Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.mft
File: tU3fbwMzHNdzx-ersVQpuo0gvXg.mft (raw, json)
Hash identifier: 6+aP282boI433M21KV3RmkWJJw3rOE9sUgKk/vV9cig=
Subject key identifier: 86:7D:8F:40:18:68:0B:22:F9:70:89:AF:6E:D5:7B:20:1F:2F:28:46
Authority key identifier: B5:4D:DF:6F:03:33:1C:D7:73:C7:E7:AB:B1:54:29:BA:8D:20:BD:78
Certificate issuer: /CN=b54ddf6f03331cd773c7e7abb15429ba8d20bd78
Certificate serial: 0194BBCE55A6EC0B177BF26D236865CF1EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tU3fbwMzHNdzx-ersVQpuo0gvXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.mft
Manifest number: 056D
Signing time: Fri 31 Jan 2025 10:00:49 +0000
Manifest this update: Fri 31 Jan 2025 10:00:49 +0000
Manifest next update: Sat 01 Feb 2025 10:00:49 +0000
Files and hashes: 1: 1SqAG3Japdqs2uBvGFHguJLvhqE.roa (hash: tRLIPOPh9GLi7wL54w2K0S63l5p5YYde2YPqeJx3wD8=)
2: tU3fbwMzHNdzx-ersVQpuo0gvXg.crl (hash: OZUf1IXmSxI2uzuD5K1d24EL7TtgzwenO3DWIERrCs0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:55:a6:ec:0b:17:7b:f2:6d:23:68:65:cf:1e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b54ddf6f03331cd773c7e7abb15429ba8d20bd78
Validity
Not Before: Jan 31 10:00:49 2025 GMT
Not After : Feb 1 10:00:49 2025 GMT
Subject: CN=867d8f4018680b22f97089af6ed57b201f2f2846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:32:3f:85:4f:52:1c:d9:c2:67:09:11:de:41:
e4:1b:50:cc:c2:a8:ba:24:a4:df:03:f4:d4:22:b7:
50:85:92:1a:35:e8:65:da:0d:20:cf:cb:81:e6:a5:
1a:37:9d:dc:db:4d:cf:a9:3a:9d:72:df:64:40:9a:
85:93:90:4c:7c:0a:45:24:2b:11:74:14:0f:9b:bb:
8f:c6:e9:0d:ce:d2:0d:ee:9b:bb:e9:bf:0d:8f:bb:
65:ed:84:d6:b0:f8:95:38:fc:6b:ec:ef:6d:3a:79:
c4:ce:3e:96:40:4f:aa:61:cc:35:a2:19:b9:49:ab:
14:d2:32:65:8f:65:b4:f9:c6:fd:a0:50:b0:64:1f:
9a:c4:d7:2d:7d:e0:48:52:72:f0:66:56:f7:e2:c6:
50:0b:6e:51:0f:11:ce:f6:14:d4:c0:63:dd:4a:5c:
0c:56:a5:0b:47:9e:de:e5:61:89:12:34:53:30:44:
1e:90:1b:e6:e3:c2:17:6e:66:fa:f5:e4:66:52:6b:
fe:a2:20:b8:b9:67:25:ca:67:69:f9:98:e1:92:00:
22:d3:fc:5a:06:e8:c4:d7:a4:4d:c5:3c:c3:42:f3:
3b:df:c1:93:aa:e7:a6:e7:8b:80:8b:39:21:12:e9:
8e:12:ed:19:33:34:bb:15:eb:0c:35:ab:cf:14:e2:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7D:8F:40:18:68:0B:22:F9:70:89:AF:6E:D5:7B:20:1F:2F:28:46
X509v3 Authority Key Identifier:
keyid:B5:4D:DF:6F:03:33:1C:D7:73:C7:E7:AB:B1:54:29:BA:8D:20:BD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tU3fbwMzHNdzx-ersVQpuo0gvXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/65bcff-ba01-498c-b54d-84026bc852f0/1/tU3fbwMzHNdzx-ersVQpuo0gvXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:d2:5c:86:af:e3:e8:36:5a:16:46:f3:bc:5e:68:e1:f0:63:
35:0d:06:54:7c:2f:2a:9e:1a:32:4e:cb:ac:47:71:98:b3:5b:
03:ae:45:72:be:5a:7c:27:5a:34:ff:c8:dd:f6:f0:b0:a4:75:
28:5a:b8:27:35:2e:46:f9:86:e1:b6:6e:b4:a9:94:16:8d:1e:
b3:8f:8e:db:7f:e8:ef:45:e4:ec:8f:0c:4a:e8:78:c5:80:54:
12:50:ee:1c:46:7f:2c:2a:8c:87:7a:68:79:90:a8:76:26:d4:
b9:cc:bb:2b:ef:8c:f4:e6:bf:5c:07:64:2c:20:12:13:f6:31:
c7:61:02:d8:b0:7f:63:bd:67:b0:41:91:8d:62:d0:f6:09:85:
d7:f3:55:0c:06:45:52:f4:b1:05:d9:08:a2:dd:fe:70:59:f3:
c9:2a:9a:4f:cb:1e:c7:83:e4:42:c7:9e:bc:1e:ce:55:0b:60:
08:48:fb:83:0b:c9:75:9c:e2:eb:9b:36:75:cb:df:81:af:fc:
67:ac:fe:c9:70:c3:e3:52:1c:b9:7b:04:29:c6:32:bb:3b:db:
0b:3d:7e:5d:18:8f:cd:66:ad:df:ce:8d:e9:c4:41:2b:a8:63:
7f:7e:87:c2:b3:27:61:08:05:13:98:f0:d8:57:2b:b7:8f:2e:
0d:30:87:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:05:47 2025 by rpki-client