Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
File: T4R35WnR19YPBGmnzIp_R0YDm7c.mft (raw, json)
Hash identifier: ithzx7En9qMM5sySTKyqMBB06QbTbzRlm0aXKysA6VY=
Subject key identifier: 49:CB:4D:E2:CE:E4:84:6F:BA:CC:EB:DA:5A:E9:A4:10:99:BE:0B:E3
Authority key identifier: 4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
Certificate issuer: /CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Certificate serial: 0194BBCE530366BC13B6B9C83C555CE9B2EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
Manifest number: 108E
Signing time: Fri 31 Jan 2025 10:00:48 +0000
Manifest this update: Fri 31 Jan 2025 10:00:48 +0000
Manifest next update: Sat 01 Feb 2025 10:00:48 +0000
Files and hashes: 1: 9sTlJL6XI1F8_6pTnGvYUoHPjLc.roa (hash: p/q9OdpuOMeCTpoZABPBjgzLHhfpzMbQS5v48+zxKpQ=)
2: T4R35WnR19YPBGmnzIp_R0YDm7c.crl (hash: pHnMhj2GutN6Fa70ppl/PlpMUktEoKHpumHHRsLeIKo=)
3: ob104eCQJ_C_ID7VnPR1GOcDcA8.roa (hash: 0O8ntyVniHu4kxwME5VY5LDqj4fbOYlq5O01qeomItA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:53:03:66:bc:13:b6:b9:c8:3c:55:5c:e9:b2:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8477e569d1d7d60f0469a7cc8a7f4746039bb7
Validity
Not Before: Jan 31 10:00:48 2025 GMT
Not After : Feb 1 10:00:48 2025 GMT
Subject: CN=49cb4de2cee4846fbaccebda5ae9a41099be0be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:58:ae:0c:74:66:d9:0e:1f:da:a1:ad:09:29:
ff:f3:5a:5a:5d:75:bf:3f:6b:b4:28:6c:57:2d:a4:
0a:2c:5f:eb:9d:33:51:43:ce:4b:88:51:11:73:7b:
f3:87:30:77:a3:8e:11:90:81:98:55:5a:f2:41:69:
b2:1a:3d:ec:fb:6d:d4:2d:87:9e:35:3d:66:b8:e9:
60:57:df:35:1c:c9:ff:b8:c7:89:be:92:32:47:d9:
bf:ee:e6:96:52:c9:02:c3:ba:f4:8d:47:57:5a:18:
ff:9e:b9:6c:7a:91:0d:39:8b:fc:ba:28:c2:99:3c:
23:09:41:e0:26:92:e6:79:64:95:bd:0f:e0:3e:69:
c0:90:79:51:78:4f:9b:ae:0f:f3:6c:be:ba:37:9c:
38:fc:81:32:ac:44:f3:de:85:e3:ef:73:d2:87:1f:
bf:b3:47:9b:49:72:c4:05:3d:62:91:3f:74:c0:11:
66:28:7a:77:38:7f:6c:22:36:ea:3f:74:23:b9:9c:
be:58:97:f5:95:87:07:b8:ff:27:1d:de:f4:8e:b9:
84:6b:00:73:91:64:6a:00:87:19:17:4b:3e:ec:ee:
a0:71:2f:75:88:44:ae:09:2c:41:1b:00:ff:95:0d:
14:fe:45:08:17:e0:ff:72:df:52:b3:f6:e0:94:e3:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:CB:4D:E2:CE:E4:84:6F:BA:CC:EB:DA:5A:E9:A4:10:99:BE:0B:E3
X509v3 Authority Key Identifier:
keyid:4F:84:77:E5:69:D1:D7:D6:0F:04:69:A7:CC:8A:7F:47:46:03:9B:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4R35WnR19YPBGmnzIp_R0YDm7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/775190-cb94-4063-8c1a-ad147d915791/1/T4R35WnR19YPBGmnzIp_R0YDm7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:cc:09:24:7b:38:11:00:b9:a5:ee:64:b8:b8:f9:93:66:92:
6c:dd:a2:7a:f9:0e:9f:6f:9d:82:45:0c:76:f2:23:b8:4f:79:
6e:d8:90:48:c7:22:c1:01:35:3b:69:db:fc:92:e6:db:4f:0e:
13:5e:b7:76:02:be:41:6d:28:2c:2c:e1:b2:bc:b0:bc:1d:a2:
2d:49:cc:89:d1:c9:17:4f:9c:68:88:98:bd:1f:53:60:d3:37:
88:92:7b:27:26:cd:8a:fa:b3:89:7d:d8:26:40:03:72:af:24:
1f:f9:05:b6:b8:75:45:be:c2:94:9c:1c:d4:aa:06:5b:11:75:
5c:bc:6f:05:7a:44:35:17:c8:72:30:17:48:26:0c:3f:89:48:
cc:ea:c9:6a:54:88:b5:ca:df:67:08:f0:b2:61:e0:04:6d:60:
5d:d0:6a:03:a2:f7:ee:ce:ea:76:3b:ca:a8:1b:7d:ae:e5:62:
8b:71:72:78:95:18:67:23:9c:0f:51:7f:3c:fa:ba:1f:f2:c8:
e9:30:22:3b:6d:d4:48:11:2a:18:54:0a:74:8f:fb:a4:1c:63:
b1:b9:18:c6:7e:ad:6e:b3:fb:85:b1:40:7f:93:0b:78:86:54:
0b:9f:fe:53:38:e2:e1:c8:73:02:d1:c4:0c:7b:43:63:57:9c:
d4:3f:8f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:54 2025 by rpki-client