Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
File: tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft (raw, json)
Hash identifier: Zz7sKW4zt7sOO7aAXqbJpAVKyJwEJ7c5chJH/v44ZuU=
Subject key identifier: 74:E7:92:93:21:92:E6:EC:24:32:1A:B9:99:66:5D:2E:96:E4:8A:1A
Authority key identifier: B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
Certificate issuer: /CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Certificate serial: 0194BBCE20BAA414171780DBE53EFF3C91BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: 4BOoh9ZvRlX2US_OZJ_A9kCTrtI.roa (hash: +tR3y1xSs3M/3+ZhTBHMrJWVz7B8nzvm5Sr9MdXyV2U=)
2: Kn6zCRrJAIpDU3vbBWFNfgedDNo.roa (hash: azRFjdZrexayFU12UNmkO7T6vISzK8GYJvKGqUFKldQ=)
3: eIluNbW1Lh7F9iIJxb6GVbd5mxQ.roa (hash: d+Tkp5gG5B2wX0ED2hhsWjApqTUL3iqth+z1QSZwDac=)
4: tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl (hash: 9H+OVNXumczk2veNOdurURrdHxpekhfXkSEIBqR6c60=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:20:ba:a4:14:17:17:80:db:e5:3e:ff:3c:91:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6380000fb7e45f8976261a698d418f08e8d67c7
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=74e792932192e6ec24321ab999665d2e96e48a1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:9f:81:cf:32:cb:80:17:91:37:e3:a7:88:
59:c4:f4:25:53:48:06:5a:e8:3e:94:9b:da:34:0a:
6c:b7:f2:1d:b0:2e:f2:45:e3:3a:15:f8:81:8b:7d:
3a:d6:5f:70:da:10:b3:74:b0:b3:09:9f:ac:d3:d9:
b7:6f:04:11:1a:d6:dd:33:84:56:bc:9b:45:5b:81:
f5:cd:25:db:17:ce:29:84:6e:d7:92:a7:a8:05:1e:
ba:12:96:1b:f4:d6:0a:67:a9:82:13:b6:0b:f3:bf:
02:ee:48:1c:b4:c7:ca:c5:51:9e:ca:89:fd:99:6d:
57:69:a9:ec:16:f4:5e:f0:af:e7:8e:b5:41:66:35:
4a:31:83:a8:17:23:19:41:46:39:a8:74:84:ad:23:
f9:d9:19:ba:96:cd:e6:2f:ed:a3:47:e8:07:f9:cb:
ad:d3:1b:9e:0f:c8:bc:b8:df:c8:48:38:44:e4:b0:
6b:b8:fa:04:a3:1d:01:bb:55:b2:5e:56:65:69:91:
ec:12:bf:4c:31:5f:b6:82:f1:3c:f2:54:31:8a:40:
68:60:54:17:9b:d8:8b:60:b0:d2:41:09:a6:c2:5f:
4e:b4:d0:3a:06:6e:46:ee:f7:ce:f6:9d:fb:1c:2a:
f4:06:6f:38:c8:f0:81:bf:68:30:91:f2:55:a5:61:
21:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E7:92:93:21:92:E6:EC:24:32:1A:B9:99:66:5D:2E:96:E4:8A:1A
X509v3 Authority Key Identifier:
keyid:B6:38:00:00:FB:7E:45:F8:97:62:61:A6:98:D4:18:F0:8E:8D:67:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/6e4e68-87aa-478c-8e5f-e06176ab24fb/1/tjgAAPt-RfiXYmGmmNQY8I6NZ8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:77:af:e1:87:2c:98:1c:64:84:24:ff:68:bb:9d:d8:dd:81:
7a:14:7a:dd:cf:9d:9f:8a:74:97:83:88:60:84:b0:bf:b3:f6:
df:e2:b8:01:dd:72:33:2b:d2:8e:c3:c7:72:ca:ec:99:70:e9:
41:7d:22:c6:2a:19:23:3d:9c:24:fe:9a:55:3f:60:41:f2:ab:
03:ab:e3:76:ea:d5:8b:e7:d6:c9:95:ef:94:5b:6b:da:48:46:
6d:b7:c2:92:78:95:67:bf:d0:62:f2:54:a6:f4:43:a4:c3:26:
16:c6:95:c9:0b:80:df:ce:06:63:5f:62:bd:6b:e4:75:2a:d0:
04:66:62:4a:4b:71:7f:15:81:fa:df:bc:df:05:ab:00:83:36:
b0:91:d4:d6:fd:93:8c:9c:70:a4:d7:4a:f0:73:d0:a5:79:1d:
05:2d:0d:24:84:98:bc:42:6d:85:41:d5:27:cc:74:ca:08:cd:
b8:c2:6c:4e:c8:6e:11:df:27:78:63:2d:b7:d9:eb:bf:e4:f7:
ef:7d:77:8f:0c:07:2f:56:36:75:7c:e1:42:8f:c5:03:6d:20:
9a:27:44:ca:52:30:62:ab:cc:21:7f:97:91:2e:7a:9e:3a:b5:
bb:c6:24:d7:67:6a:33:1a:a3:f1:bc:9d:1f:7a:4f:80:12:a8:
87:41:56:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:23 2025 by rpki-client