Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: cfn3rmIIf5uWcJ3tAO8gkiYsrjmbX3fRwyTKefEqZ64=
Subject key identifier: C6:2B:EE:D2:82:85:DB:85:79:0E:10:6B:09:D2:C2:07:91:ED:6E:99
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 0194BD4E81CF6FA4FEAE9C8D3E08881CE0A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: 7kCB1J_rNDVtgNFDQBz-ZFXo6aA.roa (hash: j6xn4MHIGZVJXA81hfabdadaay1xFRv4GfnwCa5VtAQ=)
2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: vAX2k1fSzG+AMUQwOS2zvfl+oJwZhsVDc3oNOyYC9Qk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:81:cf:6f:a4:fe:ae:9c:8d:3e:08:88:1c:e0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=c62beed28285db85790e106b09d2c20791ed6e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:dd:8e:23:67:c5:97:5a:b2:30:af:34:aa:a9:
18:7e:a5:1b:bf:fd:2e:dd:79:58:94:cd:86:16:e9:
c6:f9:be:0f:13:ae:7c:07:4b:20:4a:fc:35:16:a1:
35:d0:24:04:3e:af:1b:fd:64:59:19:b8:1f:96:7d:
ff:ca:72:04:80:41:e9:0e:c8:87:38:8e:32:f2:87:
84:fd:8a:d7:e3:48:c4:dd:2d:13:b4:35:34:7f:e5:
f2:84:38:29:03:90:45:24:96:59:7d:01:ab:33:cf:
5a:ed:36:b4:03:fc:db:f6:18:fc:6f:db:c8:26:fa:
8f:14:27:18:95:75:d7:75:3f:9a:39:8e:f0:47:10:
b1:ea:61:45:19:b6:7a:d9:47:f7:1c:71:96:8e:6a:
77:9d:84:f4:50:bb:80:62:96:b1:a1:cc:a6:b2:60:
e5:88:fe:69:40:c6:87:28:e0:f0:12:00:2a:75:40:
df:96:78:90:34:85:a7:49:80:f7:77:c4:9c:be:f6:
c7:52:fb:52:76:b9:8a:5c:c2:79:06:c6:fe:0b:44:
55:71:a0:3a:49:58:1c:7f:24:bf:93:6f:03:3e:91:
c7:60:99:6f:61:58:de:61:30:2a:6e:54:9f:f0:db:
aa:ab:d6:d0:e5:46:a4:56:61:79:24:18:e0:7e:5c:
b5:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2B:EE:D2:82:85:DB:85:79:0E:10:6B:09:D2:C2:07:91:ED:6E:99
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a9:0b:95:9b:a0:2f:b8:4c:fc:68:b0:d7:34:4b:09:68:fb:
53:8e:85:84:35:f2:4e:44:4d:55:e7:8c:64:91:cf:2e:ad:6e:
d6:4f:27:71:81:ea:2e:4a:bc:0d:d0:2b:37:7b:7a:3e:96:95:
d8:1c:39:7f:42:4d:95:a6:8c:98:0e:6c:b5:9e:cf:87:0d:10:
30:5b:24:d5:d4:8e:7f:45:95:64:30:94:3c:ab:7b:a0:d8:2a:
9c:ee:f1:5a:cc:72:36:fc:b4:b1:3c:6b:03:98:88:e1:50:49:
93:c3:56:8c:fb:75:e4:97:3c:b5:b1:55:04:b5:89:12:ae:65:
25:62:61:61:25:de:c4:f4:16:3b:78:76:6a:be:b4:ef:7a:23:
98:ff:f4:c8:07:ab:45:b0:c9:59:cb:8f:0f:d6:04:c6:82:0e:
8d:56:43:5f:aa:7f:1f:56:26:34:cc:0f:af:6b:8f:50:25:12:
94:47:b7:15:02:ed:eb:4b:7e:5c:eb:57:a1:e8:af:63:13:f7:
6d:ec:92:d5:83:cb:19:4c:82:39:ab:c3:e3:e4:a7:9a:4f:8b:
af:94:a1:4d:4d:92:fa:5f:8f:70:21:d3:30:0b:c1:e3:0b:a3:
ed:3c:d0:99:54:ee:e9:53:a0:3c:cc:03:c5:af:e5:ac:d7:c4:
00:2a:91:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:27 2025 by rpki-client