Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
File: tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft (raw, json)
Hash identifier: fYddahZyenlIeK/kJMFmDrUdZhs/d6nYnMet4JjY4ok=
Subject key identifier: 88:81:A0:9D:D9:D4:72:99:A9:68:57:A8:59:6E:30:F4:79:B5:43:6F
Authority key identifier: B5:64:58:57:6B:A2:39:21:DD:79:2D:C0:05:2F:8F:82:86:7D:62:7B
Certificate issuer: /CN=b56458576ba23921dd792dc0052f8f82867d627b
Certificate serial: 0194BC72887C4E6EA8161EB345D962FC7FC3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
Manifest number: 10FE
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: E7d_b0PflOY76P_uC3WM3xFdSrc.roa (hash: n1OXhuOXloaQfjIyVDut9dhlUxv9V7SaFL6+utmdzjI=)
2: tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl (hash: zMjt2lICQq8D+4aDoBaJt8GmkKOERrZk7g2HWiBhwyM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:88:7c:4e:6e:a8:16:1e:b3:45:d9:62:fc:7f:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56458576ba23921dd792dc0052f8f82867d627b
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=8881a09dd9d47299a96857a8596e30f479b5436f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:be:8e:6a:44:5e:f4:cc:7b:fd:44:e8:8a:23:
9a:52:ab:06:94:97:03:ed:b6:cf:83:6d:cd:33:1f:
0e:fc:d7:17:0b:99:f3:dd:20:e5:fa:f8:29:61:f3:
1c:9c:6d:cb:b1:5c:14:f6:0c:57:18:03:88:f8:ec:
0d:98:87:9f:67:4a:a8:b9:77:53:f7:87:99:83:97:
ea:6f:78:fd:f4:05:bb:ff:55:d8:c7:53:2d:cc:6c:
39:43:ef:23:b1:ca:b4:4d:ee:25:d1:f5:d3:44:9e:
5c:d2:0b:fe:f4:c2:17:09:38:80:ff:a6:a5:b6:9f:
77:9f:2a:7a:2d:91:42:e4:d0:66:33:0f:36:2c:a1:
e2:be:a3:6e:52:fc:eb:f8:7d:35:2f:ef:4e:ea:7b:
d2:aa:2e:29:7d:ad:35:19:23:5c:ce:d5:ec:3d:b4:
49:fb:62:fb:29:0c:65:68:0c:5f:32:be:b6:dc:12:
2b:66:03:17:a3:7a:e3:5f:f7:0e:9b:f7:f2:3e:f9:
9c:7e:e6:23:00:e5:cb:24:cb:a0:3e:fc:15:29:60:
83:87:a6:c4:b9:6e:37:b3:5b:47:70:b8:81:a2:e5:
ac:86:d0:02:33:a8:8a:4e:fa:92:a4:5d:11:91:f1:
3f:64:9a:f2:91:c8:8d:96:c4:1b:33:ad:8f:29:43:
e9:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:81:A0:9D:D9:D4:72:99:A9:68:57:A8:59:6E:30:F4:79:B5:43:6F
X509v3 Authority Key Identifier:
keyid:B5:64:58:57:6B:A2:39:21:DD:79:2D:C0:05:2F:8F:82:86:7D:62:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/d493cc-3254-4d95-bdee-1a23e15f3b84/1/tWRYV2uiOSHdeS3ABS-PgoZ9Yns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:aa:33:9d:24:45:a0:ad:11:4a:ec:86:6a:44:73:3e:20:cd:
65:c6:75:08:31:a1:aa:45:a8:ed:57:1d:ac:d8:00:cb:63:9c:
48:bf:76:7c:fe:fb:7e:41:05:21:a3:03:1a:f9:d0:11:47:bc:
d7:ec:a9:14:bd:93:09:e6:c4:f9:8e:b2:7f:24:5c:ed:68:58:
36:bb:bb:31:c6:fd:48:06:d4:4b:11:d5:2c:6a:c2:a1:bd:02:
67:d7:70:1e:74:fb:2b:dd:08:20:61:ba:7b:0b:64:13:48:7a:
38:66:b0:ca:58:90:6d:0a:1d:49:22:da:8f:43:ad:f2:82:3b:
93:0c:a4:32:2e:2d:0a:f4:67:50:b0:2f:52:22:af:6b:2a:b0:
12:d5:12:d0:6f:2d:bf:7f:f3:1e:e6:06:7e:4c:15:78:46:d3:
ef:89:b4:04:9f:e6:bf:1b:4b:1c:dd:06:11:ec:eb:35:4e:72:
b9:12:7a:21:c3:1a:b5:1d:ad:7e:bd:e6:76:a3:15:f3:01:63:
ac:66:b5:da:a7:62:28:f6:23:fa:f8:49:42:9e:49:a3:db:e2:
0c:55:35:8c:a3:1c:5e:54:54:80:68:de:00:3c:81:bb:56:c4:
9b:52:dd:8a:5e:3e:a6:9e:e9:65:99:b3:bd:91:c3:b8:91:15:
75:e9:9d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:24 2025 by rpki-client