Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
File: t4FQ8EwyNNv58R4RB5kygC0mj7E.mft (raw, json)
Hash identifier: bM6TY7n76MC1rYqbnYnfB6C74dTzgdQgKZTER02JJZU=
Subject key identifier: 80:8C:78:BB:2E:2B:B3:01:51:D7:F1:DF:42:DC:19:6E:71:AB:4F:F5
Authority key identifier: B7:81:50:F0:4C:32:34:DB:F9:F1:1E:11:07:99:32:80:2D:26:8F:B1
Certificate issuer: /CN=b78150f04c3234dbf9f11e11079932802d268fb1
Certificate serial: 0194BD4E9A19503ADCE6E11CE69F82E7D70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4FQ8EwyNNv58R4RB5kygC0mj7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
Manifest number: 058E
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: MDCWnt2rzIXWYWaxPmc0KCazQYc.roa (hash: 9x3sa/eMNtozgLkEhCL0NnGHAKtQHds50tsgQhEMBDs=)
2: t4FQ8EwyNNv58R4RB5kygC0mj7E.crl (hash: rF2KT1NXKYdaLXGRY9RwlWszkkR9LNHsRH/+G02kDO4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9a:19:50:3a:dc:e6:e1:1c:e6:9f:82:e7:d7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78150f04c3234dbf9f11e11079932802d268fb1
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=808c78bb2e2bb30151d7f1df42dc196e71ab4ff5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:65:29:8c:e5:3c:2c:53:3f:b4:a6:fe:f1:
9c:4d:4c:66:c6:1b:ce:ba:51:f6:fc:41:fc:23:d5:
50:bd:d1:a7:28:0c:df:f9:8f:75:0a:4e:0e:10:b1:
a7:26:30:29:cd:5f:fb:73:96:23:82:16:a5:bd:ed:
14:cf:f8:32:d3:74:aa:62:d2:71:f6:98:f8:47:02:
f0:f3:c2:8d:e2:24:41:d9:13:42:a9:7f:b0:0d:a3:
21:03:b2:80:97:b3:23:1c:ef:d1:37:17:0f:53:44:
95:cc:f2:90:10:00:d7:22:27:db:3d:26:aa:53:ef:
16:24:7c:52:05:4c:7b:47:c9:28:90:bc:c3:d9:f6:
a6:00:1c:d3:49:19:d5:ac:2b:8a:5e:0d:3d:8e:06:
aa:72:8e:f9:42:a0:8f:37:52:8b:1e:f9:35:00:d5:
45:e9:ce:55:79:68:96:ad:17:e2:33:f5:60:88:54:
a7:0a:85:e0:6d:7b:c9:7e:1a:17:f9:b4:99:85:e1:
c4:ab:6c:b4:5d:bd:09:94:b5:da:7f:8b:a7:42:df:
0c:89:5f:0a:90:ea:0d:79:1c:df:62:1c:c7:77:42:
e2:d8:d9:25:cf:d6:b9:08:e9:a4:ec:8b:96:00:58:
ab:85:23:bc:73:c4:f3:db:ef:ea:18:99:7c:44:7b:
23:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8C:78:BB:2E:2B:B3:01:51:D7:F1:DF:42:DC:19:6E:71:AB:4F:F5
X509v3 Authority Key Identifier:
keyid:B7:81:50:F0:4C:32:34:DB:F9:F1:1E:11:07:99:32:80:2D:26:8F:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4FQ8EwyNNv58R4RB5kygC0mj7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/b59a8b-8753-4094-bba7-eccc2c1b1c23/1/t4FQ8EwyNNv58R4RB5kygC0mj7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:bd:ea:a3:d2:9b:86:f0:91:9e:b3:29:ba:da:ca:51:a5:f2:
70:e6:f0:19:1f:d5:cb:d3:dc:4d:4f:8d:cf:70:bb:9b:e9:de:
c0:eb:78:ab:19:a8:33:ca:d3:fc:dd:d7:f5:e5:43:69:e5:b6:
c5:62:e7:c2:57:68:a7:03:54:a9:64:92:26:03:85:2e:53:4c:
45:71:f3:0b:05:e5:1f:56:31:3b:fb:43:08:16:4f:f5:64:0a:
71:52:e6:d5:c1:dc:00:f3:dc:1b:d3:09:08:d7:60:e8:d6:5c:
49:40:aa:3d:92:e3:6d:31:49:67:3e:44:c4:50:32:37:24:01:
5d:9e:3f:9a:e9:63:ab:28:e7:33:c6:95:6a:03:5b:1c:0a:e5:
27:8c:95:d8:a4:03:10:a8:01:fb:b1:99:d4:f8:b8:eb:c0:56:
71:ad:58:d1:d3:67:03:a1:d6:32:93:60:eb:03:d3:16:60:76:
5c:2d:a1:a9:03:50:32:0a:c0:bd:98:7c:cb:e0:34:03:1a:b8:
2d:a7:b4:6d:00:38:b7:6d:75:0f:64:9f:78:b1:82:9e:87:18:
7e:f3:06:e9:f9:c0:70:c3:42:57:24:d5:7b:66:c1:0f:76:0b:
02:b4:51:9b:3c:2b:c0:c7:cc:99:13:d3:c0:26:d9:e4:8c:57:
39:de:ec:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:45 2025 by rpki-client