Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
File: T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft (raw, json)
Hash identifier: QktzJbyJB8lo6Fw9IVS+Qa7kcsAQ1zv178z0YrxlSFI=
Subject key identifier: E8:55:20:60:47:5F:93:91:5C:45:DC:C7:4C:C2:5C:1A:D1:C6:8D:D0
Authority key identifier: 4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
Certificate issuer: /CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Certificate serial: 0194BC3C3616B56E86C2CE8CBBBD0B4F4181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
Manifest number: D5
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: S0SO0HyBkdo3a_iLFGbpFh-3688.roa (hash: 4aaFEmUhkZXusyFZ1zN2v+eLcgATutmFWhO+KpO/kig=)
2: T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl (hash: svJGvomIW+Gnf4pUxrAgl3//NTiNoUVrRCyOA4GB+ME=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:36:16:b5:6e:86:c2:ce:8c:bb:bd:0b:4f:41:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd207fc5ad0773c3d8e93e4b30619c13ba81cb4
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=e8552060475f93915c45dcc74cc25c1ad1c68dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:4a:d9:32:4f:f6:c6:28:f1:7d:6f:4d:09:56:
d9:ea:3c:c3:e4:7e:05:cf:11:c1:cf:3e:6a:ce:ed:
95:0c:3d:de:f6:f3:1a:73:21:11:b2:a2:f8:36:31:
7f:73:d4:0e:de:09:d4:e5:28:ed:67:17:5b:80:c9:
07:db:2b:8b:c0:b0:64:53:df:4a:5f:8d:17:c3:f7:
7f:56:81:e9:88:f2:f0:a4:51:42:fa:a8:e6:a1:4c:
02:f3:f8:b9:b0:00:1d:89:4d:59:d4:34:9c:cb:e4:
93:f6:63:69:1f:70:59:91:e3:9e:12:7d:b0:8a:f9:
5f:ec:b5:ff:a3:6d:56:db:f2:3e:51:31:39:c0:ad:
c6:d7:0f:55:72:73:cf:a8:4c:72:4a:2b:fa:0d:b4:
cc:86:c5:7c:6b:7b:e6:1d:cb:e3:fc:16:22:d6:a4:
54:69:51:be:7e:54:56:7d:e5:1c:12:7d:d1:56:35:
33:c4:0c:56:0d:8f:df:d9:e6:24:24:d8:4b:aa:82:
53:38:df:02:8e:32:4d:f7:12:04:f7:49:32:ee:35:
02:17:64:05:1e:f9:e5:f4:e0:94:21:56:63:82:0b:
b1:5b:72:0a:41:8d:d2:6c:6b:6d:75:8b:76:f1:36:
9e:54:53:6b:79:26:44:7d:8f:46:7c:75:08:9a:1f:
88:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:55:20:60:47:5F:93:91:5C:45:DC:C7:4C:C2:5C:1A:D1:C6:8D:D0
X509v3 Authority Key Identifier:
keyid:4F:D2:07:FC:5A:D0:77:3C:3D:8E:93:E4:B3:06:19:C1:3B:A8:1C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9IH_FrQdzw9jpPkswYZwTuoHLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/bff465-b547-4152-a765-47dfdf2b0fd6/1/T9IH_FrQdzw9jpPkswYZwTuoHLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:68:f2:e7:e2:5f:33:be:18:dc:6c:97:9f:55:be:ca:25:f1:
9f:fc:1f:47:f1:ac:d7:90:f9:e8:db:a1:57:79:ba:69:00:a1:
e5:ed:4c:dc:f0:f7:0a:d7:1a:f6:3b:ff:a6:11:94:05:d7:57:
01:5f:4a:03:95:2c:52:d4:e6:28:1d:44:5a:3d:be:5a:63:bf:
09:d9:a7:a4:8a:2d:74:1e:5a:48:50:b1:d3:e6:04:0e:97:d7:
33:5a:10:52:ee:ad:4e:3b:63:96:0b:2c:5f:f0:54:85:a0:7a:
f8:f3:5b:cf:58:d8:a1:71:78:d7:da:ac:47:02:df:1c:9a:8a:
23:21:77:22:7c:9e:a4:39:24:59:75:b6:d3:da:1a:0a:56:5d:
e2:f5:49:e4:59:68:55:01:f7:92:5e:45:65:48:01:b1:80:65:
be:4a:72:06:5e:66:21:c2:6d:ce:73:79:98:80:5c:d0:7f:21:
6e:f2:25:e3:ea:1f:b9:93:76:af:4d:ad:a8:a4:8c:de:7a:1f:
6d:fe:c3:0b:9e:d8:3c:46:2b:27:8f:8c:57:2f:1b:53:1b:60:
ad:f2:d4:ff:bf:06:fe:8d:2b:c6:a5:34:e7:2f:d0:1e:38:ba:
94:0b:90:50:a5:ee:90:2d:d0:a2:42:d5:ec:b3:93:7f:33:29:
3f:cb:58:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:47:11 2025 by rpki-client