.roa (hash: DmkHGMMM4hGlOMn88DTYYZs4Yt8OwadtPJdq+/2U9PM=)
2: YVY9twtvMqgJ8wFpvv3lKZVmEkQ.roa (hash: 17qlPl9D+uyL5rzeTz5pj3TELME7ziHzDZ+/fRR9Vec=)
3: hf7G7f2GKh-xq_6FwWJ7akbGeyc.roa (hash: Rev50xXWhkRr6d+WZahnHIduQTzb2WHCbxumZzoXJSU=)
4: tNftFLjVGiC67HtmDwioDNz4F78.crl (hash: qWFpyMG9hyDyNt2jBYjsDfm/CvpI0dJkLFUrUNx4iyI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:35:fe:87:64:62:83:a2:ef:5d:11:7f:10:b6:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d7ed14b8d51a20baec7b660f08a80cdcf817bf
Validity
Not Before: Jan 31 10:00:40 2025 GMT
Not After : Feb 1 10:00:40 2025 GMT
Subject: CN=c9b588908eeb2328ea51f1a5f1a6d041615be5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a0:a8:da:ec:e4:36:80:28:bc:84:78:ba:20:
9a:6f:81:eb:7d:18:b1:40:82:2d:76:53:04:01:82:
76:ef:6e:24:50:ce:9b:24:6c:94:b8:71:b3:bc:f3:
18:a4:ea:88:fd:c7:d4:a8:c2:af:90:a4:f7:52:45:
f8:fe:63:d3:70:3d:ef:c5:1c:29:12:0d:a8:b9:a9:
93:af:97:1d:d7:56:43:f7:83:9e:3c:d8:53:f7:5b:
22:6a:5c:66:98:ea:cb:f2:74:c4:3f:96:f9:e6:ab:
99:14:38:32:12:a3:02:e1:ad:09:35:f3:cc:2f:a5:
1c:a2:34:74:9f:ab:c0:59:c6:a8:41:af:9e:ef:d3:
cc:bc:06:58:91:45:a1:96:a9:17:c1:87:61:6c:f5:
4f:01:0d:75:4e:bb:cf:da:67:a0:a8:09:b5:a3:8e:
71:8a:d4:56:72:08:da:b6:8f:8d:aa:dc:6f:bc:bd:
a6:d1:5d:36:7a:a0:2b:02:32:46:c6:2c:78:39:e2:
23:c6:c5:8d:52:1f:15:58:e4:05:ca:c4:2c:78:31:
c7:ba:3e:9f:6e:73:11:de:c6:bd:31:4e:ed:39:42:
3d:e3:32:01:a2:15:c9:3a:f5:5d:a8:e5:2e:03:b6:
d8:f5:f2:45:8f:f3:20:ff:87:f3:f5:7e:d3:ef:4e:
56:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:B5:88:90:8E:EB:23:28:EA:51:F1:A5:F1:A6:D0:41:61:5B:E5:F7
X509v3 Authority Key Identifier:
keyid:B4:D7:ED:14:B8:D5:1A:20:BA:EC:7B:66:0F:08:A8:0C:DC:F8:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNftFLjVGiC67HtmDwioDNz4F78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/132ba8-7676-49f6-afcc-7d0423bda74c/1/tNftFLjVGiC67HtmDwioDNz4F78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:e8:c2:f4:f3:58:a1:6e:83:95:a1:50:d7:90:75:6a:c7:37:
08:a0:a8:9b:f2:1e:a9:e9:70:0a:97:72:3e:58:f7:ac:76:8b:
be:05:87:ab:06:43:5b:4c:f6:85:a6:ed:d2:55:68:b1:7c:cf:
2f:7d:71:a8:59:a9:2a:cf:93:47:85:7d:cc:41:51:b6:a6:2f:
34:b0:d5:bf:35:00:6c:2c:04:93:63:d2:93:e0:04:ae:da:3e:
cf:b6:bc:77:77:6e:ce:7d:90:ce:7f:04:16:98:99:d0:dc:cb:
a8:08:12:da:f5:fc:90:8d:b9:f6:93:fb:03:a6:a7:d6:31:97:
07:9b:05:75:47:ee:7b:0d:d3:a4:08:57:b7:55:3a:71:29:bc:
57:59:31:9a:ca:dd:af:ff:69:4f:09:e4:b8:a0:de:78:6d:10:
3b:42:39:ca:8a:04:73:b2:4a:83:72:94:1b:13:81:40:c0:25:
aa:1e:a4:fc:74:40:bd:10:9a:42:aa:6f:0b:30:20:8e:3f:88:
80:cc:2e:fd:23:0f:d2:ac:cf:c3:83:53:8b:1f:db:ad:89:23:
88:71:83:ca:4c:43:71:a7:1d:cc:8e:59:fd:15:9f:21:e8:25:
d8:aa:f4:dd:68:b5:e5:ac:c5:c7:b6:a5:a9:e6:cc:87:de:6e:
78:e1:67:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:39 2025 by rpki-client