Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
File: T893EF-VB1zlhdQn6XdU6PAHqLk.mft (raw, json)
Hash identifier: TLYRAcTqq+RCQfmfjBeitBo1xanuZRbLyl/Pynuu4Vc=
Subject key identifier: 4F:7E:F5:9C:B4:14:A0:DC:32:02:2A:9F:EA:D4:CE:3F:78:79:7A:CF
Authority key identifier: 4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
Certificate issuer: /CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Certificate serial: 0194BBCE276310477FDDEFC507CF2600E8FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
Manifest number: 078A
Signing time: Fri 31 Jan 2025 10:00:37 +0000
Manifest this update: Fri 31 Jan 2025 10:00:37 +0000
Manifest next update: Sat 01 Feb 2025 10:00:37 +0000
Files and hashes: 1: T893EF-VB1zlhdQn6XdU6PAHqLk.crl (hash: 3eni7e4kPrSE/ht9iFUd430NDDtYLV7Dzp9Cis0Y1Wk=)
2: T9LZjeWP7v9MjImSQxwCyXQEIjQ.roa (hash: ryZ/pHb+xQxL2NrfTWfDmvDfQVr6T5F6jZbDhNZwl/4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:27:63:10:47:7f:dd:ef:c5:07:cf:26:00:e8:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fcf77105f95075ce585d427e97754e8f007a8b9
Validity
Not Before: Jan 31 10:00:37 2025 GMT
Not After : Feb 1 10:00:37 2025 GMT
Subject: CN=4f7ef59cb414a0dc32022a9fead4ce3f78797acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e3:91:57:1f:1a:ef:35:fe:df:05:57:b1:dd:
6c:6a:0e:30:43:4b:f1:cf:90:ca:25:72:18:d4:8b:
26:1d:3b:a1:17:7c:12:8f:df:f2:e1:8e:94:56:bf:
1c:07:aa:77:a5:06:50:f4:e8:07:b6:4a:f2:0d:a9:
da:6a:c2:ad:67:22:97:aa:f1:37:85:ff:7c:c6:8f:
43:47:03:70:47:c2:25:70:63:dc:cb:b1:ae:c3:84:
d6:30:bd:5d:fc:db:6b:ad:ee:b0:df:88:ac:76:fb:
87:60:a4:31:a0:e0:a5:32:d9:90:5c:a0:c3:b0:1f:
24:0e:bc:98:5d:28:23:1b:4b:c2:70:5e:70:4b:aa:
21:5d:c0:ed:56:ab:35:87:1b:fe:7c:06:24:43:0d:
dd:b3:e8:df:95:db:0a:86:5c:14:e0:02:2e:7a:39:
2c:04:4d:44:e5:f7:b3:5f:44:41:f7:df:60:41:68:
67:ef:5c:5b:20:db:61:9f:cb:eb:ca:a9:6e:39:f1:
a7:21:6e:3e:5a:aa:7f:78:36:c2:0c:af:44:2b:c0:
98:00:38:4d:98:14:83:73:1e:b0:84:5d:e2:7b:43:
24:cd:d5:1b:a0:1a:e1:51:32:c4:bf:3b:a5:08:9b:
64:f3:c4:36:99:b9:3e:9e:5b:95:01:7f:3b:97:c8:
0b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7E:F5:9C:B4:14:A0:DC:32:02:2A:9F:EA:D4:CE:3F:78:79:7A:CF
X509v3 Authority Key Identifier:
keyid:4F:CF:77:10:5F:95:07:5C:E5:85:D4:27:E9:77:54:E8:F0:07:A8:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T893EF-VB1zlhdQn6XdU6PAHqLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/139ebd-5abf-4254-8933-6f97dfc10fe7/1/T893EF-VB1zlhdQn6XdU6PAHqLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:22:bb:94:ab:c5:98:0b:98:4b:a0:d1:06:47:08:5a:92:ce:
da:42:60:66:06:06:af:f2:2b:ec:c0:ff:d1:04:8f:02:4d:0f:
5a:dc:9f:54:4d:c9:71:28:0f:bc:3b:08:90:fc:aa:f9:f8:0a:
3b:5c:2a:b6:49:fc:09:91:91:50:5c:dd:38:f5:ad:8b:39:bd:
19:fb:74:a8:f3:70:6a:36:8f:42:09:a0:0d:0b:c0:8f:a0:00:
20:71:e4:c6:9f:53:8f:80:bb:a9:e2:1a:ec:b8:6b:ff:30:51:
0d:67:66:19:bb:7b:55:aa:26:41:29:c8:96:4a:9f:3e:06:7b:
50:1f:8a:67:1e:11:71:ee:e2:e7:11:38:b8:57:91:d1:3d:2f:
18:d3:27:fc:b2:77:5f:66:41:39:0b:5c:55:77:0f:f1:26:e6:
41:ec:b0:23:fa:78:4e:b7:45:a1:99:c8:d5:43:3a:09:e7:d8:
89:c1:0d:1c:8a:17:da:fe:00:9e:51:16:c2:cb:da:81:da:27:
9e:8c:40:c2:fb:59:b7:71:76:11:cb:ce:05:c1:be:84:bd:e7:
21:bd:5e:6b:d8:19:f0:c8:fc:e0:d2:e8:4b:51:25:ef:c1:8c:
99:c0:60:07:0b:d3:f1:af:e2:e4:68:90:17:74:1c:43:2c:36:
63:52:da:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:55 2025 by rpki-client