Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
File: T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft (raw, json)
Hash identifier: zSUcaLsPQm5G79d4TNk6GDMsW8dOegs26SHUK+DMKfg=
Subject key identifier: 8E:31:8C:97:E2:C2:33:08:9B:95:34:3C:C1:E8:C2:4B:F4:19:60:6D
Authority key identifier: 4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
Certificate issuer: /CN=4fd6646c93c2974789ecef7b444656ee64161729
Certificate serial: 0194BD4EBBCF89D11E14DEC22E94373E4365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:41 +0000
Manifest this update: Fri 31 Jan 2025 17:00:41 +0000
Manifest next update: Sat 01 Feb 2025 17:00:41 +0000
Files and hashes: 1: HSxOpF8LeaRif88_oEZ4y7MBldM.roa (hash: n8DGCpnE1FwgPJK7R+0dK8cIDb4XdG2XSYHd7OuwJKU=)
2: T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl (hash: yO6WF37C7ss3Vce9Bd7kJia3k9SFx9rgd8z0ezAI7uQ=)
3: W44szkVz920V6-JywE9vsVlLyvY.roa (hash: CydWhda8ET4rgRmemVZtuScSzfI/qh7Sm6ASW7UNUoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:bb:cf:89:d1:1e:14:de:c2:2e:94:37:3e:43:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fd6646c93c2974789ecef7b444656ee64161729
Validity
Not Before: Jan 31 17:00:41 2025 GMT
Not After : Feb 1 17:00:41 2025 GMT
Subject: CN=8e318c97e2c233089b95343cc1e8c24bf419606d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:5a:ca:dc:1b:c6:27:39:3a:60:7b:64:d2:db:
2d:67:bf:96:59:04:46:74:3b:d0:43:cc:f9:06:b7:
ba:98:a8:77:e9:27:4e:05:f9:8d:a4:2b:dc:3f:ee:
38:72:b5:7d:a4:41:ef:06:9e:2c:2f:dc:e5:cb:0e:
62:95:ee:aa:3f:74:54:da:f2:d4:f2:5d:34:1b:5a:
41:d1:1c:9b:7e:b7:f7:54:27:b3:f0:67:38:88:8d:
d4:0a:02:05:34:68:cb:ae:94:a3:f8:c2:c2:cd:a9:
c2:64:0f:82:c4:87:14:f9:53:92:5f:57:4b:ec:6c:
e8:1a:bf:0e:43:9e:2c:f7:c5:3c:e3:62:5c:5b:92:
5d:d3:79:38:44:60:6d:29:c3:14:03:5a:db:24:d0:
0f:2d:79:32:ab:e3:4b:f1:ea:0e:4a:3c:a6:a5:33:
f2:b3:90:52:b5:76:35:4d:7e:5a:00:d2:1e:4e:83:
08:46:64:a1:ef:70:16:3e:50:69:a4:41:ee:ac:f6:
d2:7d:05:45:a2:0d:45:a5:ed:0a:85:c9:f3:1b:64:
ec:db:fb:ca:6e:5b:b4:ba:c1:5a:9c:6b:da:e2:02:
62:b1:39:e0:ec:0c:1d:9c:ae:24:4b:ef:00:57:1f:
45:da:bd:ad:57:b5:c7:d5:dd:8e:ec:fa:06:9b:7b:
a4:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:31:8C:97:E2:C2:33:08:9B:95:34:3C:C1:E8:C2:4B:F4:19:60:6D
X509v3 Authority Key Identifier:
keyid:4F:D6:64:6C:93:C2:97:47:89:EC:EF:7B:44:46:56:EE:64:16:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZkbJPCl0eJ7O97REZW7mQWFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/33816b-145b-47f8-85fa-76a5385c515a/1/T9ZkbJPCl0eJ7O97REZW7mQWFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:9a:79:ba:28:09:28:71:12:2d:b0:83:f3:92:04:7c:5b:8c:
ee:4b:9e:3e:80:14:9f:63:1d:6e:54:bb:a9:50:65:37:33:ee:
f2:d1:ea:d2:63:12:c8:40:86:3c:78:71:db:6a:4c:d4:6d:ae:
72:de:a5:9d:31:2f:5a:3f:47:8a:a2:b5:e8:18:15:99:30:b5:
b5:34:81:57:ce:40:6d:21:51:0c:b9:10:07:31:94:f4:4b:12:
37:d5:6f:5d:ab:77:47:a9:25:1f:21:ca:93:f0:b4:70:cb:1c:
11:53:51:57:e3:ae:e3:be:97:37:a1:0c:f7:e4:62:db:b7:3d:
ad:4e:35:d7:b9:d1:cf:5a:05:c6:01:30:fb:d6:0d:6a:2e:92:
48:08:e6:96:17:44:fd:87:60:77:c0:53:2c:31:dc:f0:f0:ee:
10:20:0c:c1:a0:c2:35:26:17:ba:ef:82:d2:e6:25:58:d8:15:
4b:98:e5:3b:ce:42:76:bb:cb:a9:f2:6b:70:79:c8:45:4d:96:
4d:3e:e5:d0:d9:1b:ee:12:83:67:ce:05:40:b2:36:ac:03:6e:
d4:85:aa:70:1f:ba:c6:9c:a6:b4:97:cf:56:01:d7:1f:40:18:
d7:a5:6f:c5:ef:cf:ee:06:08:1e:0b:38:3d:a1:24:be:a2:7b:
12:c6:34:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:12 2025 by rpki-client