Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
File: tMflb0aH6hstd2PQiI0QUCNbV0s.mft (raw, json)
Hash identifier: AhpJAjjf9LFkilgZNrajbXwGuC7J/I8vPK2pqYeqnT4=
Subject key identifier: DF:B0:48:37:9A:DF:CD:D8:34:1E:98:EF:07:EE:CB:C8:C1:13:79:35
Authority key identifier: B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
Certificate issuer: /CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Certificate serial: 0194BD4EC5CC72AB4BE178E5CBBB5BB8045E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 17:00:43 +0000
Manifest this update: Fri 31 Jan 2025 17:00:43 +0000
Manifest next update: Sat 01 Feb 2025 17:00:43 +0000
Files and hashes: 1: fVF1mzV7lYVHRMo8LnZ24vMBIsw.roa (hash: xj9vjyKVHbKjwLJzRwcUb2ujBs2KI8YOtyKmg5bMiko=)
2: tMflb0aH6hstd2PQiI0QUCNbV0s.crl (hash: v6X1CdBsibX3iXV2lLpoG3lW6U+vw0Tw3y6l2xy8mrw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c5:cc:72:ab:4b:e1:78:e5:cb:bb:5b:b8:04:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4c7e56f4687ea1b2d7763d0888d1050235b574b
Validity
Not Before: Jan 31 17:00:43 2025 GMT
Not After : Feb 1 17:00:43 2025 GMT
Subject: CN=dfb048379adfcdd8341e98ef07eecbc8c1137935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:33:8e:26:97:77:51:a1:fc:1d:1b:e4:6d:57:
6d:b9:90:6d:68:0b:10:7d:40:6b:e1:cd:b3:1b:d1:
47:61:75:01:f7:51:2b:bd:fa:26:f8:7c:90:43:6f:
e8:f5:9c:a8:b8:be:19:16:d1:ee:37:2e:7a:8d:22:
ff:87:b0:d0:10:42:ff:7c:b4:cb:b4:b2:c5:19:e1:
33:a3:74:19:c5:89:6c:08:f2:20:47:a2:c6:28:54:
96:94:db:28:27:49:b9:ba:98:69:5f:da:89:17:48:
5e:0f:12:77:51:af:67:d8:76:fb:c5:b9:3e:53:6d:
76:84:6d:ab:36:18:6e:77:bf:e8:73:85:bb:b1:e2:
03:68:5c:5d:7d:a9:31:23:0c:f0:ae:88:3c:34:85:
0f:94:77:33:13:db:2a:f4:14:a0:65:95:66:ca:78:
3b:d1:52:01:71:7a:5e:3b:d4:8b:38:de:86:f6:26:
85:b4:e7:2a:f9:16:78:05:0c:a4:91:b8:d2:8a:b0:
13:ab:c5:21:1b:9a:49:50:cf:43:df:ab:98:19:b7:
1e:ef:14:91:e6:e1:5d:f3:94:0b:6d:ff:73:11:5f:
fc:08:3e:1e:04:6b:55:08:62:1b:74:eb:96:17:4c:
e1:70:94:ef:4e:18:f2:f4:74:1a:c7:ba:5b:29:f1:
fb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B0:48:37:9A:DF:CD:D8:34:1E:98:EF:07:EE:CB:C8:C1:13:79:35
X509v3 Authority Key Identifier:
keyid:B4:C7:E5:6F:46:87:EA:1B:2D:77:63:D0:88:8D:10:50:23:5B:57:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tMflb0aH6hstd2PQiI0QUCNbV0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/851902-5050-46b2-b452-0599f0b2b09a/1/tMflb0aH6hstd2PQiI0QUCNbV0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:1d:64:34:30:3b:f8:f6:0b:e3:70:cf:d2:8e:e7:12:47:4b:
b6:ee:c0:58:7e:ba:dd:68:0d:e4:36:76:7e:a0:86:03:0f:13:
40:6c:00:d7:13:c5:fc:56:88:5f:a0:b2:ea:84:69:3c:f6:5e:
59:a3:e6:d2:aa:89:70:e1:7f:63:f9:90:8a:dc:59:03:45:54:
d0:22:46:3b:dc:d3:a7:9a:5a:2e:39:08:f3:51:20:f6:96:10:
be:78:60:29:e4:19:e7:fc:01:5d:7c:3b:a8:72:b7:38:d3:f8:
ab:8d:b5:2b:3e:21:26:5e:23:c1:a6:e4:4b:02:c9:85:a8:76:
71:c3:d6:8a:f7:83:8e:3b:32:ac:aa:c9:b7:91:14:48:4d:f0:
28:11:64:6b:af:06:a2:2b:de:5e:c7:3b:7c:fb:1d:bd:b1:41:
6f:bd:86:98:93:eb:76:79:66:84:28:62:ff:e8:79:fd:fa:a9:
76:e4:31:6e:93:c7:c3:fa:15:b3:bf:88:06:52:45:dc:c0:96:
63:5c:44:ba:d5:c9:ff:26:e5:3f:3d:ff:dc:0a:70:57:c2:66:
32:b5:63:35:24:f6:c0:2b:b8:0b:73:e0:20:0f:f1:d0:fa:e6:
fb:38:1e:68:98:0b:03:f5:5b:ae:fb:ff:b2:ff:33:ad:33:cb:
07:d5:8c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:41:48 2025 by rpki-client