Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
File: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft (raw, json)
Hash identifier: v8BMeuPtMoRQ0RM7rwZCYXY3604dxwoOXAsGRSJRaiU=
Subject key identifier: 6A:75:73:5B:80:4D:4E:50:EF:CB:77:03:7A:C8:C0:C5:02:64:0B:4E
Authority key identifier: B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
Certificate issuer: /CN=b59909ed171b38c1fdc4362229e78d69851de11c
Certificate serial: 0194BCA9D43A54F93A3DB8414B2FB3DC37C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: 1lSa1sl-dNBGB6RIspgIufADhjs.roa (hash: ZUkq8NELozqtJDfHgnQK7IOC8L6Hnu5OT9um+2WKleM=)
2: TB1SNMK17klLvRw1OV09EGXDsjg.roa (hash: 3s2Ua7bRSNfwEdFtiO4U1p/wzm3QtvPjfYSSDJ4385k=)
3: tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl (hash: V+jrFSSsH6obZvvv2UQci+/6P10SgwgXxuUadVBEgcY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d4:3a:54:f9:3a:3d:b8:41:4b:2f:b3:dc:37:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b59909ed171b38c1fdc4362229e78d69851de11c
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=6a75735b804d4e50efcb77037ac8c0c502640b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c0:4a:75:8a:aa:1b:6a:79:e1:2d:5e:cd:c7:
fc:99:bc:e1:44:eb:1f:a1:44:b9:b1:03:b3:49:aa:
4f:e9:7b:37:0a:7a:92:7e:3a:0e:10:69:45:c4:00:
95:88:17:0f:0d:cc:98:14:1c:c6:c3:58:fa:63:e7:
a2:65:42:42:29:1e:62:df:66:71:e0:66:63:9e:6b:
80:a4:62:10:fc:ef:f9:23:ff:6c:76:aa:fe:4e:76:
84:85:56:d0:1b:b8:92:b9:83:81:f0:91:1d:ae:80:
dd:ba:92:60:7c:26:9f:84:75:20:40:8e:77:c4:02:
6f:ed:da:22:0f:d8:b6:88:39:3e:7b:2b:8e:e6:fb:
e3:ec:bf:06:75:05:4d:d9:4a:69:29:d8:2d:56:65:
57:30:b8:c4:55:10:74:e6:f8:5e:de:7b:e6:4c:14:
21:2d:68:5d:c4:75:b1:bf:0a:a8:5e:a4:d1:dd:20:
5d:d9:97:57:63:b2:56:16:ec:4e:72:d8:1f:e4:4a:
f9:28:f5:08:27:0e:20:04:4c:bc:6b:8c:69:1f:8f:
61:c7:17:61:fc:8c:f5:ec:6e:a2:65:09:47:6b:32:
e2:dd:18:01:7f:f3:4b:af:90:3a:72:c1:fd:21:eb:
d2:ba:62:9f:01:ba:94:fa:e8:04:4e:14:de:07:d7:
5a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:75:73:5B:80:4D:4E:50:EF:CB:77:03:7A:C8:C0:C5:02:64:0B:4E
X509v3 Authority Key Identifier:
keyid:B5:99:09:ED:17:1B:38:C1:FD:C4:36:22:29:E7:8D:69:85:1D:E1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/9ee980-67a2-4d3c-b6ca-fde073588f0f/1/tZkJ7RcbOMH9xDYiKeeNaYUd4Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:7c:08:8f:4b:18:c7:2e:6b:16:1d:a0:16:e9:cc:e7:86:9e:
5c:99:b9:e2:ad:25:6d:74:e9:7b:9a:56:39:00:eb:5f:04:14:
4a:9d:f8:d7:7b:a6:ac:4a:c8:89:57:5e:44:12:87:cf:ea:7e:
ea:bf:3d:99:3a:b3:3e:9a:ed:93:ab:fd:e6:bb:66:73:51:33:
a0:6b:05:b5:e6:59:59:f3:bc:34:b6:60:4a:42:79:f9:a9:a8:
06:c4:6f:09:f6:d4:3f:ed:66:7b:df:c7:64:a3:cd:ac:cf:55:
e6:9b:3b:4b:af:2f:f9:2d:7d:f6:2f:0b:f1:64:03:0f:53:9f:
63:16:56:0f:0a:c0:2e:33:d6:72:b0:95:aa:29:23:87:5d:84:
89:eb:46:c4:31:7e:ab:46:a6:a5:ba:8e:18:a6:54:68:e5:98:
86:44:ea:cc:33:93:6a:1a:1c:a4:3c:7f:02:d5:d1:42:83:99:
e4:40:c0:51:e7:04:db:a1:15:ff:67:70:c9:90:07:cc:09:99:
a8:a4:75:b1:da:78:d7:df:97:05:4f:fb:dd:f5:6e:4d:ce:af:
47:6c:0d:27:d8:4a:42:05:0b:71:f9:eb:27:3d:ce:43:82:d3:
e4:1e:79:8a:16:cd:1c:33:da:c2:2d:9f:db:69:a3:36:ed:ba:
5b:f6:62:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:49:40 2025 by rpki-client