Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
File: tJ61DLi6yS3BduiofPJVUoIhlPo.mft (raw, json)
Hash identifier: +hK0k4RIJSKLeF29FkVCIeTiPrBsBq/5UxBeApDCk+o=
Subject key identifier: 6D:4C:99:09:4A:45:F2:F1:28:DC:A3:14:8E:43:80:30:15:E8:05:C1
Authority key identifier: B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
Certificate issuer: /CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Certificate serial: 0194BBCE1DA4038EF1925DACABD4A79F693F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:34 +0000
Manifest this update: Fri 31 Jan 2025 10:00:34 +0000
Manifest next update: Sat 01 Feb 2025 10:00:34 +0000
Files and hashes: 1: J7n-Yd5XTH7n67jouruR47yViJQ.roa (hash: uOcoBZNZsx1gjsqlLawiv97uMdypKgT5mBdaC/TonUs=)
2: tJ61DLi6yS3BduiofPJVUoIhlPo.crl (hash: JQjqpq2vubzpPd7qqIugSQjkb8GkWFbTv0/BTZ6tKCI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:1d:a4:03:8e:f1:92:5d:ac:ab:d4:a7:9f:69:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b49eb50cb8bac92dc176e8a87cf25552822194fa
Validity
Not Before: Jan 31 10:00:34 2025 GMT
Not After : Feb 1 10:00:34 2025 GMT
Subject: CN=6d4c99094a45f2f128dca3148e43803015e805c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d2:63:ab:d1:dc:79:d6:39:99:ca:f5:ae:61:
e3:3f:90:4a:cb:ac:c3:aa:09:f1:42:b9:f1:74:69:
00:04:a3:c4:7c:c0:a5:64:7e:cd:97:e6:47:05:4d:
77:c1:71:d2:a9:ef:0c:24:62:62:63:12:64:41:6d:
ee:34:9e:e4:0e:1f:10:33:97:67:40:91:88:8e:ff:
2f:ef:dd:0e:93:f7:36:92:5d:35:30:71:58:04:2c:
df:8d:1a:f4:59:8e:b7:aa:da:2b:01:7c:7a:23:b5:
99:3f:8c:4c:f0:8a:93:61:99:6d:54:1b:f6:69:59:
3a:d9:aa:66:7d:2c:50:b5:77:29:9a:93:d4:71:92:
c7:a8:00:87:a1:60:bb:75:60:9e:7b:d0:61:c8:5b:
e9:3b:31:b5:3d:ea:48:02:35:cf:6a:ce:f1:3d:06:
fc:64:a2:9f:d4:c3:f2:61:b6:b2:d5:5c:c8:8b:bc:
47:a2:d5:1e:0b:cb:b0:f6:3a:32:00:af:31:93:85:
b3:80:bd:dd:1e:73:9a:75:09:db:a4:c8:9a:4d:e7:
1c:e6:69:97:e5:04:c0:fd:b5:2a:54:0c:6e:4b:21:
6a:28:3c:48:d5:07:63:95:6a:38:24:fb:00:0c:8d:
35:0b:00:d4:41:d9:10:de:49:41:31:46:0d:e7:7c:
32:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:4C:99:09:4A:45:F2:F1:28:DC:A3:14:8E:43:80:30:15:E8:05:C1
X509v3 Authority Key Identifier:
keyid:B4:9E:B5:0C:B8:BA:C9:2D:C1:76:E8:A8:7C:F2:55:52:82:21:94:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tJ61DLi6yS3BduiofPJVUoIhlPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3eaa70-0520-4559-841a-4ca956b08a41/1/tJ61DLi6yS3BduiofPJVUoIhlPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ed:0c:12:5f:0d:5b:f4:77:9b:aa:85:6d:24:ac:c6:8c:fa:
ca:a4:c1:11:4a:66:1e:d7:44:35:f8:4c:90:b1:f2:b5:f0:12:
05:9f:a9:99:5b:5c:66:3e:a8:7e:25:b9:b1:df:95:08:19:a2:
69:5d:79:b4:55:b9:37:e7:20:ce:d0:bf:3d:f7:8a:eb:e7:d5:
74:4d:9c:94:61:a8:d7:d5:90:85:9d:d0:66:23:17:57:92:5e:
85:28:c4:61:ff:56:24:07:18:f7:95:a1:a1:70:45:5a:49:47:
72:0b:62:82:a3:cd:a6:43:c3:d5:54:8d:da:4f:cd:d2:0a:3e:
19:4f:81:88:31:ca:5c:4b:70:93:4a:c3:62:19:c7:f7:35:0b:
fd:58:f5:24:03:bd:04:c5:23:eb:b9:99:5a:e1:8e:f2:26:5f:
f8:12:04:2c:a7:79:1d:7e:79:59:6e:41:91:a8:ed:6b:fe:f4:
26:50:59:e1:b4:3d:82:7a:6e:a2:4e:9d:bf:17:bc:65:ab:f0:
7d:bb:a3:c8:4f:56:4f:55:bb:7f:6e:f6:cb:0c:4e:f6:77:6b:
fa:05:7d:38:b8:b1:dc:da:e5:0e:5f:89:4f:37:30:39:6c:92:
8c:38:82:cb:27:44:47:22:0c:b5:7e:89:fa:c3:d4:4f:c8:a5:
20:ff:eb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:50 2025 by rpki-client