Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
File: tTRCGKSIC1AMAzMh52vXi088Flg.mft (raw, json)
Hash identifier: U5YAg2uywoQZYsz9AxWmoVAqcdvQUAEX6Awi1rcaeRI=
Subject key identifier: 2E:AD:A7:F8:41:42:58:0C:14:81:94:27:31:5A:EF:95:DE:48:0E:97
Authority key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Certificate issuer: /CN=b5344218a4880b500c033321e76bd78b4f3c1658
Certificate serial: 0194BD857E96F7717D20D79E1F74F71612B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 18:00:29 +0000
Manifest this update: Fri 31 Jan 2025 18:00:29 +0000
Manifest next update: Sat 01 Feb 2025 18:00:29 +0000
Files and hashes: 1: 8Pm542mxmtNx79Ipw8aJ3MUUUlw.roa (hash: wUyn8TfNac0yPrEyoAGwGRLxadfovmjunsKwqoO4Tic=)
2: MK5kvHBNAAlnKRq0I1CvZhVF9Ng.roa (hash: ku7EY/yVBZoDpf18kdWwR04OCaLbQDYij0LYSvbt0Ho=)
3: tTRCGKSIC1AMAzMh52vXi088Flg.crl (hash: ecdZWnl0RwLrq1MHGKsqEW1zAvrWvzW+npPn7lP5DCo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:7e:96:f7:71:7d:20:d7:9e:1f:74:f7:16:12:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5344218a4880b500c033321e76bd78b4f3c1658
Validity
Not Before: Jan 31 18:00:29 2025 GMT
Not After : Feb 1 18:00:29 2025 GMT
Subject: CN=2eada7f84142580c14819427315aef95de480e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:dd:85:c3:2f:8b:55:12:9b:48:fe:97:ec:7c:
d4:3a:93:e2:66:ea:37:8d:09:b9:80:6a:c7:d3:3a:
63:48:80:da:27:f5:80:e8:8f:ce:0d:cb:ed:c3:4c:
49:f7:46:40:ef:e7:e9:bf:6c:bb:e3:64:32:e4:48:
c9:90:67:7a:10:cf:de:56:b3:18:0a:39:d6:ef:10:
ef:51:f2:4b:97:d3:31:c9:5e:7f:48:17:87:b0:64:
32:79:1b:2f:8f:d6:c2:2b:18:f5:e7:08:75:e9:c3:
e8:87:34:28:10:66:5d:f1:2c:36:6a:2e:81:c2:b1:
22:0a:35:bf:49:8f:2e:18:90:8b:2f:23:1e:97:da:
cb:46:bd:50:34:bb:a9:af:b7:6a:3e:27:1c:df:87:
19:bb:99:18:0b:77:0e:75:8c:be:2d:5a:f7:a8:e9:
c7:83:50:97:5e:dd:92:43:e7:0e:49:ab:1a:1c:d5:
04:02:fc:27:88:f4:49:71:12:66:7d:b4:5c:42:9b:
ed:a3:c4:80:ee:2a:34:9c:7b:3e:08:a9:3e:89:55:
ea:c2:fd:4e:c5:0c:4a:d8:1d:40:4b:84:3b:70:72:
22:68:c2:b6:80:64:e0:16:3b:73:4a:d5:a1:62:99:
58:74:01:43:7d:62:8d:79:cb:db:c2:c0:a8:f9:7a:
b1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AD:A7:F8:41:42:58:0C:14:81:94:27:31:5A:EF:95:DE:48:0E:97
X509v3 Authority Key Identifier:
keyid:B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:0e:d4:47:5b:f0:af:80:b1:57:f1:78:d8:47:0c:51:9e:c6:
6d:a6:18:b6:31:62:d9:72:48:64:0e:6f:99:bb:90:b3:74:41:
2b:33:81:b5:92:ef:3b:45:3e:18:60:aa:0c:86:7d:24:7a:31:
04:8d:17:03:c2:e3:ea:44:c7:73:aa:02:b1:9f:6e:36:d3:dc:
57:b7:a2:82:80:0d:14:eb:57:dd:58:86:2c:90:77:cb:79:76:
2e:e2:ca:7e:96:8f:a0:64:b0:89:ca:7a:76:f6:dc:3c:94:50:
4a:56:fb:2b:b4:ee:52:49:11:8e:76:96:e5:9b:36:54:6d:ad:
dd:95:74:4b:0d:54:d8:73:07:9d:c6:1d:b0:d8:b7:03:97:86:
1a:3a:1a:71:39:b7:3f:d9:21:26:ff:3d:ce:64:35:f1:55:d1:
f6:50:0d:87:31:94:98:01:3f:df:3d:e3:7e:50:3b:c4:54:8d:
b5:fa:78:7e:24:83:93:2b:53:5e:2c:3d:fc:80:0f:77:c7:11:
66:d9:74:21:1b:6a:d4:86:58:a5:74:70:ce:77:3a:61:2c:53:
e3:bc:d9:4f:79:b1:3e:b8:ed:70:51:d6:7f:00:93:ea:da:b5:
88:a6:18:92:db:3c:cf:13:d1:8a:19:68:bc:0f:20:9e:30:26:
52:3c:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:50 2025 by rpki-client