Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
File: t060sgvFlKwro6pa7zDnTiXhVuE.mft (raw, json)
Hash identifier: S1TUS4xWavuW4jwUrr7tUsYHn3kAbF5sem6+cDbei9M=
Subject key identifier: B1:D0:2D:E3:83:1D:AD:C4:4E:EA:F9:0B:75:24:65:92:09:C5:6C:F7
Authority key identifier: B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
Certificate issuer: /CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Certificate serial: 0194BBCE858678FE759BB6A7FB85DC508DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
Manifest number: 08CA
Signing time: Fri 31 Jan 2025 10:01:01 +0000
Manifest this update: Fri 31 Jan 2025 10:01:01 +0000
Manifest next update: Sat 01 Feb 2025 10:01:01 +0000
Files and hashes: 1: 96zfb_as6Uu1dQBioEPRjkMoH0A.roa (hash: ZbDgERbOZ82dnNJrpA+vEp4hFeMsEzejOuHoVOcv55k=)
2: t060sgvFlKwro6pa7zDnTiXhVuE.crl (hash: JQsQwSiZAJqwEkak/qTnCT0FEZ107UZgNnUso8hvxxc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:85:86:78:fe:75:9b:b6:a7:fb:85:dc:50:8d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74eb4b20bc594ac2ba3aa5aef30e74e25e156e1
Validity
Not Before: Jan 31 10:01:01 2025 GMT
Not After : Feb 1 10:01:01 2025 GMT
Subject: CN=b1d02de3831dadc44eeaf90b7524659209c56cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:81:cc:c9:4c:5f:5f:0d:4c:8a:a2:0d:5c:
22:8f:5a:a9:e3:8d:75:c9:1f:4b:d5:51:a1:a8:67:
7f:21:fa:90:d0:62:04:1e:bc:b8:29:4c:fb:a6:cd:
07:b1:99:2c:a5:56:ab:5e:46:4e:1a:a3:a4:fa:d9:
58:cd:22:f6:f9:34:7a:51:ea:94:58:35:36:3a:97:
85:6e:cd:00:79:89:37:0a:19:3e:04:a6:03:c8:5b:
1f:1a:68:9f:22:ea:63:4c:8b:0a:f3:a0:46:37:c1:
5b:42:53:0e:95:25:08:29:66:bc:54:18:32:63:03:
6c:5f:da:f3:6e:0b:43:f0:ac:b2:a9:66:ce:4a:03:
ba:13:09:2b:82:5c:90:a5:3d:0e:94:e0:c9:fa:63:
2f:6d:b1:90:28:8b:90:fa:d1:03:1d:0e:34:2e:86:
2d:7d:42:4b:70:0c:c7:c1:87:3a:23:40:60:57:68:
6b:3e:d5:f6:01:52:a9:7c:ae:25:bc:a9:12:a0:04:
d3:44:70:c3:07:ae:0f:f2:f4:28:aa:0c:aa:2d:84:
54:4b:ba:f8:66:16:46:91:28:19:09:67:fa:8c:52:
20:2a:4c:06:fc:b1:7b:df:b6:2e:3e:64:67:55:c7:
d9:6e:c2:e1:e1:a3:b0:39:cd:36:4b:d1:a8:ac:e1:
37:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D0:2D:E3:83:1D:AD:C4:4E:EA:F9:0B:75:24:65:92:09:C5:6C:F7
X509v3 Authority Key Identifier:
keyid:B7:4E:B4:B2:0B:C5:94:AC:2B:A3:AA:5A:EF:30:E7:4E:25:E1:56:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t060sgvFlKwro6pa7zDnTiXhVuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/dcd512-0cb7-49a0-a618-6fbb19483287/1/t060sgvFlKwro6pa7zDnTiXhVuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:71:a0:9b:56:4e:04:bb:a0:c9:40:aa:4f:74:53:63:f3:da:
10:74:eb:e5:e0:4c:42:3f:dc:e3:34:f7:31:48:72:43:89:01:
24:54:50:6f:a5:84:fe:90:cc:f1:c4:df:5c:03:67:fb:9c:4d:
83:68:7d:40:cd:e1:f7:0b:ef:bb:63:1b:54:64:5d:ed:1b:5e:
dc:f6:72:07:10:ed:73:7d:e6:5a:7b:85:5c:5b:63:70:fa:85:
ba:7f:0d:2b:51:54:a4:21:51:cc:09:df:16:36:60:c0:86:67:
be:59:66:ec:a1:26:bd:f9:c5:e7:ac:74:96:80:bd:9c:35:79:
43:54:02:bf:84:28:5f:8f:2b:bd:a3:e5:75:1a:ea:63:fd:56:
26:eb:e6:57:98:b9:e3:8a:bf:a7:6f:41:f2:c3:b0:31:0d:c5:
76:15:aa:aa:e5:54:16:6b:6f:02:e3:fe:f8:04:7c:70:a8:d1:
99:52:b0:1d:64:eb:ee:a3:78:76:89:5e:36:cd:ec:e6:49:17:
7e:64:06:8f:d5:2c:ea:f9:85:d2:14:17:43:d0:ed:67:7f:c5:
d2:de:a7:09:32:80:c7:0b:02:d4:f4:46:f3:b0:7d:09:be:55:
50:9e:97:66:94:da:6f:fe:99:d0:29:f4:70:6a:be:52:bb:7f:
07:b9:0c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:25 2025 by rpki-client