Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
File: t4Z4vWVMprEKXHc7wml1TcI0z9U.mft (raw, json)
Hash identifier: 4b1Eqc3P4ZuNjai9idX2Q607c9FlYXlaYKp7qqZMmFs=
Subject key identifier: 2B:41:0A:3C:D3:BA:26:6D:64:0C:F0:22:0B:76:88:AE:90:29:F7:59
Authority key identifier: B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
Certificate issuer: /CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Certificate serial: 0194BC04C736D0C76AEA71C5237542E78D07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
Manifest number: 03A1
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: BPlLnypPiuagZWcrE6iAVNghCOU.roa (hash: RofoPCZ6ir6aVHGZW0D501kjmtwNGd4wnfrYSGTr0nk=)
2: _r__0zP0dNhXc-NMveUPCr9alvE.roa (hash: nXmja1SSpoHaj+dyEPdPrVzXdKWzXzKYh0dNkHKdb2w=)
3: t4Z4vWVMprEKXHc7wml1TcI0z9U.crl (hash: oy7XijZLSWWUWn+TTXZplqfaIPWXtYssCr6ygJMYy6Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c7:36:d0:c7:6a:ea:71:c5:23:75:42:e7:8d:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78678bd654ca6b10a5c773bc269754dc234cfd5
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=2b410a3cd3ba266d640cf0220b7688ae9029f759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b4:eb:d5:62:b7:b7:c6:0a:bf:20:e6:14:7e:
67:23:a6:5f:97:17:ef:06:e5:f5:f4:aa:1d:d1:d2:
36:98:0a:5a:45:ff:db:a2:18:61:84:13:36:d9:30:
56:5f:44:75:4a:9e:09:36:a8:20:dc:d2:c7:f2:ff:
9c:0e:4d:ba:05:9b:6e:fa:7b:8a:f0:ed:c1:cc:b5:
48:8e:20:72:d8:0f:1a:bc:63:12:63:75:7d:5d:14:
26:eb:91:4b:a5:49:77:95:35:79:e9:94:d8:ba:0a:
04:1b:56:f6:d2:ca:82:09:f7:36:88:b4:47:cd:c2:
51:52:2b:ba:03:23:fa:8f:4e:d0:5c:10:fd:03:d5:
c0:8e:bf:44:65:6c:4c:81:6d:ed:19:32:fc:af:ab:
72:7a:35:ef:f0:8d:6b:24:65:5f:6d:c0:e6:c4:d9:
b9:57:3a:05:82:33:96:ca:87:a6:86:01:74:30:78:
73:1a:25:64:06:78:39:0e:f8:2e:9c:c8:36:0f:5e:
3a:37:27:70:5b:04:a5:44:32:c2:c9:c0:96:4d:e9:
fa:1c:66:68:1c:76:b3:7a:c6:96:fc:eb:c3:92:f9:
cf:ac:0b:c5:0c:20:10:72:66:43:3e:c0:91:9b:ae:
23:1d:91:ee:b8:f2:f0:bc:e7:f2:bf:ca:12:77:1a:
c8:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:41:0A:3C:D3:BA:26:6D:64:0C:F0:22:0B:76:88:AE:90:29:F7:59
X509v3 Authority Key Identifier:
keyid:B7:86:78:BD:65:4C:A6:B1:0A:5C:77:3B:C2:69:75:4D:C2:34:CF:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4Z4vWVMprEKXHc7wml1TcI0z9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/480f4a-a937-4149-aee8-e32924ac7b63/1/t4Z4vWVMprEKXHc7wml1TcI0z9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:86:82:1c:b0:38:fc:62:2e:42:55:79:c9:80:ec:e8:19:bc:
df:30:2b:5e:63:0f:7a:06:3e:96:b4:7b:f0:90:f2:3c:ab:b8:
1d:4f:08:27:ff:d7:49:44:dc:f5:e2:f1:fe:9e:ec:10:b8:f7:
e1:f6:3a:8e:88:46:54:b1:21:92:01:36:21:78:7a:bd:46:8c:
29:fd:2c:43:fe:2a:bc:99:70:13:6d:04:38:e5:36:c1:dc:eb:
dc:b3:f0:56:c3:f8:b5:5e:92:b7:e5:5a:b0:67:2d:99:d7:7c:
e3:c2:67:84:9f:d9:2f:30:86:8c:ba:7f:aa:65:2a:7f:f2:26:
b6:02:2c:e7:27:11:24:43:a6:c7:72:dc:10:6e:03:21:b4:70:
5f:72:91:3d:81:4f:80:3c:4f:53:c8:ae:b1:59:62:ea:14:33:
82:0b:6f:63:d8:d5:5d:ea:ea:a2:b8:71:95:40:d6:88:87:0c:
5b:98:43:55:ac:c7:23:8c:16:ea:5a:a0:87:99:f3:06:08:04:
1d:62:b2:99:14:66:66:da:aa:f3:36:6e:4b:3e:72:8d:f8:a1:
d7:3f:8b:28:ae:58:73:16:de:28:73:f8:76:29:86:1d:e6:97:
ec:34:49:9b:ef:21:2d:09:48:36:ca:3b:b3:5b:d0:52:19:89:
9f:74:06:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:56 2025 by rpki-client