Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
File: tfGesN1I4bJJJJCLtbaEjMFnhUY.mft (raw, json)
Hash identifier: wdgxVed8+tU8iG8rvhqDwQMjto8fYrRKsnv2NFCmx5k=
Subject key identifier: 6A:FB:14:42:75:EA:49:A1:B6:1D:47:32:62:6A:4A:6B:C1:E3:D4:67
Authority key identifier: B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
Certificate issuer: /CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Certificate serial: 0194BD4E895CE26834D9203878BDD181477E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:28 +0000
Manifest this update: Fri 31 Jan 2025 17:00:28 +0000
Manifest next update: Sat 01 Feb 2025 17:00:28 +0000
Files and hashes: 1: dMyCW0_TBkO1nYNBL_n11IKNaBI.roa (hash: WTKaBFp1QPSs1ROafjR4WJfZR1PRtcVHfjnPURoJWEQ=)
2: iWujOO5h_XVMHY2nSFxBko0o46E.roa (hash: hfZ0O6pRdbOdpr8hVRCYtXgEcI0jSP4lHjfs8kAt2hk=)
3: qrrQR7WuIleyYS2sO7I0VvjROUo.roa (hash: 4JE74Aq/xmpPqZIRbZrMja/xvjU3RSpM11pAC7vf4sE=)
4: tfGesN1I4bJJJJCLtbaEjMFnhUY.crl (hash: KYt44OdPO1LB0OR+TBg+OgN3u/GZJP6/jJBzGzaTw6k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:89:5c:e2:68:34:d9:20:38:78:bd:d1:81:47:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f19eb0dd48e1b24924908bb5b6848cc1678546
Validity
Not Before: Jan 31 17:00:28 2025 GMT
Not After : Feb 1 17:00:28 2025 GMT
Subject: CN=6afb144275ea49a1b61d4732626a4a6bc1e3d467
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:44:8d:8a:bd:52:0d:c2:13:3e:cf:d0:27:d4:
07:42:42:8a:0d:b0:be:de:9c:9d:0c:23:97:c9:f7:
1d:e7:c1:9d:de:14:94:db:dc:bb:b7:7b:89:84:a8:
25:3a:f5:7b:e8:7d:58:b6:27:50:7c:a2:93:ca:e3:
b8:d4:69:8e:01:3b:07:0c:73:9a:3d:3a:10:53:73:
5c:1a:29:73:0a:9c:f8:b9:4e:fd:38:7d:68:4c:c0:
3c:a9:f8:70:cc:85:0d:52:4c:2d:87:2b:a4:fb:15:
fa:0f:0e:5d:ef:b1:2e:12:49:af:53:e6:8d:37:d0:
df:9d:5c:18:db:b8:11:d0:2d:8f:b8:cb:cb:ee:11:
ce:90:98:94:3b:e2:13:72:f1:dc:89:56:0b:46:8c:
63:a4:6c:3e:64:4c:bf:ef:f0:43:e2:83:77:0a:cc:
60:b0:17:72:f2:d5:ab:3a:1d:f8:12:a6:56:8e:1f:
cc:b9:e6:fb:5d:4f:d9:b0:bc:b8:c8:23:b9:b0:2d:
17:c3:f5:78:e4:e3:0e:f3:0f:04:c7:9c:af:31:86:
fc:1a:28:a9:3a:79:72:74:90:bf:27:d0:0e:b3:84:
b2:32:02:bf:6c:6e:d4:fd:ea:75:d9:54:e8:8f:10:
16:81:94:e5:01:fe:af:70:e0:44:d3:7f:fe:5c:5c:
f8:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:FB:14:42:75:EA:49:A1:B6:1D:47:32:62:6A:4A:6B:C1:E3:D4:67
X509v3 Authority Key Identifier:
keyid:B5:F1:9E:B0:DD:48:E1:B2:49:24:90:8B:B5:B6:84:8C:C1:67:85:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfGesN1I4bJJJJCLtbaEjMFnhUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/ce001b-a4d8-4f0e-831d-35c66d7c5260/1/tfGesN1I4bJJJJCLtbaEjMFnhUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:0a:84:e1:d7:66:80:5a:26:42:98:6f:af:cb:85:45:f4:24:
b7:a7:c8:1b:ff:cc:13:47:39:cf:55:04:42:68:2a:db:f9:95:
39:32:c8:1b:6b:1c:49:17:55:8d:73:9a:0b:ee:09:93:55:88:
25:a2:41:3a:cb:aa:30:76:f6:6e:ad:c3:ac:cc:ef:ec:d2:20:
eb:29:35:d9:e5:34:ce:e0:c5:24:9f:10:4f:ff:c3:4f:03:79:
79:c9:df:22:47:7c:04:81:cf:7b:cb:81:d0:e5:4e:f4:4c:4a:
d0:4e:aa:b4:e8:35:6c:f3:b5:51:22:c7:ba:96:b0:88:12:14:
88:8e:1c:be:bf:ea:68:9b:cb:2f:d4:b0:d6:4e:15:fc:bc:23:
3c:40:7a:87:53:9e:b6:9b:01:44:ff:0c:69:64:27:0e:96:13:
10:ba:3d:10:a5:ca:4e:ef:e9:24:dd:fa:9e:00:22:e6:3d:20:
a2:39:5b:1e:1b:d6:f5:95:f2:30:89:31:4b:8f:37:63:0c:84:
18:c8:d0:a2:7b:51:d1:f8:54:67:f7:de:58:82:23:d5:8d:80:
65:13:15:fb:58:a1:c8:83:ba:bc:dc:e3:7b:e7:e2:7d:24:c6:
36:06:04:3e:4d:6e:75:c3:24:44:f5:cc:ae:53:b5:af:22:09:
96:d7:73:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:18 2025 by rpki-client