Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
File: tbYylyVHZz3w91qryDmiQihUoio.mft (raw, json)
Hash identifier: BBlhXnj+QvdqrT8s0UCjAxpupA11+VhGbxKHmHU6YMQ=
Subject key identifier: A8:DF:09:84:A1:4A:56:C5:12:22:0E:FE:E3:88:D4:84:09:5F:F3:FB
Authority key identifier: B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
Certificate issuer: /CN=b5b632972547673df0f75aabc839a2422854a22a
Certificate serial: 0194BD4EC0DF4A0A0675601A462904351DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: cUeWbg23uzdb5xSz99WNI9WtnoI.roa (hash: s+577iLuT/1Ct4G1mVjBy6TiewUwm3DkGU10CzpZuFE=)
2: tbYylyVHZz3w91qryDmiQihUoio.crl (hash: 5lf996evNyFFtBHeO3wgAoCQXfsBfj/VdnzafIjQ534=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c0:df:4a:0a:06:75:60:1a:46:29:04:35:1d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b632972547673df0f75aabc839a2422854a22a
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=a8df0984a14a56c512220efee388d484095ff3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:cb:7a:61:42:f9:ff:71:75:94:f3:61:a6:
25:b8:37:0c:68:a3:74:9e:6c:93:a8:4a:f0:c5:3c:
29:5b:c2:17:e0:21:7a:b0:d3:ce:07:d9:0a:f6:73:
bc:7d:0c:63:ea:36:22:df:12:73:e5:aa:87:3e:f8:
76:3a:0b:27:94:65:e6:20:91:89:bf:b6:40:ff:9f:
19:d4:5a:fb:a5:0b:a8:6e:6f:1c:01:df:b3:31:26:
86:f7:5c:46:11:01:70:03:ce:ae:22:01:6c:4a:7f:
4a:04:47:69:79:c3:ab:c0:4c:4f:c8:7e:90:72:8b:
17:57:44:15:9a:e4:97:dd:41:6f:65:a8:8c:48:12:
5d:0d:60:bd:5b:bd:7b:3a:65:06:11:2c:59:ab:78:
0e:41:bd:b2:53:c3:23:a8:90:04:87:76:1b:7c:93:
44:7c:42:a2:59:25:00:e8:1c:a0:a1:27:75:f4:19:
e7:19:1c:6e:15:bb:50:a6:ad:e0:f5:b2:ba:64:90:
4b:f5:2f:46:55:21:ba:72:9e:66:47:55:61:9c:91:
0f:60:7c:bc:7f:f5:db:6f:af:a5:b3:a6:99:bd:e5:
fc:6a:a8:a1:6d:26:47:43:a6:de:eb:b3:3d:48:6d:
1e:79:81:1f:d3:28:8a:95:a4:e1:10:7d:fe:c7:ba:
2c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DF:09:84:A1:4A:56:C5:12:22:0E:FE:E3:88:D4:84:09:5F:F3:FB
X509v3 Authority Key Identifier:
keyid:B5:B6:32:97:25:47:67:3D:F0:F7:5A:AB:C8:39:A2:42:28:54:A2:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbYylyVHZz3w91qryDmiQihUoio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/1c068e-889c-42be-bd8b-a6abb1215dec/1/tbYylyVHZz3w91qryDmiQihUoio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:fc:55:b2:93:a1:b0:c8:b0:d0:37:8c:69:9d:70:6f:ff:ef:
b5:0d:e3:1e:5d:54:40:5e:1b:b7:c8:1c:f0:d9:2f:99:c7:ac:
49:f6:85:13:6c:e6:c4:32:a1:02:44:05:ee:e7:df:95:e3:b5:
22:16:3d:3c:2c:0e:71:57:16:e4:45:7a:85:23:92:d6:d1:a1:
6f:92:da:61:2a:15:04:7f:64:dd:74:27:27:ef:7f:13:36:e9:
f0:18:97:e4:fa:c2:f1:da:72:76:8c:59:fe:4a:b3:cb:54:6e:
94:7c:42:16:14:d1:cf:e4:f4:2a:26:6c:20:17:13:28:83:94:
cb:6f:25:21:8c:29:5c:6e:3e:6d:bd:4e:9e:5d:f5:04:91:fa:
d5:e3:3e:dd:58:50:72:71:b9:d0:27:d9:9f:bf:b3:38:aa:68:
8e:18:92:02:c0:ed:04:db:86:60:0f:c5:7b:1f:39:09:37:10:
ea:8b:7f:c3:ce:cd:28:6e:f2:ec:2c:a4:42:6b:d5:17:da:d6:
c8:83:c7:6b:04:80:ba:79:ba:07:89:7c:fc:17:fa:0d:82:86:
f3:1b:c7:00:3f:af:eb:3a:f5:fe:c6:ab:74:d6:97:34:72:ee:
57:22:67:11:ee:ac:64:22:68:97:6d:ca:33:99:2b:29:99:dd:
d4:79:e5:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:51 2025 by rpki-client