Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
File: T7OopKDYxa4BqWlbBB7SxtApap4.mft (raw, json)
Hash identifier: AaL2R7dyFHJWT5WvfFFLtpUfx6R7rHSjvtPpHGL72ts=
Subject key identifier: 50:A1:2F:FA:BA:36:5C:60:B3:64:1C:43:27:41:4F:AE:EF:B7:7C:A3
Authority key identifier: 4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
Certificate issuer: /CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Certificate serial: 0194BD85A06A0310D760D53A2926DE0B40DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
Manifest number: 0B21
Signing time: Fri 31 Jan 2025 18:00:38 +0000
Manifest this update: Fri 31 Jan 2025 18:00:38 +0000
Manifest next update: Sat 01 Feb 2025 18:00:38 +0000
Files and hashes: 1: T7OopKDYxa4BqWlbBB7SxtApap4.crl (hash: dM+5scg1c3pLNlfoVoNORLK2n4c0Yn1CsmoEV3uQVz0=)
2: f56823CiqLOMuTriNLS3PUZ78yU.roa (hash: jqCq9kSPvKsgvdkfpEOf8qz0/6Off+XucTySJaLEm7M=)
3: zKhksjQURk5K1Dod96pBNAB3OII.roa (hash: gundq1JGdYbfKX8ieC3GIfS0gF7vi8HY0pmpJJSYlFs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a0:6a:03:10:d7:60:d5:3a:29:26:de:0b:40:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb3a8a4a0d8c5ae01a9695b041ed2c6d0296a9e
Validity
Not Before: Jan 31 18:00:38 2025 GMT
Not After : Feb 1 18:00:38 2025 GMT
Subject: CN=50a12ffaba365c60b3641c4327414faeefb77ca3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7f:b7:ba:72:63:9a:9e:41:ba:17:8d:f0:d9:
63:6c:e2:64:e8:9a:fa:d3:91:ac:7d:80:e1:22:86:
0e:8b:d3:de:38:88:3e:b9:a5:97:7e:89:8e:47:6a:
38:44:47:bc:78:4c:7c:e2:ab:20:58:63:a6:68:29:
75:6b:c0:d4:84:f9:19:36:c3:ac:1d:1a:09:b2:2f:
cb:11:38:ee:c1:78:d7:81:3c:f2:5e:7e:97:5b:bb:
8f:3c:ea:c3:c5:56:72:a3:94:e2:3d:3f:fa:24:87:
df:2b:43:aa:c6:1a:22:0d:dc:82:40:03:bb:fc:1f:
53:8d:c6:5c:e4:42:7a:13:f1:8f:1e:06:05:95:c8:
fa:da:f7:6e:d8:7f:1f:23:48:69:a0:22:f5:13:4d:
af:b3:ed:3f:ca:19:23:52:c6:44:57:dc:08:72:09:
ec:4a:37:2c:49:a1:fb:56:b3:b0:77:9c:65:0c:4f:
de:80:28:d2:9d:26:af:2f:06:07:4a:f8:b0:ad:34:
32:54:49:36:9a:cb:6f:55:ff:50:be:2a:56:29:48:
44:c2:c8:57:7b:12:55:8b:0c:8c:73:cd:a5:02:7d:
7b:39:21:d5:f8:51:3a:f0:7a:76:36:b7:1b:32:a8:
1e:68:4e:70:ba:44:38:a5:9a:7d:05:02:59:a7:58:
1f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:A1:2F:FA:BA:36:5C:60:B3:64:1C:43:27:41:4F:AE:EF:B7:7C:A3
X509v3 Authority Key Identifier:
keyid:4F:B3:A8:A4:A0:D8:C5:AE:01:A9:69:5B:04:1E:D2:C6:D0:29:6A:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7OopKDYxa4BqWlbBB7SxtApap4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/6ef23e-99ba-4c69-92e3-6bb7080409b4/1/T7OopKDYxa4BqWlbBB7SxtApap4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ce:0a:21:89:5f:32:09:4c:07:ea:27:75:58:0c:53:ef:5f:
a0:39:66:b1:16:3e:21:78:4e:a3:2f:82:54:10:ca:72:37:74:
7a:8a:32:92:15:63:0c:f4:92:ab:0b:a8:bc:d0:af:28:38:0d:
93:11:e4:12:5c:c2:bf:95:de:8f:c4:3b:fb:8e:a0:1f:eb:09:
a9:c1:8c:e6:87:5b:f1:e6:aa:c0:14:a6:d7:d2:2b:91:58:32:
ee:cd:6a:88:ea:96:85:dc:a1:3c:de:39:91:89:bd:e7:06:d3:
27:f8:de:69:df:6e:2f:f1:5f:e0:7b:97:c3:8e:b0:59:5a:04:
15:95:7e:3c:6e:1f:45:a8:b3:00:03:2e:2c:ff:64:c0:d2:42:
4d:da:2e:72:18:2c:89:ec:1d:f0:4c:f2:ba:14:51:3d:de:34:
5d:ed:ca:40:41:ec:6c:09:65:3f:d4:88:fe:34:a2:0e:26:5a:
25:bd:3c:67:4a:9c:e2:eb:11:20:04:42:83:05:46:92:68:3f:
e0:f1:b5:99:e9:4f:31:87:d1:7d:0d:71:be:09:50:f7:c4:4c:
9f:c5:bc:ef:4a:52:1e:b1:eb:71:18:a4:7e:99:f5:a4:3a:10:
3e:e1:61:27:e2:15:b6:44:a6:89:91:d1:a0:40:4c:0e:14:8a:
04:3b:ad:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:04:17 2025 by rpki-client