Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
File: TS-f1cihTNyfMcRYXNYNtXz_tMI.mft (raw, json)
Hash identifier: CPvR+qhpSNIycldlw/h7+Akt11+zo3/ulWHdFmT2J78=
Subject key identifier: 37:0D:32:64:CC:F5:BC:A9:33:04:45:FC:45:69:1E:6F:E2:42:2B:14
Authority key identifier: 4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
Certificate issuer: /CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Certificate serial: 0194BBCE219D0F7BBBABF56D8C48DD6DB16F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
Manifest number: 0AED
Signing time: Fri 31 Jan 2025 10:00:35 +0000
Manifest this update: Fri 31 Jan 2025 10:00:35 +0000
Manifest next update: Sat 01 Feb 2025 10:00:35 +0000
Files and hashes: 1: 1-QMPtoomm6W5CX-SS0fyQ5AS734.roa (hash: hcd0LKLxrMub9hVDF7pi719s+IDTrzb/8hX4yl7gw2w=)
2: 8-JB4jMg3_rMGJjuIMVCBLnxwQ8.roa (hash: buBER4odhou/4TCkZQ3UeIhbfaoQJUXmTZ3cmJ4K9k8=)
3: TS-f1cihTNyfMcRYXNYNtXz_tMI.crl (hash: rj3sj/auhbKhC4hOh9fMEF3BnRWfrcX7GqsTv4+wGm4=)
4: pSmbhIOz_v9DcZ6BjkBTv88tPZ4.roa (hash: 1vOAxGM5C9HFgFv3tm1lOiYWc4bRDbFQtmaO7PV8kkc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:21:9d:0f:7b:bb:ab:f5:6d:8c:48:dd:6d:b1:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d2f9fd5c8a14cdc9f31c4585cd60db57cffb4c2
Validity
Not Before: Jan 31 10:00:35 2025 GMT
Not After : Feb 1 10:00:35 2025 GMT
Subject: CN=370d3264ccf5bca9330445fc45691e6fe2422b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:73:0a:8c:7d:4e:62:25:63:5b:d5:cf:a2:5b:
0d:6a:1b:a1:ee:77:bf:4a:e9:69:98:bd:13:02:31:
9a:4f:14:ca:cc:5f:29:26:ea:2a:83:f4:b8:b3:d6:
9a:21:c2:2b:c1:05:0f:52:04:88:d6:00:d6:5c:ce:
c2:e6:b3:1e:22:5f:7a:43:ee:5e:9a:ed:bf:30:34:
b8:a2:d6:78:65:37:c7:ee:67:86:4d:78:63:2e:21:
a3:dc:dd:d1:8f:6e:d5:45:dd:af:a9:fd:b6:72:43:
b6:9d:dd:b4:fd:6f:df:d3:f5:e4:e6:5d:ef:e6:76:
49:06:0c:47:80:11:44:a1:91:81:e0:d4:82:41:90:
09:fe:73:c6:a1:88:9a:e9:c7:d6:92:a1:07:ff:17:
12:ce:3b:57:86:6b:e8:48:41:f2:43:49:39:7c:c2:
73:b4:f8:51:2e:27:35:aa:29:30:99:4c:bd:1c:a1:
fa:e2:58:6c:5e:a3:61:89:36:53:73:aa:d6:1f:1c:
b1:95:b4:fe:f3:ed:31:0d:42:c9:83:c5:a8:d2:d0:
38:84:fa:88:51:ce:55:21:6b:c3:0f:d1:bf:34:e2:
fe:74:f2:dd:bf:1c:b9:05:22:e3:08:81:78:3b:8e:
25:a5:df:41:fb:ba:e1:92:e4:bc:8e:66:2a:33:71:
3b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:0D:32:64:CC:F5:BC:A9:33:04:45:FC:45:69:1E:6F:E2:42:2B:14
X509v3 Authority Key Identifier:
keyid:4D:2F:9F:D5:C8:A1:4C:DC:9F:31:C4:58:5C:D6:0D:B5:7C:FF:B4:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TS-f1cihTNyfMcRYXNYNtXz_tMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/da4e46-2a93-44a4-b8e3-c2133dd81b56/1/TS-f1cihTNyfMcRYXNYNtXz_tMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:87:17:02:29:f8:43:88:b3:f5:8c:d8:62:7c:77:03:60:2b:
0e:47:7d:ba:61:85:19:b7:44:2a:eb:a6:9a:66:78:d3:cb:f0:
d3:b3:df:35:e0:5b:04:46:84:bc:39:1d:17:7d:27:e7:ae:44:
da:27:b8:d6:14:2f:54:d1:30:03:3e:3d:46:f5:b2:7b:44:45:
38:5f:77:7a:eb:1e:25:92:a9:b4:a8:f7:5f:61:2a:2a:aa:fb:
82:50:86:be:c6:1c:5e:67:91:25:8f:9f:6c:a3:65:f6:f9:5a:
cd:22:b4:ef:7b:fa:a6:f9:96:06:26:d2:0b:10:a0:21:7a:9d:
b0:75:1c:cc:b6:d5:7e:6c:25:09:fe:4d:29:23:5b:bb:e8:fc:
c1:fa:20:4b:19:5f:a3:f2:d3:95:a6:d1:fb:3d:5e:3e:4d:d8:
a9:38:ca:e5:d3:2a:40:86:41:4c:42:eb:aa:23:c0:ea:2a:e5:
85:94:22:61:0f:64:9b:f2:fe:26:4e:99:09:93:53:22:4c:1e:
d8:bb:12:ef:d5:72:42:8e:57:a4:cc:0a:5c:d3:99:9a:15:a7:
97:b7:ea:b7:f2:b1:5d:6d:1c:6e:ed:bb:bb:1f:cc:c4:48:fc:
9d:12:3d:2b:67:6e:d0:54:c7:63:eb:05:69:63:e7:9b:68:dc:
20:90:83:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:44 2025 by rpki-client