Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
File: tPSWmNCOjCg8DfKoLxaZfmJZurY.mft (raw, json)
Hash identifier: Vc07e9/yxy67cOePYk/U203Tx+UzI/4vC4dXDwrLNwc=
Subject key identifier: C7:03:F8:DA:30:6B:9C:A9:91:49:BC:B3:F0:5F:56:F6:04:7A:07:85
Authority key identifier: B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
Certificate issuer: /CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Certificate serial: 0194BCAA0F7037CF59FE5CEEF22915A064A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
Manifest number: 05F7
Signing time: Fri 31 Jan 2025 14:00:49 +0000
Manifest this update: Fri 31 Jan 2025 14:00:49 +0000
Manifest next update: Sat 01 Feb 2025 14:00:49 +0000
Files and hashes: 1: tPSWmNCOjCg8DfKoLxaZfmJZurY.crl (hash: 2KRGpwKrJ7JVIPF8Oa5X6Cou0jxv5YMbiMc+v/32a3M=)
2: xzawIGSZ9gaUq6klJYybOrl_u8k.roa (hash: 1673awjNQrA/kSjVn3AcQmjZN9mvF8MpaJPKmYa0E/w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:0f:70:37:cf:59:fe:5c:ee:f2:29:15:a0:64:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f49698d08e8c283c0df2a82f16997e6259bab6
Validity
Not Before: Jan 31 14:00:49 2025 GMT
Not After : Feb 1 14:00:49 2025 GMT
Subject: CN=c703f8da306b9ca99149bcb3f05f56f6047a0785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:51:8c:78:c2:0c:a1:bc:78:f7:38:a0:d6:0e:
83:0d:93:61:63:1e:a8:4a:60:6f:6e:42:c2:1d:e4:
7e:67:1a:3b:de:46:f5:78:ea:bc:51:fd:20:88:7e:
f5:1a:aa:d0:45:17:e6:68:f0:01:13:c1:b3:85:4c:
66:3a:82:de:e4:8e:1a:64:de:28:37:bf:9b:96:dc:
17:1e:a5:4a:ed:3e:48:a8:cf:f0:c7:78:5d:57:34:
91:2b:d9:c7:1c:22:8c:5a:a2:a3:24:e5:63:38:35:
1c:0b:63:1e:6d:ab:74:9b:3a:9c:ae:a8:20:fd:f2:
71:a5:7f:b4:59:fc:4b:93:62:b6:83:25:cf:e2:09:
46:2f:df:6a:38:92:30:ee:31:76:fe:cb:63:6b:33:
d1:dc:c2:38:7f:1f:da:43:51:5c:4b:9d:0b:87:10:
e5:62:8f:7e:08:b4:a9:0f:76:bd:2c:90:98:2e:b7:
b2:2c:4b:d8:08:14:74:45:28:0d:6d:b4:c4:fa:7a:
a8:97:65:cd:67:ce:69:3f:fa:3b:99:e0:5a:28:34:
2a:14:03:d3:44:3a:f2:5c:0e:e4:ca:ca:e1:3b:55:
22:32:ce:1d:e4:03:a5:d9:69:a1:3c:ff:82:53:9e:
a7:16:5a:fa:2d:e8:a3:d9:d6:35:12:ac:7f:35:85:
59:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:03:F8:DA:30:6B:9C:A9:91:49:BC:B3:F0:5F:56:F6:04:7A:07:85
X509v3 Authority Key Identifier:
keyid:B4:F4:96:98:D0:8E:8C:28:3C:0D:F2:A8:2F:16:99:7E:62:59:BA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPSWmNCOjCg8DfKoLxaZfmJZurY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f63d76-2fb6-43a2-bfec-9f7aa094303b/1/tPSWmNCOjCg8DfKoLxaZfmJZurY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1c:f9:1c:18:55:64:37:09:07:85:6e:d1:fe:45:f9:ea:e2:
12:c7:eb:62:5c:9f:b9:ed:67:05:d6:01:cc:79:22:6e:c9:54:
c5:69:64:ef:60:ee:b9:c9:01:57:4f:73:61:8e:52:b3:6c:7e:
db:ce:17:f1:3a:60:02:e0:72:54:dc:48:0d:3d:d2:5b:b0:15:
3b:c6:d7:b0:67:36:55:b3:c1:83:93:a2:87:64:91:e6:f0:1a:
5d:e5:34:e5:92:81:77:06:4a:1d:6a:d0:d1:fd:97:c8:96:42:
e9:aa:87:4a:fd:3a:01:ca:ab:44:e6:32:5c:f9:11:68:c4:16:
46:fe:0c:7b:b2:b3:b1:c9:66:bb:88:ce:48:e3:b2:d7:c1:38:
c5:1f:cc:b8:14:f5:d4:0c:98:cc:43:d0:2c:54:b9:86:cc:a3:
6a:74:74:63:9a:17:32:41:33:93:28:5a:17:2b:57:96:85:f9:
c6:10:37:d5:d8:9e:12:bb:b2:56:a9:a8:c1:ca:81:58:12:9f:
bb:7b:96:04:3c:9e:45:c2:ac:34:86:cd:d5:aa:78:81:19:ab:
1c:d8:3e:32:14:f4:7f:12:ae:68:a1:47:9f:23:eb:c2:9e:34:
2d:91:1a:5b:21:ab:08:70:97:de:b9:b2:05:2b:1a:55:1f:d7:
42:0e:f6:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:04 2025 by rpki-client