Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
File: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft (raw, json)
Hash identifier: 1x/Nrqon1uGMHivYJjOf1eoD907ZYW8Uxhu9cKDtw3g=
Subject key identifier: 23:78:AD:51:21:74:C9:04:26:D8:75:7F:FB:40:C9:DE:A7:3E:3E:C5
Authority key identifier: B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
Certificate issuer: /CN=b48184549e12e9934bffb7615bca3d0c25681360
Certificate serial: 0194BD17970D92C24DA9737C1E7BAE089C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:27 +0000
Manifest this update: Fri 31 Jan 2025 16:00:27 +0000
Manifest next update: Sat 01 Feb 2025 16:00:27 +0000
Files and hashes: 1: Pmrx9HZexDjQdROL1xOD1S-BjzQ.roa (hash: aBRM8zJUU2ZF0wAF5h20OpU3VGQ3W++oIRE8v06cZXM=)
2: tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl (hash: kxsx/g8RMTVnUITFN1ZZaBxKAO42QKrw903UZvsL19g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:97:0d:92:c2:4d:a9:73:7c:1e:7b:ae:08:9c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48184549e12e9934bffb7615bca3d0c25681360
Validity
Not Before: Jan 31 16:00:27 2025 GMT
Not After : Feb 1 16:00:27 2025 GMT
Subject: CN=2378ad512174c90426d8757ffb40c9dea73e3ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:47:82:3c:3b:ef:d6:55:23:8f:0c:12:cf:a3:
ba:a8:13:f6:aa:61:a0:04:c1:cb:d4:88:cc:6f:7f:
07:2f:e9:01:25:96:20:9d:14:a2:c0:50:b1:d1:65:
37:00:e3:c9:f1:e3:9b:ff:f6:df:8d:cd:45:ac:09:
88:44:93:39:fc:bc:aa:dc:73:83:4c:36:9c:7a:f4:
69:69:8f:7d:29:d1:51:da:f8:6e:3c:df:65:b7:f9:
8d:88:89:6d:0b:82:e1:33:f5:d2:ff:a8:25:98:4d:
36:47:28:cc:0f:6e:80:1c:f8:b7:11:c1:d3:54:e5:
24:63:77:d8:f8:65:be:66:8d:64:73:2a:02:76:37:
e0:4a:dc:2a:52:ad:38:76:da:fa:6b:22:8b:10:6b:
51:fd:e7:43:c0:c5:db:fa:e2:8b:09:ae:21:b3:ba:
25:4a:c8:42:bc:31:bb:13:40:dd:ba:24:37:0a:ca:
21:14:5f:18:64:5d:c6:e1:0c:7a:79:90:99:3c:de:
86:ef:46:2c:ea:65:71:ae:64:d1:ab:61:de:0d:ac:
f7:15:38:7d:49:2a:bb:06:43:b1:be:1f:62:d1:96:
80:38:47:6f:88:a4:6e:cd:d0:c3:65:84:7f:05:7d:
c1:8e:35:f0:b7:a4:bf:72:d1:59:c6:4b:0d:4c:62:
22:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:78:AD:51:21:74:C9:04:26:D8:75:7F:FB:40:C9:DE:A7:3E:3E:C5
X509v3 Authority Key Identifier:
keyid:B4:81:84:54:9E:12:E9:93:4B:FF:B7:61:5B:CA:3D:0C:25:68:13:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f67177-78d5-4388-a21a-28263656c6de/1/tIGEVJ4S6ZNL_7dhW8o9DCVoE2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:86:cb:57:57:5d:67:fe:08:98:8f:22:f3:87:27:f4:83:e6:
8e:ae:37:bc:24:1f:b8:4f:4a:ce:ac:88:ff:38:ac:43:13:eb:
fd:54:09:d1:d9:cd:61:fc:52:b1:9d:a1:0c:ea:4f:b0:b5:a3:
3a:ff:6d:1d:9d:94:f0:45:4d:e3:6b:6c:b5:f6:98:82:d7:60:
66:d4:f2:43:33:99:ef:b1:ea:a9:54:c7:bd:31:c9:9b:3c:9f:
7f:d7:56:c4:d4:40:97:fa:e0:31:57:26:18:34:fd:e5:2c:62:
70:97:15:9f:c9:b6:61:8b:21:46:6b:bd:85:d5:6e:dd:5e:85:
eb:ca:81:fe:ce:c4:9a:52:db:5e:82:5e:ea:cf:82:a7:c7:99:
c1:eb:a4:b0:2a:42:6c:ef:1a:4e:4c:0a:b5:fc:b3:8a:01:4c:
e8:c3:66:35:b4:98:a9:5a:e8:76:ae:61:0a:1e:85:88:2b:13:
f3:fe:34:71:ad:9d:f2:e4:34:1a:4b:b5:97:b0:f4:03:59:3e:
c4:5d:f1:c6:bf:8f:96:fd:ff:52:65:56:2d:30:cf:d6:a9:91:
73:3c:c2:1a:1c:dc:4f:5a:3e:67:e2:52:6e:94:61:84:d9:ce:
83:c9:4f:c0:68:4b:b2:e7:7d:36:91:de:80:8e:a0:e8:79:e9:
30:7d:c4:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:47 2025 by rpki-client