Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
File: tWKscBwU00uy5EdexRFSpAydPTw.mft (raw, json)
Hash identifier: eqGpkNFwuD8mw5WhmCEpT/sKJFEL4qOT/ilRwmAXTS8=
Subject key identifier: 4B:FD:29:3A:B6:8E:67:3D:6F:8B:3E:28:50:31:91:B9:02:71:A7:3B
Authority key identifier: B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C
Certificate issuer: /CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
Certificate serial: 0194BCAA0592B2DC3532755F7493A9CBFDB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
Manifest number: 0511
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: J4oSsE5CcGCiSDFTMI_mpkGNGGI.roa (hash: 8nhOBC3zyNvV6fERAZhV/f/NVIfJdmZ3Tk+7d8j6/i8=)
2: tWKscBwU00uy5EdexRFSpAydPTw.crl (hash: aXYTSZeBfA5gLho+sTafFYMlBqfFtDLX2CR4y3o3VXs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:05:92:b2:dc:35:32:75:5f:74:93:a9:cb:fd:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b562ac701c14d34bb2e4475ec51152a40c9d3d3c
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=4bfd293ab68e673d6f8b3e28503191b90271a73b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:26:30:4a:4b:95:70:64:3a:5e:1b:6f:d0:a5:
06:b8:f7:ff:f4:0f:4e:d5:0d:7d:e5:c5:78:f3:51:
fc:01:2d:4d:d6:64:c0:27:45:7a:c4:10:65:07:98:
c8:fc:46:f1:53:e9:12:aa:74:a9:2b:77:46:9b:e1:
28:5c:4c:9e:85:b2:d8:a5:86:a5:93:24:fc:19:4b:
aa:13:70:61:3b:00:3c:d2:23:c7:73:9f:a4:b0:08:
6c:c5:88:5a:05:a7:99:c7:4b:94:44:a3:df:ba:8f:
0b:69:8b:05:4d:0e:df:72:b8:e3:95:8a:59:47:04:
f1:14:50:18:79:2c:3d:7e:55:9b:a7:2a:aa:b3:9d:
3c:c2:49:3f:10:e8:6a:ec:6d:58:c4:01:4d:a6:6c:
92:75:6b:6e:bb:cc:4d:d8:c5:f3:91:ed:34:14:13:
75:b7:91:e9:b3:c0:e3:27:22:cd:35:a0:ee:cb:bf:
f7:ef:7f:2e:3b:48:f5:1e:c3:3d:d1:70:07:37:4d:
75:b3:1a:42:13:ce:06:84:fb:a3:d3:d7:38:df:61:
76:3c:31:1c:5c:14:3d:36:e5:f2:9b:0a:59:01:cf:
18:9c:2e:b8:69:2b:e8:c7:88:4c:1d:73:8d:ef:ef:
84:b3:09:43:14:41:30:d1:76:f6:82:4e:e6:d8:b9:
34:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FD:29:3A:B6:8E:67:3D:6F:8B:3E:28:50:31:91:B9:02:71:A7:3B
X509v3 Authority Key Identifier:
keyid:B5:62:AC:70:1C:14:D3:4B:B2:E4:47:5E:C5:11:52:A4:0C:9D:3D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWKscBwU00uy5EdexRFSpAydPTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/8f01b3-257b-48d5-82e2-097324dd9ec8/1/tWKscBwU00uy5EdexRFSpAydPTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:41:4c:32:ea:23:ce:67:94:5d:16:33:41:96:89:a1:53:ba:
50:02:c1:0f:9e:8a:b9:5e:63:9b:4a:79:1f:06:c1:a2:57:f1:
34:45:4a:b4:6f:4b:7e:fb:09:10:8b:00:2b:bb:e9:20:8c:da:
53:ff:37:ee:d0:8b:e5:dc:e3:f2:26:27:e7:1d:64:ba:79:47:
a9:be:fa:d5:63:89:3f:68:fb:76:cc:3f:18:0c:97:a5:18:f4:
64:29:40:f9:b5:46:59:2f:a3:42:8e:cd:2c:85:a1:93:fe:e9:
66:c7:dc:1a:96:99:66:a0:28:98:32:0d:e8:67:e9:c7:c1:3a:
6c:22:9d:3e:74:b9:8a:29:00:d6:ec:38:63:b5:9f:98:2e:d5:
8b:c5:8c:52:40:53:e6:2f:67:b2:be:40:bd:77:9b:72:a7:51:
80:d4:23:3d:61:10:15:7c:f9:9f:e6:2a:4d:61:4b:3f:43:2a:
92:9c:c9:07:26:c9:6f:30:45:ec:38:c3:81:9a:06:3d:32:f1:
44:f0:15:d8:63:54:26:11:3d:d8:bd:51:ae:9b:48:b3:94:f4:
af:d4:fe:78:d9:ba:eb:e7:c5:81:f7:e0:0d:a4:93:e4:c7:2f:
e5:3c:47:51:38:76:ec:a4:89:c5:bc:d8:0a:8c:c9:a4:ef:85:
f3:21:92:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:14:37 2025 by rpki-client