Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
File: TuQFf56gFAzvfOR4k2nFzwH3xo4.mft (raw, json)
Hash identifier: mKsyL8TOS1VrKiRvUlJ3ONvM699N1EP7ThXCkuqFzB8=
Subject key identifier: 67:95:A7:EE:D3:30:3B:F9:BD:AA:EF:F5:19:5C:46:6B:A8:73:87:D6
Authority key identifier: 4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
Certificate issuer: /CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Certificate serial: 0194BBCE027C706FE45C8EE8EFC961C201E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
Manifest number: 1280
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: CEuXJrDVGtc7Z4aBHwivyFbJk6I.roa (hash: YlEuDFYK1ghHbSy2lJ7W4OAiAQ8b74GXZr4K2Q1Nk+o=)
2: TuQFf56gFAzvfOR4k2nFzwH3xo4.crl (hash: +ADvQoALCfDr9sqFLwE/fu2vjbeiyrlymN4nLcU3M7Q=)
3: zQYGnUVB4bBy-t9A3BsXP2JPTI8.roa (hash: yYhiUqDeYjOIAS1CW8QCSgxrWRWrSjdPUM0N7RvDxVg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:02:7c:70:6f:e4:5c:8e:e8:ef:c9:61:c2:01:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee4057f9ea0140cef7ce4789369c5cf01f7c68e
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=6795a7eed3303bf9bdaaeff5195c466ba87387d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:fa:1f:f8:74:1f:6d:8a:db:e7:64:ed:4c:e0:
74:95:84:9e:43:07:7b:94:5b:21:65:69:16:9e:84:
a9:16:56:4b:fa:89:7c:3e:84:30:af:c3:98:9e:f2:
1b:64:9f:f8:a4:7d:c2:52:71:42:ea:5f:9e:f2:3e:
e4:e9:3e:bf:d5:33:1b:d5:fb:8a:81:a0:ae:a0:b3:
f9:f5:36:83:58:8b:cd:79:42:53:16:ed:24:51:3f:
71:7a:93:d2:e9:12:bf:d5:46:50:ba:3f:4f:4d:35:
45:a1:e5:8c:f9:a9:a2:26:af:7e:48:ef:93:66:63:
3c:03:ca:b6:6f:30:63:07:f1:08:32:05:a1:e0:43:
76:33:11:9e:8d:21:0b:f6:57:c5:5c:15:3b:22:79:
88:12:4f:4b:ac:01:e1:53:73:2a:a4:60:87:cd:a9:
3c:04:1d:82:e7:5d:81:48:03:ae:54:95:10:9e:a0:
5e:83:76:5f:88:8d:1a:28:76:78:eb:f1:d7:9f:c0:
ad:a5:dd:57:ab:b5:0f:35:7d:09:8b:15:1f:b4:e6:
21:34:70:c6:02:78:00:ca:52:d2:5e:61:6e:fd:1a:
b1:ea:29:2b:61:0a:b6:cc:b9:5c:2d:e8:b0:1e:8f:
2f:32:e2:11:b3:e8:85:eb:66:47:64:f0:e6:00:59:
a3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:95:A7:EE:D3:30:3B:F9:BD:AA:EF:F5:19:5C:46:6B:A8:73:87:D6
X509v3 Authority Key Identifier:
keyid:4E:E4:05:7F:9E:A0:14:0C:EF:7C:E4:78:93:69:C5:CF:01:F7:C6:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuQFf56gFAzvfOR4k2nFzwH3xo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/cf2ebf-2a09-43d2-a225-a165359a6211/1/TuQFf56gFAzvfOR4k2nFzwH3xo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:bf:f3:1d:53:d6:93:df:40:7a:b6:95:4b:ed:ba:53:23:f1:
a1:1f:93:c9:a3:7b:04:1c:d5:80:96:2f:c4:16:2a:59:07:d4:
98:5f:65:56:71:0c:9b:b4:0e:83:d3:03:13:05:43:d6:dc:e2:
84:06:82:27:a9:7a:6a:84:85:ba:7b:a1:a6:c7:82:ef:f5:d7:
59:fd:43:70:7b:19:b8:fa:df:64:03:cb:8f:cd:5a:b8:18:91:
8d:e1:50:d4:45:53:fb:f0:43:a6:ab:2f:36:58:92:37:66:0f:
41:67:34:c0:11:b2:bb:7b:c5:36:09:10:52:b5:8e:e7:f2:1e:
1d:89:50:7c:b4:b1:f5:1d:e1:a7:9a:64:13:8e:48:64:22:4c:
49:c6:93:fc:c5:43:9c:70:f4:e2:be:5a:3c:ee:79:05:e0:fb:
29:84:1d:96:99:60:1b:14:3d:f8:38:f3:93:72:70:b8:80:b5:
92:96:a8:b2:1b:db:5b:c3:67:06:a1:a8:88:ce:bc:7d:c3:05:
d0:be:bd:ab:08:e3:d1:06:45:a7:61:e2:78:a7:0f:f1:16:83:
6d:81:2b:fc:7a:bb:d8:4f:b9:f9:5d:6f:9d:a4:80:49:a7:14:
ed:4c:6b:c4:13:bc:7c:62:ff:33:05:56:ae:46:e6:fb:fd:2d:
a4:a6:4a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:28:48 2025 by rpki-client