Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
File: tBErtZsGJ9ojr5DA8FhLcbUPd48.mft (raw, json)
Hash identifier: 3Wyt833tK4QjmjKVIBLdhD88L91bHP2mJe7AgjCcdmY=
Subject key identifier: 27:3C:F1:92:77:B7:0E:71:48:EC:AD:8A:30:08:F1:F7:9C:61:0E:34
Authority key identifier: B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
Certificate issuer: /CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Certificate serial: 0194BD4E834742969AA7AF2130FA183D7BF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: RRFPoj_D2514uvr1pJ51Asozslw.roa (hash: EUwe8zILfT5h0ET/pLOGX/O1GKfRNQcxkScAvJ+rEAs=)
2: tBErtZsGJ9ojr5DA8FhLcbUPd48.crl (hash: 8Tv0G3OcLjTzFXKeTONyE31M80e/6lagCc7mjYYaUqU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:83:47:42:96:9a:a7:af:21:30:fa:18:3d:7b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4112bb59b0627da23af90c0f0584b71b50f778f
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=273cf19277b70e7148ecad8a3008f1f79c610e34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:b6:89:66:e9:88:bd:de:62:ab:ac:83:7e:1d:
7c:24:09:c7:a9:3d:30:5c:0b:ed:a0:f7:1c:02:ed:
04:2d:a7:37:6a:b6:73:72:17:f4:3b:b0:e1:08:69:
e4:34:00:4e:ce:f4:b5:df:d0:ba:86:60:9c:b2:be:
cc:f4:35:74:40:8c:69:f8:87:5a:2b:18:78:db:2d:
c6:9e:a4:95:62:70:a3:8b:da:61:d7:21:39:4a:d8:
4c:5c:93:ea:bc:bf:89:0f:95:1e:02:b0:2e:0d:a0:
c0:92:3c:63:80:53:ef:4d:1e:c5:a0:9d:4a:ef:29:
be:c8:e7:70:f6:8a:44:d5:43:8a:ac:ca:80:6a:bc:
05:98:82:00:41:be:ee:bd:9d:3c:64:7e:ab:45:7d:
ee:bd:1a:be:36:35:09:00:2f:ea:d8:2e:68:df:39:
c9:a7:83:ad:a5:68:54:83:b1:c2:84:4a:a0:32:e6:
82:88:16:b5:36:03:ad:5d:98:de:48:19:2d:1b:a9:
11:34:75:c6:a2:c6:7b:28:a3:82:00:a6:e6:32:7e:
08:8d:e5:69:a4:ed:11:1b:79:86:0e:73:6a:b2:e1:
2f:b6:68:f7:2f:71:a0:94:51:04:b1:46:08:60:48:
d5:37:a4:fe:e5:03:b2:ae:be:df:52:28:7e:08:85:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:3C:F1:92:77:B7:0E:71:48:EC:AD:8A:30:08:F1:F7:9C:61:0E:34
X509v3 Authority Key Identifier:
keyid:B4:11:2B:B5:9B:06:27:DA:23:AF:90:C0:F0:58:4B:71:B5:0F:77:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBErtZsGJ9ojr5DA8FhLcbUPd48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/67d57e-f3de-4d10-bd9d-87a10bc68a37/1/tBErtZsGJ9ojr5DA8FhLcbUPd48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:39:45:76:eb:00:f1:25:05:e9:6b:df:71:2c:e6:e3:db:9d:
22:8d:94:aa:3a:41:af:04:62:12:8b:6a:ec:f7:a5:88:5c:6b:
5f:8c:74:aa:ce:27:eb:61:61:b3:75:36:68:e1:58:75:38:03:
e9:b0:e6:b9:dd:0e:4c:dd:da:d1:b0:a7:79:08:60:53:c3:64:
92:2a:0a:76:62:51:ce:70:93:62:58:20:79:a7:cb:99:3b:ca:
88:b7:9b:a4:c5:0f:09:7f:c6:95:9e:3e:e4:8f:ac:45:dc:ff:
23:d1:a5:17:ba:7a:3d:7e:03:6c:88:f0:98:8a:7b:17:06:b3:
47:42:0c:d1:f8:83:29:1e:28:3b:fb:ed:eb:fb:21:f4:58:bf:
17:d2:f5:50:9a:9b:97:9c:55:70:af:68:15:d1:09:cf:65:f9:
4f:66:d9:7e:82:74:92:1c:97:a9:23:be:76:0f:86:19:8d:e6:
db:cc:26:32:48:98:d5:6b:1a:01:41:b7:86:9e:51:92:7c:bd:
38:26:3e:73:f0:a0:9c:f0:c1:98:d7:26:e5:08:e7:b2:67:b3:
9e:d8:01:47:39:d6:e3:5a:6c:f5:52:f5:c8:7e:dd:bc:34:33:
df:b8:e9:88:7c:40:c7:77:c7:9b:86:33:4a:6f:69:e0:c0:2a:
b9:d2:55:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:34:19 2025 by rpki-client