Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
File: TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft (raw, json)
Hash identifier: 7npKI4gbumTvmLV5suvMRb0uJCIyIJQrBne0eBnP8k8=
Subject key identifier: 40:B4:A8:89:B5:F7:1B:14:85:0D:DA:CC:84:90:EB:73:2E:11:94:47
Authority key identifier: 4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
Certificate issuer: /CN=4e7545eee66daa39443ff9f88f522447f7863783
Certificate serial: 0194BD854BD5BF61D925E07646F8E833E905
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
Manifest number: 0F82
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: NRxH6LDQFnqwlvTIsGf-f3zdgZM.roa (hash: 45q8sJ0aVkz5DnC4TEh7gH+UDuL3EgyXgzbbWcDZotI=)
2: TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl (hash: mNghtkd/ftYBnnxaVxu9scLT9uWPo4x5lrWphyZ8btU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:4b:d5:bf:61:d9:25:e0:76:46:f8:e8:33:e9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7545eee66daa39443ff9f88f522447f7863783
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=40b4a889b5f71b14850ddacc8490eb732e119447
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9d:c6:1f:aa:89:1b:0d:71:a0:e3:17:54:22:
d4:0f:bd:3c:30:38:fe:c2:2c:4f:c2:6a:c3:69:9d:
5a:52:e5:55:45:e0:2e:ff:3e:c9:77:04:93:95:a7:
b5:9e:1b:b4:0a:86:94:3b:c0:f2:0e:5b:29:06:18:
50:aa:ad:7a:1f:ac:eb:c5:c2:2e:ea:c1:e3:75:ad:
01:fc:f9:86:cf:c2:4b:2c:c3:f7:a8:c8:a8:45:9b:
b4:23:57:6a:e6:75:0d:2b:db:9c:60:ad:34:ec:5e:
ab:54:99:41:17:d1:b9:71:8e:fa:03:34:af:87:56:
21:3a:78:58:37:38:99:cd:6a:aa:8d:a7:33:e8:c5:
c4:03:9e:6a:d7:a5:bd:92:14:9b:74:34:4b:f8:97:
91:16:8a:20:7f:4b:fe:09:d7:4e:23:15:62:dd:67:
1a:6a:6f:57:a9:92:b4:00:77:05:2f:c2:e6:9c:62:
fb:87:88:b6:ad:04:6e:d9:2f:a5:f5:14:1d:3b:7b:
7d:56:f0:87:df:b3:7e:14:fe:e0:82:1b:31:b1:33:
ed:c5:cf:28:d5:88:b3:c2:5a:74:f4:d8:91:a9:db:
d4:1a:ae:33:66:d9:e4:57:22:fc:81:31:3c:16:36:
82:fd:ff:be:5e:79:95:d3:84:39:cd:b6:73:6e:97:
e0:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B4:A8:89:B5:F7:1B:14:85:0D:DA:CC:84:90:EB:73:2E:11:94:47
X509v3 Authority Key Identifier:
keyid:4E:75:45:EE:E6:6D:AA:39:44:3F:F9:F8:8F:52:24:47:F7:86:37:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnVF7uZtqjlEP_n4j1IkR_eGN4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/a53644-9da6-4d29-b9b6-e78cfa79eff1/1/TnVF7uZtqjlEP_n4j1IkR_eGN4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:a4:f9:0f:49:26:da:90:19:d6:6f:6d:7f:e2:7f:f7:4b:d5:
9c:ca:20:ab:b6:02:f1:2f:9e:a5:37:57:8f:bc:7b:94:85:26:
66:1d:ab:4e:50:52:d5:a6:46:24:24:cc:d7:b9:a4:b3:c1:8a:
06:82:fe:44:18:7e:e2:3c:a4:54:a0:38:8d:88:fb:c8:67:61:
ed:59:da:43:7e:35:72:d8:62:de:f3:1b:13:9f:5b:99:3c:c9:
08:33:9e:db:9e:c3:e6:50:63:9f:ee:22:2d:e2:76:cc:ee:2c:
92:fd:02:42:08:9f:c0:ee:f1:af:89:84:e5:24:66:5e:9c:dd:
d8:b0:c4:d1:86:8d:f0:ff:31:c8:5e:08:48:dc:0c:e1:1b:cc:
00:f5:5e:d0:a9:ff:82:b4:31:e8:b7:85:f4:5d:55:5d:1d:09:
45:25:7a:4b:fa:39:a8:6c:9b:f8:7f:13:41:b9:c9:d4:91:0e:
a7:00:f3:c0:fc:fd:e8:bc:8b:db:51:d7:12:89:03:b4:ea:ce:
fd:af:3c:66:c6:87:1d:99:86:3d:f0:04:27:1f:fa:54:71:65:
10:2a:cc:82:04:98:8f:f6:76:a6:70:e5:e8:37:a2:50:c8:9d:
4b:3d:c5:50:dc:59:11:2c:69:80:e5:ec:e3:a2:56:c7:db:08:
df:a2:92:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:45 2025 by rpki-client