Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
File: Tom7FOgJr_PsljCL2a6GUafndio.mft (raw, json)
Hash identifier: o3XAKicqdHz992GGOiVP0BS6dj1rEk2movxXw9CoZeQ=
Subject key identifier: 40:51:68:31:18:C3:C8:1A:D6:87:A6:38:A5:00:C2:C9:90:39:95:88
Authority key identifier: 4E:89:BB:14:E8:09:AF:F3:EC:96:30:8B:D9:AE:86:51:A7:E7:76:2A
Certificate issuer: /CN=4e89bb14e809aff3ec96308bd9ae8651a7e7762a
Certificate serial: 0194BC3C1B1404CB6FAA1C7AEADE06B6BEA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:43 +0000
Manifest this update: Fri 31 Jan 2025 12:00:43 +0000
Manifest next update: Sat 01 Feb 2025 12:00:43 +0000
Files and hashes: 1: Tom7FOgJr_PsljCL2a6GUafndio.crl (hash: t99otVNX2D2zO06AaPGVn59Jdm8Zbnt7+zsWiB95/iU=)
2: fxuqWXx_O_zewgAff6HXjyvgKp0.roa (hash: cm4JBhg0Zq8hHGX0z/7BWc/vnIZVK86NCDFtwq+RrhA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:1b:14:04:cb:6f:aa:1c:7a:ea:de:06:b6:be:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e89bb14e809aff3ec96308bd9ae8651a7e7762a
Validity
Not Before: Jan 31 12:00:43 2025 GMT
Not After : Feb 1 12:00:43 2025 GMT
Subject: CN=4051683118c3c81ad687a638a500c2c990399588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e6:25:67:01:20:bf:00:3e:ba:0c:54:39:ee:
ae:27:fc:21:11:bf:42:73:1b:f2:17:dd:dc:3a:05:
0c:ba:fa:c8:9c:d7:f5:db:e0:81:3e:e0:f8:2f:d6:
bc:e1:31:ea:a3:f3:89:a8:8b:11:c5:83:da:34:c4:
dc:76:d3:08:47:7b:e7:58:f9:27:cd:22:86:6f:2a:
7e:75:a4:aa:30:79:31:9f:f5:b5:01:2a:f0:a2:1d:
ef:18:59:f5:59:17:18:71:6a:d3:b4:95:87:47:d8:
d1:c4:89:44:a1:22:e1:bb:65:21:62:f6:c7:af:19:
76:fa:01:4b:6a:52:1b:8a:6a:8d:27:15:a8:e4:24:
ce:00:fa:cb:ae:00:62:f5:19:fb:72:67:21:8f:b1:
31:0a:68:82:f1:13:43:6f:a3:49:36:3b:ac:48:80:
57:20:6a:66:55:89:7b:a6:da:d5:57:1c:5c:a8:05:
b2:2c:ca:f0:69:9e:e5:65:f5:37:62:85:29:47:82:
bb:11:ba:d2:ad:31:c6:b7:ac:38:66:4e:84:94:55:
aa:46:19:19:f4:6f:4c:51:83:aa:03:ed:ca:e7:60:
e6:30:79:85:60:e9:66:b9:ea:59:22:34:a3:42:fd:
2e:cb:d1:ba:7b:54:b9:00:90:5a:4f:b8:28:13:15:
fe:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:51:68:31:18:C3:C8:1A:D6:87:A6:38:A5:00:C2:C9:90:39:95:88
X509v3 Authority Key Identifier:
keyid:4E:89:BB:14:E8:09:AF:F3:EC:96:30:8B:D9:AE:86:51:A7:E7:76:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tom7FOgJr_PsljCL2a6GUafndio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ae3cc8-ce74-4d57-819a-9fa02cc248e5/1/Tom7FOgJr_PsljCL2a6GUafndio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:93:8a:0e:7f:5a:fe:d8:f5:91:eb:8b:0d:f4:29:04:c4:27:
cf:1b:84:ee:b3:f8:5a:b8:2b:e0:a1:1b:13:f2:b0:99:36:55:
5b:13:89:ac:7d:58:20:c1:07:82:d0:43:c5:b6:12:6a:f2:b0:
c3:39:8f:1f:19:d1:1b:4b:c3:2d:8a:cd:80:37:e2:1b:bd:00:
3e:44:70:90:eb:77:3e:77:9d:c1:0c:57:79:fc:5e:7e:c5:d0:
65:33:44:54:c7:22:10:18:ef:ea:59:af:f6:62:70:15:33:84:
c0:4a:42:8e:62:b3:45:3e:ab:2c:30:a8:eb:e7:d9:12:10:df:
40:b2:2c:e4:0f:04:4f:32:c3:e9:43:43:2c:c9:c1:e5:7e:04:
e5:d8:fa:dc:2e:88:b0:5f:e8:e2:1d:b7:57:79:21:00:e0:cb:
06:f8:51:de:21:58:37:ea:a0:3e:c8:22:fd:b6:23:c7:99:fa:
f3:b8:e6:03:01:95:56:a2:57:f2:05:13:0c:80:40:d1:ff:2b:
6b:bc:4a:b3:22:fd:c5:b3:d2:13:23:34:b2:bd:47:f8:5b:e8:
39:f6:ee:c2:11:98:de:cb:0a:26:d5:f2:3c:39:f5:26:1c:28:
74:81:b6:c2:7f:f6:b0:db:90:66:4c:6a:c7:dd:81:3d:21:75:
3c:f1:da:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:52 2025 by rpki-client