Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
File: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft (raw, json)
Hash identifier: ITf0PPZC2kkWy0lyg/rFBf5ket6u43od4zeF0JPHqlc=
Subject key identifier: 32:4D:06:F2:77:6C:0D:46:74:8B:78:E6:FF:CB:35:38:77:7B:A9:1E
Authority key identifier: B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
Certificate issuer: /CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Certificate serial: 0194BD8567C7CEDB99F1E5098CE9BAFDF67C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: QdWm_iYTkmRwOlae6fa_m0n_xoY.roa (hash: GAwdxYROZcqJfJWKya6QGN1+Dp1F3FkjXyRiudeAVk4=)
2: tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl (hash: l2OZ0b4agXE091s7/7++uoRYctIHNavMNd13IG1S9hA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:67:c7:ce:db:99:f1:e5:09:8c:e9:ba:fd:f6:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51ec4e58bd44ebac789548f319e69cc9a53211f
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=324d06f2776c0d46748b78e6ffcb3538777ba91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bd:62:8e:d7:f2:6f:f3:fe:da:ff:63:5d:b3:
cd:40:ce:c6:16:8d:a7:ff:5a:6e:25:0e:89:5d:90:
a7:7e:73:0b:0d:43:d9:b4:08:6e:bc:dc:28:34:d4:
fe:08:2c:f0:f2:9e:81:7e:a3:98:6b:5f:90:8c:73:
89:0f:e0:3d:ec:60:c9:a9:ef:cc:0e:9d:d8:e7:97:
f9:3f:9e:45:c7:ff:97:0d:b3:72:f7:b2:90:11:fb:
b5:5a:7f:8c:e4:ca:f4:bc:65:e4:85:69:b7:d3:c5:
d1:17:7d:5d:82:df:ad:e0:a2:ed:07:2c:e0:0f:5b:
dd:1a:93:14:14:f2:ea:25:4e:03:6a:b9:93:57:8b:
5b:ad:64:a5:92:d8:a8:49:47:8f:be:e8:98:43:1c:
d8:88:60:8c:50:27:f4:a8:55:67:84:92:b1:07:ce:
94:a6:7b:0b:dd:97:0c:2c:ce:e9:5d:3e:75:a0:1b:
52:80:19:0d:20:ff:e2:d6:ae:85:fb:a1:7b:8a:cc:
00:b2:cb:5d:2e:3f:49:33:d5:4f:7f:c6:39:4a:7b:
3e:46:5c:60:11:e7:11:5a:84:e2:72:e1:34:95:0c:
25:5c:dd:73:6b:93:bd:b9:5f:98:ca:d2:fb:e1:76:
e4:ed:48:69:b7:23:42:ff:2e:93:e5:7d:b4:65:7e:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:4D:06:F2:77:6C:0D:46:74:8B:78:E6:FF:CB:35:38:77:7B:A9:1E
X509v3 Authority Key Identifier:
keyid:B5:1E:C4:E5:8B:D4:4E:BA:C7:89:54:8F:31:9E:69:CC:9A:53:21:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/cb8930-c063-41e2-805d-a7e4bb415cfe/1/tR7E5YvUTrrHiVSPMZ5pzJpTIR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:c6:bb:fa:46:57:4d:ce:d4:71:8f:0e:10:d3:bc:84:60:d5:
8b:fb:36:20:f4:1e:64:5f:22:a2:f7:5c:3c:7f:ba:4f:80:c8:
4e:af:e1:4c:a9:14:e3:f2:a6:5f:d7:68:c3:47:5f:bf:94:4f:
71:88:b1:fc:ce:a6:2b:f9:7b:b1:38:01:66:3c:b4:a4:09:33:
63:9a:2a:2f:36:1b:a2:50:ff:ad:3b:cc:ce:c6:c8:05:b2:40:
67:d3:b1:5d:18:85:d4:e1:3d:ac:4a:9e:b5:87:53:9e:76:bd:
6c:22:cd:74:8d:75:f7:3f:70:af:c9:f0:82:d6:87:56:09:ec:
96:ef:85:b3:c0:22:6d:98:90:e3:34:a2:2c:5a:0a:ba:d9:6c:
97:b4:53:1c:de:f1:e3:d0:f8:f1:c9:ff:9b:95:5d:de:76:7c:
22:12:7b:f3:a1:f1:a7:72:71:f9:fb:68:23:85:f1:9c:53:91:
1c:5a:16:bf:e0:7b:5f:94:d1:ac:dd:8c:6d:e8:33:4f:ad:dd:
8e:1c:b1:8c:a8:d4:4f:3e:5f:8a:3a:85:29:ae:30:02:20:08:
3e:c8:d1:c6:2b:8e:56:31:37:28:15:f9:70:eb:ad:af:60:7a:
76:da:95:ea:c8:87:52:1c:8b:90:a0:c4:da:22:60:c1:cc:c3:
bc:33:d6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:58 2025 by rpki-client