Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
File: tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft (raw, json)
Hash identifier: EykRWBQtXTfy9zaU4VDcjqkd0J79kJiaW+YRT5aa87A=
Subject key identifier: 62:6F:AC:1E:A4:5E:A2:53:2D:BF:B3:FC:AA:E6:AD:7A:F4:96:A3:3C
Authority key identifier: B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
Certificate issuer: /CN=b467367967dc763349fd0b50e31f75b823028590
Certificate serial: 0194BCE0DE6B56F084ADEE6AB2A3E8C98D5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
Manifest number: 1435
Signing time: Fri 31 Jan 2025 15:00:40 +0000
Manifest this update: Fri 31 Jan 2025 15:00:40 +0000
Manifest next update: Sat 01 Feb 2025 15:00:40 +0000
Files and hashes: 1: 1S5DUik66dezdrx5pEezWXmNLtk.roa (hash: Dm4cQ8MmhvuUwjcbPH5bXsghzfESlaOzg3wk6aN2+Y0=)
2: p0liFEC13zZbiv2XROqHff8M2L0.roa (hash: D3aQiBs7Zoeh47hHLwfQ82RoBGJXROXA95uoJTPxnX4=)
3: tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl (hash: OVecE6bLxzRcK+LB7cmhcnPt/rmDceesqrKm8AiuySM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:de:6b:56:f0:84:ad:ee:6a:b2:a3:e8:c9:8d:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b467367967dc763349fd0b50e31f75b823028590
Validity
Not Before: Jan 31 15:00:40 2025 GMT
Not After : Feb 1 15:00:40 2025 GMT
Subject: CN=626fac1ea45ea2532dbfb3fcaae6ad7af496a33c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:3d:4b:49:84:54:b0:95:96:d8:84:36:58:37:
d4:75:0d:60:a0:29:63:06:a0:32:29:37:e6:ce:df:
65:ad:4c:1a:43:8a:e9:23:28:f1:aa:20:8d:04:32:
47:b4:17:69:50:76:35:6d:7b:8e:4b:e9:44:75:b1:
ce:28:ef:4d:e9:4c:55:71:fa:26:a5:47:99:08:5e:
c0:8a:9f:ac:e4:93:55:3b:56:91:14:8a:eb:f6:e7:
59:8e:26:ae:19:24:30:74:26:b2:99:4f:d7:68:28:
62:c4:40:ca:d1:4b:c0:c6:3d:40:ae:03:eb:01:40:
97:d1:dd:6a:70:48:ce:0d:af:a1:9d:94:22:97:cf:
de:e1:07:da:75:de:c5:15:33:73:de:03:f6:af:4d:
fd:6c:f8:20:a7:17:8c:70:85:e6:cc:15:ea:15:a7:
c8:72:96:5e:a1:9b:41:a3:1d:ef:27:0e:14:dc:d2:
08:e6:ba:07:97:3d:5b:c9:13:05:df:03:dd:64:86:
43:72:24:46:b9:3e:f6:81:c6:cd:78:87:b9:00:67:
a4:ff:20:ca:d9:9f:e7:a1:05:d4:2b:ea:83:77:89:
d5:d3:be:1c:82:07:d9:84:6f:25:2f:01:0d:3d:8b:
8d:79:ef:2c:c3:33:a0:06:de:c7:5b:3a:fa:3b:78:
bb:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:6F:AC:1E:A4:5E:A2:53:2D:BF:B3:FC:AA:E6:AD:7A:F4:96:A3:3C
X509v3 Authority Key Identifier:
keyid:B4:67:36:79:67:DC:76:33:49:FD:0B:50:E3:1F:75:B8:23:02:85:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGc2eWfcdjNJ_QtQ4x91uCMChZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/dfc4f2-ed7d-4610-860c-b81373c40dc9/1/tGc2eWfcdjNJ_QtQ4x91uCMChZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:de:ee:d5:8d:5d:40:b8:fc:2d:f8:d0:5e:7e:3d:e3:71:89:
17:a4:73:a6:f2:41:08:c8:f3:44:d7:8f:44:35:9a:b9:27:21:
27:19:5a:1e:66:fe:fe:f2:68:60:df:a9:38:fb:9f:40:ac:89:
d8:2a:1d:d2:e3:62:75:c7:11:08:d1:e3:5c:09:21:7b:3a:99:
78:62:4a:15:29:78:73:9d:48:70:8f:58:d4:43:0d:4c:34:d4:
88:4a:69:b0:32:55:00:25:ac:35:08:ca:58:39:55:b8:53:92:
01:99:64:c7:36:60:77:36:6c:1c:39:4a:1e:41:33:e4:2d:94:
d2:8d:b7:10:fc:36:03:ad:0e:ed:1e:49:30:bc:09:d0:68:c6:
20:da:f7:35:24:7e:9a:6b:26:29:03:d4:f3:32:02:86:f1:81:
db:83:05:20:f7:ff:8d:a9:7e:f8:8b:16:dc:c1:b5:45:da:05:
d7:9e:c3:c9:d7:73:82:38:35:77:9b:ab:e4:78:a8:e1:2b:93:
b5:3e:2a:95:b9:c4:ba:08:bd:22:34:ee:0f:37:b2:c0:17:8f:
9a:53:d2:69:db:49:8a:1a:ab:8e:60:2d:2b:99:6f:9c:bf:8a:
ad:32:eb:17:ed:9f:55:c4:5a:68:a9:6c:2b:d4:f5:f0:bf:7a:
1b:37:26:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:25:12 2025 by rpki-client