
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
File: tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft (raw, json)
Hash identifier: 6YftW/ZwcUfHPevwZfQgi+oAADuts1fCvLyjCNrtNnA=
Subject key identifier: 80:80:5C:FB:9A:5F:54:54:F1:5E:CF:2A:AF:64:5B:3D:5D:9E:FA:94
Authority key identifier: B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
Certificate issuer: /CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Certificate serial: 0194BC3CB1D9D307245941A67B9D98BE92D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 12:01:21 +0000
Manifest this update: Fri 31 Jan 2025 12:01:21 +0000
Manifest next update: Sat 01 Feb 2025 12:01:21 +0000
Files and hashes: 1: XhX8A-oz684Iwe53pFqloQYS-kU.roa (hash: Mq5uGJtvZYMl6nllrQZDhX8D38boD4gAAjpBeZPZFnU=)
2: tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl (hash: lMS0YDwwxQ+oMAgOwYWUjrhYR849tsH1jf37szIc6Ig=)
3: xq7eF4vg8c3V2xQvveah7LJZv-A.roa (hash: atQkAxpvj5iGJRjdwa/1uBWThI8y8UsCB5Ad2gGNyxg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:b1:d9:d3:07:24:59:41:a6:7b:9d:98:be:92:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b51e3f6bebcd05291dc5265e08b1cd6c401b9cfd
Validity
Not Before: Jan 31 12:01:21 2025 GMT
Not After : Feb 1 12:01:21 2025 GMT
Subject: CN=80805cfb9a5f5454f15ecf2aaf645b3d5d9efa94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f9:ad:42:22:73:1b:bd:70:3d:59:17:51:66:
cf:5c:bb:bc:1e:28:34:5c:e4:1e:f9:69:c2:5e:e4:
1f:b0:c9:28:2d:3f:7a:0f:c1:11:cc:eb:93:d4:25:
4d:58:a1:5d:f3:bf:a3:0f:ae:03:5c:9f:e1:21:f2:
99:af:11:d1:ab:3f:00:1d:a4:05:88:4f:e4:48:12:
75:a4:ba:cd:89:de:cf:95:27:c7:7a:95:ec:6c:24:
07:41:b4:40:ed:0c:3a:17:bd:03:d8:42:94:0f:a7:
ed:bc:02:3a:a3:90:b3:7b:46:0e:6e:6f:6c:21:0f:
6f:cb:57:44:2c:af:be:30:91:63:69:9f:f5:55:26:
db:5f:d3:d6:09:91:8c:81:32:18:c0:c2:d7:99:92:
b8:4f:81:e4:53:fe:64:7d:0c:cf:40:35:86:a2:a1:
28:7e:08:88:53:35:e5:d9:db:98:57:7a:33:40:c9:
61:b2:32:2c:33:f6:0f:d0:2c:8d:4d:89:87:66:a2:
f5:a1:6d:13:67:80:74:5a:d7:d2:99:f0:16:a0:1c:
71:a9:db:59:a0:72:7c:60:17:7f:a5:17:d7:6b:ae:
33:75:c0:29:bc:24:cd:d2:7c:c8:e3:b4:c0:a4:7d:
fa:82:f2:53:2e:68:d4:a0:a1:3e:59:2a:b9:ba:59:
db:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:80:5C:FB:9A:5F:54:54:F1:5E:CF:2A:AF:64:5B:3D:5D:9E:FA:94
X509v3 Authority Key Identifier:
keyid:B5:1E:3F:6B:EB:CD:05:29:1D:C5:26:5E:08:B1:CD:6C:40:1B:9C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tR4_a-vNBSkdxSZeCLHNbEAbnP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/02fdfd-7ac8-4321-b930-8fa551e6ae75/1/tR4_a-vNBSkdxSZeCLHNbEAbnP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:86:a5:64:d7:48:91:25:50:2a:4d:ba:63:aa:ce:08:43:b9:
6b:a3:7e:ed:39:ce:6f:7d:1f:b5:32:8a:d5:dd:14:81:4f:d6:
de:e5:72:66:da:d6:31:63:57:91:ec:58:9f:8a:38:94:73:90:
0a:65:af:e1:a0:4c:5d:cd:f3:34:86:ad:fb:6e:23:7f:dc:c7:
68:d8:ea:0c:21:e6:f0:a3:29:96:01:38:5b:1a:1c:8f:ac:c4:
a1:74:a1:45:49:73:50:72:33:98:53:f8:fc:0d:8a:78:a5:79:
85:8e:13:45:84:7e:4d:62:ba:64:ff:1c:da:3f:f5:88:b0:86:
4a:b0:d2:74:10:d5:64:d2:69:7c:cf:12:aa:f4:db:4c:7e:38:
71:df:60:6e:dc:ff:d4:3d:d6:62:6f:f5:c6:92:cd:93:d0:fc:
c8:bf:50:7d:94:db:98:ab:be:8e:f7:3e:3e:b4:b3:8d:b4:f4:
e1:fa:3d:a4:cc:28:fe:e0:bd:88:9b:e6:46:d8:f6:9f:48:46:
18:50:b7:fd:e9:4f:3e:31:c1:53:6b:63:53:a7:7a:85:4f:73:
ac:b4:ed:14:f3:ae:97:ce:03:a5:c0:03:d8:ee:b0:8d:97:5a:
b2:de:70:59:65:a9:41:bf:94:53:24:38:9b:ac:08:d4:1c:f8:
ec:a5:f9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:51:30 2025 by rpki-client