Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
File: TnRhR3tZt7wJBvbOYGULs60t7lc.mft (raw, json)
Hash identifier: CK9cYaiXj1N2JMEC5pwSUHZ8RpkSURLurhDv/j90G88=
Subject key identifier: 6A:73:46:E2:76:E2:62:96:3D:59:06:D1:F2:A3:DA:7E:CA:3D:6B:B1
Authority key identifier: 4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
Certificate issuer: /CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Certificate serial: 0194BD85702D833B401BFA2B53E6CEB0FCDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
Manifest number: 0480
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: 1-deSD0Zx7mZFaKLgvp5MfNNL6B0.roa (hash: 0HLnR/UxvmJgyKOOTOBI/jNtxozr1BfrerbK66hTjvg=)
2: TnRhR3tZt7wJBvbOYGULs60t7lc.crl (hash: Y+AbVG8j9OM8/CaIE1UZXP5T6Grlxh2gplqttBdIqPg=)
3: ztG3iRtcx4pgmD82wNPmhKWPj8w.roa (hash: 7wVFIe2H/2PMSyJC9QSggcK+C7T3Sk0wvSIjn0Idsps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:70:2d:83:3b:40:1b:fa:2b:53:e6:ce:b0:fc:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7461477b59b7bc0906f6ce60650bb3ad2dee57
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=6a7346e276e262963d5906d1f2a3da7eca3d6bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a4:8c:ef:8d:56:98:da:8e:a0:53:07:60:65:
15:03:dd:21:12:ef:ac:c0:6f:37:1b:1c:b3:c3:d1:
80:8d:2f:2b:bf:c4:5f:7e:f5:88:7b:b0:44:f2:f3:
79:65:ae:31:3b:b6:b4:cd:00:19:d6:ce:b9:d7:42:
c7:4e:92:62:fb:1b:be:0d:b8:f9:53:47:5f:39:73:
c3:fa:02:3f:64:60:b2:2f:6d:d6:52:22:9f:89:d3:
90:ff:25:dd:66:28:a1:bd:9c:33:40:82:d6:75:b9:
bb:96:14:c8:b2:91:be:5b:ca:50:4f:51:3d:3e:25:
a5:bc:a1:ad:57:1c:d5:63:04:65:87:73:96:0a:27:
a8:cc:52:7f:0b:ef:43:20:b7:cc:4b:7d:42:75:28:
73:e5:c8:1d:09:73:8a:45:d5:da:74:5e:be:63:83:
f9:1e:8d:6a:75:48:fc:68:b4:b6:91:8b:28:19:cd:
d1:18:25:b2:cf:13:a7:75:f5:6b:b3:72:12:4c:54:
b3:27:e1:6c:04:b2:2f:6f:25:cc:3d:b5:43:b3:fa:
91:ef:1a:ae:a0:4b:6c:f5:f9:93:a8:2a:c4:a7:88:
6f:8a:bc:c7:3f:8c:29:15:c0:36:eb:19:55:a5:9a:
cd:47:ca:d8:82:e4:cc:05:f7:b0:be:74:d3:e1:67:
44:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:73:46:E2:76:E2:62:96:3D:59:06:D1:F2:A3:DA:7E:CA:3D:6B:B1
X509v3 Authority Key Identifier:
keyid:4E:74:61:47:7B:59:B7:BC:09:06:F6:CE:60:65:0B:B3:AD:2D:EE:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnRhR3tZt7wJBvbOYGULs60t7lc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/61109f-2d19-41ce-ba6e-ddbc0def83e1/1/TnRhR3tZt7wJBvbOYGULs60t7lc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:99:1f:e9:1a:e8:eb:f4:ca:f7:6c:97:d7:c6:dd:64:28:88:
a9:59:a3:3b:7e:aa:fc:72:9f:96:31:ab:59:83:c1:85:8b:a3:
c0:13:6c:a0:55:cb:cf:83:56:f0:f8:61:ee:ef:be:2c:c7:20:
13:0b:1d:25:5a:6f:b6:a1:b4:be:53:23:c9:b4:8b:d7:5a:4d:
e1:bd:b1:7d:bf:f4:28:25:7f:f5:41:00:54:6d:7e:f2:9d:e6:
0e:0e:1c:c9:32:12:95:42:59:9c:bd:27:21:ab:95:49:49:f8:
92:75:80:1c:60:a0:b1:ff:d8:79:1d:e5:e8:b1:d7:70:cf:fd:
b4:9e:ae:f7:2a:e1:15:b1:41:0f:65:f6:09:e5:4c:4b:3b:a8:
98:2f:84:dc:c1:b4:d8:1c:dc:8d:6e:84:b1:76:4b:8a:1c:d1:
87:5b:b4:34:77:24:65:e7:74:46:d8:ba:db:f2:27:b6:be:eb:
e1:c2:95:87:e4:54:21:a3:4e:dd:d8:33:ae:57:e3:51:e9:12:
36:1f:ab:67:5b:11:c8:0a:0a:74:2d:80:11:17:ea:8d:8c:a9:
12:cc:42:4d:6a:6a:2d:d3:35:77:9b:48:d1:14:c8:a4:7a:a6:
cc:4d:5c:b5:1c:d9:12:28:fe:82:36:72:7a:46:61:7c:67:bb:
36:a0:04:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:49 2025 by rpki-client