Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
File: tGTgryi3VcTsiAENlCmGl9GIOTM.mft (raw, json)
Hash identifier: PylsypSmpnGQRc/0SmKDRQF6m/V4hsAZu5mVNFH4Ow0=
Subject key identifier: 2B:76:46:49:0A:76:78:4F:09:76:01:7F:2A:34:A5:79:22:16:E5:0B
Authority key identifier: B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
Certificate issuer: /CN=b464e0af28b755c4ec88010d94298697d1883933
Certificate serial: 0194BC72DE0BFBE81F2EE5F8ED8045CA04DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
Manifest number: 05EE
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: 4ZUimyMSrmZMeMTJpofdIprKN0Y.roa (hash: +sbrqZ7npPQY0M7RUiP5uMAuk7XGp56zDb3oxzfgBs8=)
2: D6cOOwuzIu0b1VD3IEBzEJwwwCo.roa (hash: v5PJLnM3bwyGnG1xvGzcUgGuOEM5ARi6RIpoEpY7P4s=)
3: fyoJ9a9SSU9QMOOAnopUi24XOCI.roa (hash: Oq4G4KqExdW+YSWtwOksmXAFXdtGTgedgjAZaCPW9DM=)
4: tGTgryi3VcTsiAENlCmGl9GIOTM.crl (hash: tsZWeOn4iJlZIDNnhEf/rqS7BygtD3MaoK5rh4e0cPs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:de:0b:fb:e8:1f:2e:e5:f8:ed:80:45:ca:04:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464e0af28b755c4ec88010d94298697d1883933
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=2b7646490a76784f0976017f2a34a5792216e50b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e6:20:bd:76:b1:14:97:fb:eb:da:f6:d1:84:
b4:af:ac:f7:6b:64:bf:eb:65:9c:c3:7e:b5:5f:d0:
c5:61:11:11:3a:50:64:5f:8f:90:b6:a5:f6:14:e3:
1f:0d:ca:f6:bd:d5:af:1e:d4:2e:e3:de:1a:b6:aa:
b2:0c:c1:96:94:43:7c:70:47:db:d6:7b:e8:43:80:
a9:7c:49:ff:ae:da:a2:b7:59:4a:01:36:5a:28:9a:
d4:d7:32:6a:04:04:13:33:19:5a:e8:24:3e:27:e5:
4b:40:fa:86:ae:10:4a:9a:40:dc:40:12:6c:6b:70:
b5:af:2e:56:a0:1c:29:1a:dc:13:8f:82:0d:14:3c:
33:83:37:72:82:c8:37:6b:12:24:7e:d8:a6:21:ff:
f7:6e:96:d8:99:ce:f5:ee:18:75:ae:24:a0:64:aa:
7c:61:be:cc:72:8e:1c:f9:12:8a:01:cc:1f:a0:a1:
ae:16:5e:44:75:1c:e4:59:1a:a5:d6:1b:b0:5b:9b:
86:f6:64:6f:67:16:c4:2c:80:a9:08:5c:66:c3:50:
1a:84:33:65:75:ac:0f:31:1b:af:7a:f7:79:96:b7:
c5:09:18:b2:90:58:e7:d5:a7:58:d6:26:d4:38:ff:
69:05:d8:2a:b7:d3:00:d0:50:d7:95:9a:90:9b:84:
63:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:76:46:49:0A:76:78:4F:09:76:01:7F:2A:34:A5:79:22:16:E5:0B
X509v3 Authority Key Identifier:
keyid:B4:64:E0:AF:28:B7:55:C4:EC:88:01:0D:94:29:86:97:D1:88:39:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGTgryi3VcTsiAENlCmGl9GIOTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/0caa6d-109e-45f3-a932-475c5c91f474/1/tGTgryi3VcTsiAENlCmGl9GIOTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:b2:db:24:ab:ed:0d:bd:ec:cc:19:ce:01:51:8f:f4:e0:82:
c0:94:c3:be:d3:de:65:98:8f:d5:f4:1d:03:a3:07:ed:18:7d:
a0:1b:10:ec:04:11:f1:9c:64:59:c2:79:80:2d:bb:72:6e:40:
e9:15:37:6a:d1:ea:43:a0:57:88:19:b7:c4:35:27:38:a9:ec:
87:6e:f2:83:04:09:73:37:e9:c0:60:9b:31:ed:65:6e:3c:e6:
68:18:e4:bd:69:90:c5:fc:81:37:46:58:9c:b7:b2:c1:a8:79:
cc:42:5b:8b:06:49:f2:15:49:5e:e2:84:fe:6b:2c:77:bf:65:
01:7f:ae:e3:da:e7:81:65:d6:16:14:36:df:0a:85:ab:fd:fe:
d7:cd:ae:49:c2:1c:e3:99:e1:91:ee:19:70:cd:21:17:a6:7a:
14:7b:9e:0b:69:0e:0b:0a:32:24:48:cf:5e:a8:c9:b7:f2:49:
65:d6:68:ba:19:5b:da:47:9d:f0:c7:49:d1:2a:a2:3a:5f:07:
7d:d9:af:a2:11:0f:7d:40:d6:90:a4:9f:a3:61:8f:cd:39:2f:
06:d4:76:13:4a:83:09:46:e4:29:79:1d:2f:0e:33:dc:88:93:
08:28:eb:79:a9:e4:de:5c:1a:0c:97:ef:54:80:4a:43:6d:00:
a4:8b:93:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:39 2025 by rpki-client