Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
File: _trmiRA5jJ2O51bhaCAd2eiYm1I.mft (raw, json)
Hash identifier: dSV3ZE6iqDpQPS0NzjXStmkWh7R9CAaxajkE/vASr6A=
Subject key identifier: 12:12:80:0C:0D:05:05:54:30:E9:22:03:AE:B1:23:89:70:B5:17:94
Authority key identifier: FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
Certificate issuer: /CN=fedae68910398c9d8ee756e168201dd9e8989b52
Certificate serial: 0194BCA98E1AE750AC08DB557EFED8566421
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
Manifest number: A0
Signing time: Fri 31 Jan 2025 14:00:16 +0000
Manifest this update: Fri 31 Jan 2025 14:00:16 +0000
Manifest next update: Sat 01 Feb 2025 14:00:16 +0000
Files and hashes: 1: 3-rv1v1yCPrdYumYMOu8WdUJkO8.roa (hash: l7PMWmjBkZja+Bzzk9qkIiGKk5+PfjMuS142zfz0fP8=)
2: _trmiRA5jJ2O51bhaCAd2eiYm1I.crl (hash: 6brF7fMcWrKp5DAK5gJEeBQPKRnIUwfhSH3kTTPjV2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8e:1a:e7:50:ac:08:db:55:7e:fe:d8:56:64:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fedae68910398c9d8ee756e168201dd9e8989b52
Validity
Not Before: Jan 31 14:00:16 2025 GMT
Not After : Feb 1 14:00:16 2025 GMT
Subject: CN=1212800c0d05055430e92203aeb1238970b51794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:64:b1:9a:21:32:ef:bd:3f:3b:b4:61:98:22:
30:10:f5:f5:45:1d:20:4c:b2:90:77:52:8f:26:3d:
27:9e:62:6e:00:b3:99:27:88:12:e5:30:99:50:77:
3d:6b:4e:ae:b7:22:77:49:82:35:c9:20:e0:78:56:
35:8f:7a:d3:b9:8c:c2:c1:c4:76:10:c4:52:a0:c3:
0b:77:04:a9:df:69:c1:dc:45:87:f0:06:36:6c:71:
e9:ec:27:1c:14:ca:77:95:16:fc:05:8f:52:79:cc:
b0:8e:b5:8b:71:7d:7e:63:bb:e9:c4:0c:c7:0a:30:
7d:4f:5d:8d:21:f3:c3:d0:20:0b:ac:6e:d9:2c:78:
bb:9a:b3:a4:ca:18:f1:25:84:f7:26:11:53:94:4b:
d4:6a:10:6a:5f:b0:b0:d1:73:00:1a:d7:aa:f5:68:
4b:24:a3:66:38:d3:60:69:19:fa:96:82:3d:3e:1a:
4e:8f:a8:aa:74:d2:8d:d6:35:dd:50:60:8a:fc:66:
4c:af:0f:17:1b:3e:47:c9:4b:a9:94:b3:08:f0:e1:
a7:81:1f:78:d3:69:26:e2:84:e3:53:53:84:21:3f:
2c:72:8c:a5:0f:3b:44:dc:ac:eb:e6:c1:e5:e2:41:
87:c6:ce:42:f7:9a:bb:6a:b2:86:b1:fe:7a:90:a7:
b5:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:12:80:0C:0D:05:05:54:30:E9:22:03:AE:B1:23:89:70:B5:17:94
X509v3 Authority Key Identifier:
keyid:FE:DA:E6:89:10:39:8C:9D:8E:E7:56:E1:68:20:1D:D9:E8:98:9B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_trmiRA5jJ2O51bhaCAd2eiYm1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5f53a3-2260-41b0-a341-500432501743/1/_trmiRA5jJ2O51bhaCAd2eiYm1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:92:30:b3:b3:99:2b:b5:82:6b:67:56:7f:33:e5:e6:b3:d3:
db:16:bd:49:b0:44:e0:1e:5c:ae:74:e5:a6:3d:e4:dd:ad:9e:
e3:83:8d:c1:ee:87:51:91:b2:c3:44:26:cc:16:33:e0:e4:67:
57:03:00:83:68:6b:ff:51:45:5c:39:77:03:75:cb:69:73:c9:
c1:71:cd:87:d0:3b:58:5e:47:79:de:0d:4a:25:c2:2f:1a:86:
10:25:24:98:04:a3:37:ea:6c:90:db:d3:95:32:2d:94:af:19:
ec:7c:cb:a2:41:77:d4:ac:fb:a3:d0:4e:b7:ba:27:c1:3c:b2:
48:5a:1a:0f:2e:5a:52:44:f3:b3:24:da:f6:f4:b5:da:c5:49:
d5:73:a4:c4:ff:0f:45:de:ce:0b:b4:d0:d6:6e:74:d1:0f:e7:
dd:10:35:d6:39:cf:a9:49:64:90:01:20:e5:25:e3:29:51:75:
e0:4b:8b:32:57:8d:cf:3d:6b:17:97:b8:2f:7d:3e:a7:94:09:
d7:2e:ea:05:a4:49:12:44:34:7c:d6:84:46:39:a8:e5:d3:22:
97:31:6a:0d:ce:56:93:c1:d9:b8:5a:88:ed:12:52:e4:ed:c1:
5b:68:b8:68:0e:1c:30:8a:ac:e7:d1:f3:c2:46:14:ff:6f:24:
ce:7b:35:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:11 2025 by rpki-client