Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
File: tLC71kRVeO28e6a1v3ypNo0kF78.mft (raw, json)
Hash identifier: IROmRU82OBF+i2G/yA3XtPjGrZMliLww4xv+dXzr16Y=
Subject key identifier: 2B:44:27:FD:CE:6A:0C:46:55:EB:F6:51:CE:6F:C9:F1:F0:42:9E:47
Authority key identifier: B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
Certificate issuer: /CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Certificate serial: 0194BD4ED3D0E03D8E8A255E76A411D4A6BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
Manifest number: 0A8E
Signing time: Fri 31 Jan 2025 17:00:47 +0000
Manifest this update: Fri 31 Jan 2025 17:00:47 +0000
Manifest next update: Sat 01 Feb 2025 17:00:47 +0000
Files and hashes: 1: E_gpRXs1wyJj1CMrt4P6GzVFs4U.roa (hash: gqqgWP9QREPzkIwRRirj81r/4D9tgTwnunohsTpcA6w=)
2: HYQhj9GfS2VL1LGH2hoGRnAq_1g.roa (hash: vupLnnm29iaNTZjA+glh+6XHc5HkCkw1Lh/FCGeyQn4=)
3: tLC71kRVeO28e6a1v3ypNo0kF78.crl (hash: OI6AkZfma7NNOdad2w4n1dWl2eysk0eNMdpO/1oLQ9w=)
4: zqLBYDBfWNqychEyI3nXYt2CCRQ.roa (hash: xPd7pskgYW4omSSyK6JduhnPOzmyiWl553qH0EzZiqI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:d3:d0:e0:3d:8e:8a:25:5e:76:a4:11:d4:a6:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b0bbd6445578edbc7ba6b5bf7ca9368d2417bf
Validity
Not Before: Jan 31 17:00:47 2025 GMT
Not After : Feb 1 17:00:47 2025 GMT
Subject: CN=2b4427fdce6a0c4655ebf651ce6fc9f1f0429e47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:fc:a1:a1:2a:16:a5:7b:23:3e:1a:e0:3b:af:
fd:28:5f:1a:04:a2:55:98:6a:92:03:f2:78:b7:64:
47:f5:96:cd:ac:b7:1e:2f:c7:50:58:b1:61:83:9c:
cd:6f:d0:b1:e9:82:1e:1b:55:0a:ad:94:13:0b:7d:
75:e4:00:ba:8f:bd:b8:b8:be:20:11:25:40:ea:0f:
34:56:85:96:c1:1b:b0:2f:e2:47:64:73:94:94:b7:
89:4e:4c:8c:07:76:3e:c2:ad:6c:00:4d:7d:0d:dd:
c6:f7:97:47:f9:fa:ea:3a:21:e8:2f:18:72:82:67:
6e:64:3f:ac:ed:95:3e:08:28:1c:ef:24:1c:42:3a:
2c:f3:72:22:8a:f8:65:ae:56:76:a2:d7:07:10:ce:
64:cf:32:2e:1e:67:0d:67:6d:57:4c:30:88:3a:08:
32:f4:67:48:62:14:11:31:bb:e4:1e:0c:c8:b4:31:
aa:e7:79:43:4d:ee:03:26:a3:bc:19:6b:90:c1:83:
4a:14:75:24:7f:c3:41:6d:be:1d:75:8f:01:67:d1:
2c:36:2a:27:a0:95:ba:d6:c2:e6:4b:25:02:d9:a9:
ba:4e:ae:00:57:1f:20:3c:dd:ab:24:f8:48:80:66:
4c:94:ef:e5:9c:e3:f8:4d:e1:2c:c8:ac:c2:6c:8f:
3e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:44:27:FD:CE:6A:0C:46:55:EB:F6:51:CE:6F:C9:F1:F0:42:9E:47
X509v3 Authority Key Identifier:
keyid:B4:B0:BB:D6:44:55:78:ED:BC:7B:A6:B5:BF:7C:A9:36:8D:24:17:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLC71kRVeO28e6a1v3ypNo0kF78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/3502fc-d9f7-4fa8-baf6-77d529be53d7/1/tLC71kRVeO28e6a1v3ypNo0kF78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:09:72:de:83:f1:9e:a2:27:a4:1e:23:b4:26:2f:a6:3a:dc:
ec:64:74:19:a2:d8:42:04:42:85:2a:00:92:f5:1e:1b:51:64:
06:bf:f8:19:4b:3c:dc:c1:2f:2f:7a:d7:7e:70:0a:4e:2e:a3:
e5:49:40:da:05:4f:de:cc:7c:47:6a:68:2a:71:c9:95:2e:d0:
38:bf:d2:54:aa:72:f1:24:bf:13:b3:3e:10:dc:59:e7:99:64:
a2:92:5b:dd:60:cf:a5:ee:20:fa:f2:db:1c:23:a7:db:00:2f:
6c:09:21:75:fd:77:18:08:30:6a:ed:04:bc:3a:25:44:86:63:
a7:e7:cd:e4:e5:7a:cd:80:b1:de:af:5a:bd:76:07:f5:e1:5d:
d0:20:52:22:02:7a:de:f8:45:1d:9b:a4:41:d9:4c:c1:9b:27:
9d:5b:97:a6:7d:51:91:03:a6:28:01:92:5f:84:12:d8:b5:f1:
58:b2:d7:84:73:45:a6:a5:20:62:b2:90:b7:10:71:45:de:8f:
fd:b7:35:fc:f2:82:8e:0d:d6:05:54:98:81:ff:ab:61:11:19:
0e:2f:f7:52:b9:bd:b8:6f:47:06:35:6a:91:1d:04:be:78:e3:
43:63:59:41:c5:9f:6a:90:c0:06:46:46:b1:88:ef:53:0c:be:
8e:fa:47:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:24 2025 by rpki-client