Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
File: T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft (raw, json)
Hash identifier: PAumnD9JX8xHg3T9tY2SMt8MlHOCndPY2OleMbVaGXA=
Subject key identifier: 8D:CD:91:D1:87:39:67:AF:38:7D:56:9F:D3:CF:EB:88:13:C3:2B:77
Authority key identifier: 4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
Certificate issuer: /CN=4fbb63df06de00c843da63977349595471e51a26
Certificate serial: 0194BD4EB5A039BDC013EA36337CF612FC10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:39 +0000
Manifest this update: Fri 31 Jan 2025 17:00:39 +0000
Manifest next update: Sat 01 Feb 2025 17:00:39 +0000
Files and hashes: 1: T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl (hash: HQz5qq7CCMTPUyILLNDORK2HnpSldGNs8A8xqWUcXbc=)
2: qMVYOgqIzk9KMROylZiVtF-t3Zc.roa (hash: xqIRDpc2sFOdr1/l4Pzbo0nNaeEXShJ8C0GuGpTGneI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b5:a0:39:bd:c0:13:ea:36:33:7c:f6:12:fc:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbb63df06de00c843da63977349595471e51a26
Validity
Not Before: Jan 31 17:00:39 2025 GMT
Not After : Feb 1 17:00:39 2025 GMT
Subject: CN=8dcd91d1873967af387d569fd3cfeb8813c32b77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:57:64:cf:2b:42:5f:d8:d6:d1:15:80:d3:21:
61:18:9f:ba:cb:f5:75:e2:b9:f8:f9:98:b3:76:6b:
7a:92:fd:64:54:eb:46:45:f3:fa:96:88:30:2a:5a:
98:b1:d7:2f:31:a4:0d:1d:68:44:ce:16:29:b5:d6:
59:f8:d1:7c:e1:7f:2f:38:5f:51:26:a9:70:dc:6f:
bb:7b:3a:a9:94:ce:ac:c1:d5:5e:32:df:36:e3:90:
40:91:7a:7b:97:3f:75:6d:0c:50:1d:ed:9c:26:99:
f7:65:10:c9:16:aa:23:36:84:45:1a:55:e9:51:7a:
34:67:d1:32:5c:1c:73:2d:ab:da:4c:d9:8c:49:34:
fe:42:3e:d3:de:70:07:42:eb:47:5f:96:b6:5e:7a:
79:02:87:1c:49:06:9a:d7:20:66:06:68:c0:88:cd:
87:79:a1:2b:f6:d4:25:87:1c:0d:42:3c:d2:f4:ce:
8d:b1:6e:8a:0e:d6:c8:a4:24:80:b7:3e:4a:7a:32:
18:85:de:dc:0b:1c:4e:8c:93:34:ca:f8:1c:1f:f6:
7c:96:fd:15:69:90:96:b8:b5:ed:87:02:7a:68:7e:
33:a1:19:f8:64:bf:de:26:ee:36:20:fe:8b:82:af:
82:b6:2e:0c:83:2b:4a:c4:bc:a0:fa:94:7e:cc:e3:
bb:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:CD:91:D1:87:39:67:AF:38:7D:56:9F:D3:CF:EB:88:13:C3:2B:77
X509v3 Authority Key Identifier:
keyid:4F:BB:63:DF:06:DE:00:C8:43:DA:63:97:73:49:59:54:71:E5:1A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7tj3wbeAMhD2mOXc0lZVHHlGiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/a59ee9-33cd-47df-8403-b9472a2c5b3e/1/T7tj3wbeAMhD2mOXc0lZVHHlGiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:71:17:d1:de:14:92:c4:71:c9:a5:34:43:82:57:69:7e:b4:
9e:39:23:6c:0a:0b:1f:3d:7c:c4:7d:28:79:a8:95:74:d3:04:
b9:86:d1:3e:ea:74:26:c8:36:52:30:05:49:10:21:67:c8:a1:
e2:e7:ec:8b:0d:73:ed:1b:c3:4e:d8:8b:8f:5e:2c:17:05:9c:
4b:08:69:ff:54:bd:62:d6:62:66:5e:03:c3:50:a8:a0:2c:93:
3e:3f:d1:d5:5d:c9:1c:09:3a:64:ec:52:8b:ee:a8:a6:c8:16:
4c:90:96:73:a2:da:72:9c:5e:0f:95:ed:dc:dd:a0:21:70:6f:
24:18:81:0c:bf:c3:a6:59:85:84:a7:db:68:06:c6:b0:eb:48:
b4:13:26:15:8b:9a:82:09:7e:2b:34:d9:74:7c:99:43:cc:20:
f5:39:ad:71:79:85:85:bc:12:fb:38:4e:3b:4c:20:77:ee:99:
bc:58:b3:13:04:ca:64:56:97:86:32:86:19:66:bb:74:ff:2c:
5b:6a:ee:0e:aa:08:39:e7:ed:9a:21:9a:c8:65:f0:b5:e5:3e:
5e:52:a7:a2:1f:b4:3f:cd:8e:15:d8:44:0c:38:14:82:98:09:
35:18:30:f9:28:4d:3b:24:b7:87:98:3b:2a:de:d0:e8:fc:b3:
6c:93:11:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:21:41 2025 by rpki-client