Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
File: tUFVgYH3hjEZv0oVVMddqx9sUpI.mft (raw, json)
Hash identifier: 7yqYv8s9rFmtjPjceRoSeYRhzu9El8Dpj7AjXgyY/rg=
Subject key identifier: 43:CF:D1:B6:A4:F7:4A:3A:D0:9E:BE:96:C1:AF:9A:DC:35:C6:A2:FF
Authority key identifier: B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
Certificate issuer: /CN=b541558181f7863119bf4a1554c75dab1f6c5292
Certificate serial: 0194BCE07793B12B2C9CCA38E0680E521436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
Manifest number: 0244
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: 74rFfsVLB83xqrl230f69RyQMZo.roa (hash: uIHKdF0Md6VmRaPIQqLHKtiwEPhOEBVDe4Gopq3AYXw=)
2: avaZ658dTdnlteZmpyctkTlcNP8.roa (hash: KHvxH5fCxcbQpviHolUXb9yiSjrJQE+TWAdsGNkg5vo=)
3: dCGcZg2F9Ea5zPZKvzxM5matRyQ.roa (hash: CVLQb8zE8ujxwsspK1MH+reOHlP+NQATO7Xjq1jEaUs=)
4: tUFVgYH3hjEZv0oVVMddqx9sUpI.crl (hash: SKvUDFOqzTBAbrf32NGjitc/Jdp3pe1dlbb2hHQDzso=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:77:93:b1:2b:2c:9c:ca:38:e0:68:0e:52:14:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b541558181f7863119bf4a1554c75dab1f6c5292
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=43cfd1b6a4f74a3ad09ebe96c1af9adc35c6a2ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:93:71:bb:0c:5a:5d:46:21:85:b2:c1:ed:
6d:2e:48:b6:94:61:89:de:3d:81:05:ae:09:4b:8d:
fd:90:91:fe:9e:bd:eb:13:90:5a:ee:9c:7e:ad:6a:
ac:df:b4:18:97:cc:bc:d0:33:f7:da:e8:90:1c:e3:
74:ed:1e:cc:d0:bd:84:bb:77:e9:ff:0b:cc:5c:df:
c0:4a:05:a7:39:32:e0:46:1c:8d:7e:88:ea:ad:ee:
84:76:4b:26:86:49:73:bd:ea:4e:4c:df:c1:bb:82:
5d:41:2e:86:d1:19:25:4e:13:65:67:68:c5:ae:cf:
a7:79:a7:41:6b:3c:b5:82:2a:71:6d:85:e0:1c:23:
26:c8:5b:9d:3f:fe:11:c5:fa:c5:3b:90:f0:b9:47:
3c:b5:30:34:87:0f:23:2f:3f:cb:9e:75:16:67:3c:
e0:ed:ae:19:c2:12:1c:87:a6:d4:b7:b5:0f:23:cc:
4d:24:b7:f2:11:02:ad:92:ec:08:e1:e8:e5:26:5a:
3e:97:f1:dc:83:10:2a:db:56:35:c9:3b:d3:f0:e3:
d6:7b:de:1f:a3:f0:00:75:12:c5:bf:e3:6a:83:af:
d4:46:f8:54:78:3f:f6:4b:25:a1:2b:5b:7e:49:9b:
8a:85:84:54:4d:97:21:c4:ac:ab:a8:05:d8:e9:12:
0f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CF:D1:B6:A4:F7:4A:3A:D0:9E:BE:96:C1:AF:9A:DC:35:C6:A2:FF
X509v3 Authority Key Identifier:
keyid:B5:41:55:81:81:F7:86:31:19:BF:4A:15:54:C7:5D:AB:1F:6C:52:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUFVgYH3hjEZv0oVVMddqx9sUpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/4dd169-8dcb-4653-8a03-571b6c612bec/1/tUFVgYH3hjEZv0oVVMddqx9sUpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:9e:1c:a0:e6:3b:5f:dd:cb:34:01:cd:c5:49:6e:5e:39:9c:
39:89:b8:37:b5:3e:ba:20:4f:7a:3f:04:f1:b9:12:b0:8e:19:
3b:d0:14:38:3b:84:05:14:47:69:a6:e7:2a:1f:5b:c3:ce:4b:
7a:70:02:af:ab:f2:74:ae:af:23:82:fa:40:f1:ac:54:99:24:
3d:a5:2d:bc:4d:ef:0c:c1:08:34:d8:83:4b:18:79:7d:cf:ff:
ae:d9:85:44:24:df:98:3d:83:8b:1b:18:49:5f:d0:b9:70:d9:
54:dd:53:8a:41:79:6f:52:d1:13:8b:72:39:05:7a:27:f3:70:
61:30:19:10:e8:02:af:a8:83:dc:c2:57:5d:9c:49:71:ff:c5:
6a:b9:7d:18:5a:f4:ef:f3:eb:47:a4:5a:7f:f4:b9:f9:22:ca:
c3:0f:20:22:81:20:fc:3a:75:c9:11:8e:c9:97:43:f8:b7:c1:
2b:5b:3f:98:6a:32:aa:70:8f:7a:ef:e1:48:f4:2e:9b:7c:4d:
5d:a2:69:ee:9e:74:36:d3:7a:b8:a0:5a:8e:39:33:fc:3e:1d:
ca:e9:1a:14:10:46:88:4a:f9:46:d3:a8:d0:67:aa:ef:bf:86:
44:31:94:fe:50:f6:9b:83:b5:18:e9:ee:51:a2:a2:dd:32:05:
ff:92:e1:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:24 2025 by rpki-client