Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
File: trcm8FkrUE5yMwX2e6tRR9TqaW0.mft (raw, json)
Hash identifier: 5E0xUOipRlkdUvKD7LocwHZ2K+GlmL62g4egzY5PnF8=
Subject key identifier: AA:A8:06:8E:FF:1F:BD:8E:CD:60:B3:B7:E9:A4:AE:E4:44:66:3D:7C
Authority key identifier: B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
Certificate issuer: /CN=b6b726f0592b504e723305f67bab5147d4ea696d
Certificate serial: 0194BC051344424E8C98B632B13CA5B2C7ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
Manifest number: 076A
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: _oI-Lkb0IuWy-UHIoAbDqvwfl1s.roa (hash: mRZXCcW1ghBXMTwSw7NYgVRMYeyGjl4gH8juqLCzVks=)
2: trcm8FkrUE5yMwX2e6tRR9TqaW0.crl (hash: 7AjTPUkIchlDWt8Z+6IvgddhH7N3Omek3OxKJJ/8a08=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:13:44:42:4e:8c:98:b6:32:b1:3c:a5:b2:c7:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b726f0592b504e723305f67bab5147d4ea696d
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=aaa8068eff1fbd8ecd60b3b7e9a4aee444663d7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bb:0f:5d:c7:6c:77:59:fd:d0:c9:b3:7e:96:
66:73:2e:c7:a1:da:1f:7e:73:06:1a:f0:9e:9c:71:
e7:11:7c:07:eb:c2:3c:e2:ab:9a:03:d4:87:0e:10:
22:21:55:f8:dc:ef:13:8e:c6:49:2f:7e:20:ce:57:
34:47:d3:26:12:64:4b:3e:3c:f3:01:ac:a1:8e:96:
f2:33:37:ae:b0:37:18:70:f5:48:ed:e0:00:4a:26:
40:f2:fb:e8:82:94:67:52:b6:59:29:eb:0c:bc:4a:
8d:2c:43:3e:f5:c8:c5:93:26:4a:2c:48:07:fb:ed:
3f:9a:47:b2:34:51:6e:d6:66:9a:e7:8b:23:f9:fb:
9f:23:fc:fe:3e:af:00:fd:cf:45:b4:f3:db:62:61:
35:0f:eb:ec:16:4b:e6:21:75:44:9d:2d:3e:61:0f:
30:fa:89:a7:2f:a5:a6:0c:f5:dc:93:82:74:fb:d2:
55:d9:44:1c:82:b5:48:ad:5d:fd:a2:12:ad:ff:71:
72:2d:29:ad:ed:b5:d4:79:76:00:df:cb:c0:7f:2b:
3a:ee:54:0e:5a:f4:b7:89:69:4e:c3:14:dd:6c:03:
4d:5b:22:ef:f5:da:eb:65:bf:95:70:da:99:fd:50:
b1:0f:09:e5:ab:fd:0e:51:24:bb:75:a7:38:3c:24:
1e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A8:06:8E:FF:1F:BD:8E:CD:60:B3:B7:E9:A4:AE:E4:44:66:3D:7C
X509v3 Authority Key Identifier:
keyid:B6:B7:26:F0:59:2B:50:4E:72:33:05:F6:7B:AB:51:47:D4:EA:69:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trcm8FkrUE5yMwX2e6tRR9TqaW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a5c3dd-9f98-4c7f-af43-4cec71210734/1/trcm8FkrUE5yMwX2e6tRR9TqaW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a3:3a:63:33:b5:c2:d7:c6:fe:bc:48:f6:4f:37:d6:d2:aa:
92:1a:10:0a:37:08:5e:ed:f7:2d:5f:83:d5:b8:43:ad:54:05:
ba:1a:95:c4:03:fe:43:cb:63:29:0d:16:c3:36:69:48:c1:7e:
b3:8e:59:5c:43:62:d8:22:11:78:1e:34:0b:15:6f:f3:df:5e:
c9:21:89:b3:5e:36:ce:32:73:0c:b2:28:34:ac:48:64:30:62:
73:9e:f4:80:84:c0:3d:9d:a6:ca:4c:64:b3:5a:e8:cc:84:37:
22:57:f9:82:33:3d:59:0a:78:0c:3f:b7:9b:76:ab:5f:89:2e:
bd:e1:6d:1c:f3:68:41:5d:41:06:bf:68:b1:ac:e9:85:30:15:
bf:99:20:9c:b5:1c:c4:87:79:f6:23:e6:16:13:8d:37:8c:2a:
9b:1b:65:79:85:8a:92:a8:79:8c:91:cd:86:b1:b4:f3:d1:1f:
c2:8c:65:2a:9a:19:86:d2:73:3c:7f:d2:01:f0:c6:2a:11:ae:
1e:8c:d1:c7:e5:ca:94:e6:7d:4b:9a:dd:79:5e:98:59:6a:af:
e8:9e:cb:2a:49:8f:8a:90:99:d7:44:0a:10:61:82:a7:04:c3:
e5:b7:85:43:ea:18:83:8e:f5:08:c5:40:c8:b9:b8:e2:c2:c9:
84:44:b6:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:38 2025 by rpki-client