Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.mft
File: 1TOS85C0La1wA2dOvC0B3z3tgbw.mft (raw, json)
Hash identifier: wHLgC+GYn/OYIXmpDnTon84WtaIERlm7UmwtdTJsmoQ=
Subject key identifier: C5:EA:C2:22:2A:F1:90:A5:80:0E:EC:46:33:37:A0:A8:8F:24:42:48
Authority key identifier: D5:33:92:F3:90:B4:2D:AD:70:03:67:4E:BC:2D:01:DF:3D:ED:81:BC
Certificate issuer: /CN=d53392f390b42dad7003674ebc2d01df3ded81bc
Certificate serial: 0194BC3BD74A0E2DF88272329BEF8525E2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1TOS85C0La1wA2dOvC0B3z3tgbw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.mft
Manifest number: 0800
Signing time: Fri 31 Jan 2025 12:00:25 +0000
Manifest this update: Fri 31 Jan 2025 12:00:25 +0000
Manifest next update: Sat 01 Feb 2025 12:00:25 +0000
Files and hashes: 1: 1TOS85C0La1wA2dOvC0B3z3tgbw.crl (hash: 3/8t5vuX1pekAwI+zZa3UvIaa9rYnl+fyeGahb76pPs=)
2: BeyMb2qH8UcdJlJvMzIMBQ4mDjs.roa (hash: hQve+rtDZ0jg1uu0Y35IBtJorVyNaKyG6WOdEkpYqKs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d7:4a:0e:2d:f8:82:72:32:9b:ef:85:25:e2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53392f390b42dad7003674ebc2d01df3ded81bc
Validity
Not Before: Jan 31 12:00:25 2025 GMT
Not After : Feb 1 12:00:25 2025 GMT
Subject: CN=c5eac2222af190a5800eec463337a0a88f244248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:3b:6d:75:4e:82:e7:8c:26:d9:33:89:6a:bf:
b1:d0:c5:99:98:95:69:c8:84:9a:9c:22:6b:58:ac:
72:46:e8:f7:fa:df:cc:a1:32:b5:e0:c0:de:fc:02:
a2:55:8c:be:f3:b4:ca:56:be:97:ac:58:39:00:82:
55:27:73:46:5d:b1:10:25:3c:27:b1:54:35:c6:2c:
79:b4:88:8c:a9:5f:7b:70:31:cf:7e:fc:18:e5:15:
e0:60:c9:2d:a3:db:39:91:c9:ca:9d:de:8f:be:57:
f1:d4:23:65:fe:05:c3:51:9e:9d:53:2f:c3:d3:84:
ad:e7:b1:c9:cd:b1:36:4c:4d:3d:eb:ab:ec:19:f4:
ac:e9:ed:67:87:e9:b3:e3:bd:fd:db:6c:7f:d4:80:
c8:61:1d:e4:72:4e:dd:1e:4a:82:07:ac:c9:1a:a2:
e2:b0:77:ad:1b:63:df:05:65:9f:b1:d3:42:3d:1f:
77:d5:a7:5c:1c:50:fb:4f:06:01:86:08:71:6c:ce:
06:16:f1:2b:a8:f9:d2:4c:ce:23:58:63:ab:09:23:
a3:75:99:1a:f1:4e:6d:91:52:19:3d:82:8a:7f:dc:
d6:26:a1:ee:fb:1e:9c:f6:9a:d3:bd:fc:e0:40:58:
74:39:65:a6:2d:10:33:d2:91:7c:a7:ee:2d:70:10:
ee:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EA:C2:22:2A:F1:90:A5:80:0E:EC:46:33:37:A0:A8:8F:24:42:48
X509v3 Authority Key Identifier:
keyid:D5:33:92:F3:90:B4:2D:AD:70:03:67:4E:BC:2D:01:DF:3D:ED:81:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1TOS85C0La1wA2dOvC0B3z3tgbw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bb3e71-d308-4b1c-b68a-34bd2a1dd80a/1/1TOS85C0La1wA2dOvC0B3z3tgbw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:75:70:dc:0b:99:df:32:bd:8f:da:7e:51:16:e5:90:ec:1b:
d8:24:cf:ad:65:10:c6:c1:c5:70:0b:cf:02:27:31:5d:02:4e:
3e:35:6e:2a:20:66:01:84:33:1c:2a:f1:4f:8c:7f:0e:e6:e9:
e8:cb:db:2e:4b:44:a4:35:bc:7b:f1:b1:14:b5:c1:d4:87:31:
15:da:82:a8:9c:0a:af:20:c2:f0:1d:25:72:d2:44:9c:06:f0:
bf:c3:0e:e1:6d:d4:7f:0f:dc:36:55:88:37:bd:3d:0b:53:1b:
48:a8:89:85:96:f8:0d:30:66:5a:58:10:89:86:6c:f8:20:67:
0c:e8:9f:52:47:99:12:cb:99:7b:c4:9c:7a:23:95:c2:a5:7e:
e2:8c:1a:3e:b7:7c:68:67:1d:2f:11:62:60:f8:3b:fb:ac:5d:
35:d9:85:93:1a:64:44:1a:56:41:21:77:74:6f:9c:5d:a8:37:
7e:71:aa:0c:43:ef:99:8d:5c:8a:52:f7:ed:2c:4e:69:97:6a:
77:54:61:18:73:4b:b7:3b:97:a8:4d:0b:ae:d4:8c:d1:c2:24:
3d:6a:01:ca:b6:82:c0:7b:58:b8:21:36:ae:93:8f:c0:71:35:
4b:a0:6e:03:a0:3d:5a:56:91:96:5c:33:3b:38:f9:f6:b5:1c:
af:cd:d3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:55:05 2025 by rpki-client