Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
File: tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft (raw, json)
Hash identifier: A/DZboOFj2u0LV8mnBqEWbn29n+QGVFtlNT0NJGsRZ0=
Subject key identifier: 52:31:CF:CC:FD:D6:98:17:00:13:52:94:50:56:F8:44:A9:52:0D:EE
Authority key identifier: B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
Certificate issuer: /CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Certificate serial: 0194BCE0908A4713CAD1B17098204BC99468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: 3wD7YASUrL3NpA7N1DKGwyMvpW8.roa (hash: E3LCGPj2WzMDsMMPMtvTWx8+o6rGMeVTiLG80T025To=)
2: tCxsttlDEYs9pRw5Gm9iTgZyCBc.roa (hash: 0ZbwaGE5XpT8151KuGcEKOSEkVLV60MXa5tXdHShvII=)
3: tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl (hash: 1MakPGH19nGIYMBP59+9TMJ+nKzC65Wl3QYYz5DSL0Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:90:8a:47:13:ca:d1:b1:70:98:20:4b:c9:94:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60d6ca95e2770f55340d909ec7c97eeca3fe20e
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=5231cfccfdd69817001352945056f844a9520dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:56:1a:c5:78:e0:2a:60:f6:f5:37:e1:d6:f1:
35:d1:56:ff:30:ec:25:29:be:c2:17:45:80:64:af:
26:8d:b5:e1:54:42:ca:28:3c:49:a9:73:cf:bb:ab:
39:9b:fb:ba:4b:e1:f9:f5:b3:47:e1:16:65:12:09:
9e:a7:56:3c:1a:e3:3f:b0:1c:23:04:08:d1:e4:aa:
5b:fe:a6:94:67:e1:b1:dc:64:f7:89:0f:c3:ac:40:
2e:59:8d:a2:e0:1b:ae:32:81:62:79:98:48:dc:7a:
d7:16:1f:20:6e:25:db:1c:4f:36:42:bc:d6:53:b5:
36:bd:84:05:1d:13:63:9a:d3:1e:f4:4c:ae:16:33:
12:77:77:18:2e:ba:d4:dc:e2:28:39:61:e7:3a:bb:
72:9f:1a:ea:eb:1e:a1:1e:a8:d0:8b:84:62:6e:c6:
93:a6:9d:0e:a8:5d:2e:00:07:35:b6:76:0d:5e:79:
cc:75:9e:a6:6a:9e:fd:fc:1a:bd:ad:df:e2:d8:bc:
27:69:a9:9b:de:f2:3c:ed:47:aa:5c:99:a9:2a:ce:
d9:60:81:c3:ee:37:ca:ec:36:eb:ab:a6:90:18:dd:
56:06:d3:50:f5:ae:0e:fe:99:9c:c9:88:31:78:55:
0c:b6:cc:4a:e3:10:d5:67:96:0a:e4:1f:dc:f1:10:
4e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:31:CF:CC:FD:D6:98:17:00:13:52:94:50:56:F8:44:A9:52:0D:EE
X509v3 Authority Key Identifier:
keyid:B6:0D:6C:A9:5E:27:70:F5:53:40:D9:09:EC:7C:97:EE:CA:3F:E2:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tg1sqV4ncPVTQNkJ7HyX7so_4g4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/033e8b-bde1-4f90-baf5-23847a40d9e4/1/tg1sqV4ncPVTQNkJ7HyX7so_4g4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:a2:51:f5:79:ba:de:d9:23:80:23:e9:80:bf:35:44:c5:c0:
e6:32:72:93:a4:49:04:19:8a:b1:2f:e1:0f:d9:a2:5c:5d:9e:
f7:98:29:d1:2d:96:89:8d:b5:07:2c:58:ef:e6:95:66:a2:ce:
7c:dd:77:8f:ee:8a:f3:bc:fe:23:8d:f0:78:1f:56:5e:a3:61:
fd:93:aa:8f:33:d4:b7:e1:5a:c2:4c:6a:21:6a:72:cb:59:1a:
3e:3c:ae:b9:1a:67:bd:80:ec:79:78:ad:a9:44:d1:4b:a5:24:
60:d7:9c:76:f4:32:07:fd:04:64:cf:9e:95:05:a3:79:d2:b3:
93:0c:cd:6b:af:b4:0e:96:3f:ae:cd:5c:79:ef:f5:90:94:26:
de:74:6b:b5:2a:f4:6f:1e:92:1e:b9:97:d3:bd:fa:a7:c5:f8:
b0:20:cb:52:41:fc:bd:fa:62:19:98:e3:d7:3d:a6:0e:9b:55:
14:8e:02:bb:83:14:7f:39:21:05:34:68:4e:8c:71:ef:b1:7a:
52:ae:d6:07:9d:b8:f2:74:4e:81:b8:34:9d:d2:b0:ae:61:b2:
e1:c6:65:bd:94:da:9d:d4:33:6e:5f:8d:89:47:c0:57:98:bd:
e0:f3:48:53:70:de:87:42:58:06:3d:86:76:e5:11:99:76:25:
a3:d6:02:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:42:51 2025 by rpki-client