Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft
File: tDpxymDXTkXSuXSKsQZlKf0BM34.mft (raw, json)
Hash identifier: LieYSa7njQXCkaHdo47QAOvX/pYwVSybstdQoOt+snw=
Subject key identifier: 84:EC:07:69:07:E4:CC:BA:F1:94:AA:8D:3C:21:56:32:6C:0A:63:B2
Authority key identifier: B4:3A:71:CA:60:D7:4E:45:D2:B9:74:8A:B1:06:65:29:FD:01:33:7E
Certificate issuer: /CN=b43a71ca60d74e45d2b9748ab1066529fd01337e
Certificate serial: 0194BBCDFB2EB40A88564B3428375EB6267F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:26 +0000
Manifest this update: Fri 31 Jan 2025 10:00:26 +0000
Manifest next update: Sat 01 Feb 2025 10:00:26 +0000
Files and hashes: 1: M5_-d1GdbRA2RUGO5npOtRSNEB8.roa (hash: DYZ2j8UdvivRy1b6Q4G0ZdvY6U48+tpNnHP/gql8rCo=)
2: tDpxymDXTkXSuXSKsQZlKf0BM34.crl (hash: I6O+Lyt74U+6/IWdZmHn8k4mfmtZz1sJdok/VIJ2H48=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:fb:2e:b4:0a:88:56:4b:34:28:37:5e:b6:26:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43a71ca60d74e45d2b9748ab1066529fd01337e
Validity
Not Before: Jan 31 10:00:26 2025 GMT
Not After : Feb 1 10:00:26 2025 GMT
Subject: CN=84ec076907e4ccbaf194aa8d3c2156326c0a63b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:23:38:80:86:5d:61:57:f3:08:dc:9f:3c:0c:
82:04:c5:ab:83:03:50:6c:fe:8f:91:36:b1:e7:cc:
54:38:3d:08:1b:f3:51:3a:1f:63:9c:b2:2d:58:5a:
9e:f0:4b:6b:d7:1d:25:4c:bd:67:22:3e:17:cb:5f:
77:a5:4f:20:36:7d:b2:64:7b:3f:66:e6:8b:9a:af:
fe:a5:e7:76:fd:6d:38:ff:03:70:6e:70:57:fb:77:
28:59:d7:88:8e:b0:ed:9e:a2:04:64:bd:c9:93:86:
48:0f:a8:7c:82:a8:fd:4c:f9:b9:a7:a3:1b:54:8d:
da:da:3a:b7:14:22:46:96:bf:a4:95:55:9d:39:5f:
22:29:f0:f4:9f:fd:4f:ac:47:f7:fd:36:6b:ef:6c:
4b:51:27:d9:de:e1:57:f9:9a:9b:3d:28:6a:27:7a:
39:83:2c:36:ce:67:fb:25:24:8a:a4:08:24:57:88:
c3:d4:ad:5f:40:04:84:f4:c6:8f:b9:10:e4:74:84:
c9:80:c1:47:30:20:b9:9b:07:92:a3:6a:d4:a6:6a:
e0:d3:93:e9:80:fd:bc:40:41:21:32:f5:6a:88:55:
64:9f:39:fc:2a:66:0d:53:47:26:33:07:41:13:bb:
b9:43:fd:d0:65:a9:12:da:bd:98:cd:6c:9e:98:96:
43:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:EC:07:69:07:E4:CC:BA:F1:94:AA:8D:3C:21:56:32:6C:0A:63:B2
X509v3 Authority Key Identifier:
keyid:B4:3A:71:CA:60:D7:4E:45:D2:B9:74:8A:B1:06:65:29:FD:01:33:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDpxymDXTkXSuXSKsQZlKf0BM34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/8cef6f-fe09-4ef6-8bf1-798ac4928ed6/1/tDpxymDXTkXSuXSKsQZlKf0BM34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:1b:70:67:ef:fc:b4:a1:18:0f:fe:b8:e5:e5:60:0f:96:a3:
e1:a2:c8:0b:38:1e:b1:92:9f:63:76:2c:8f:92:e2:de:32:39:
ba:25:46:32:2d:b1:c0:79:bd:d7:20:44:cd:ed:59:e8:6c:02:
83:d4:39:8d:21:2b:ed:f1:77:fc:ed:ad:6a:81:c2:d4:d2:33:
44:30:e4:4e:bd:af:f0:47:06:c9:f0:41:5b:5b:76:03:8f:08:
33:f2:56:37:e3:24:5b:d0:eb:5d:d3:c0:e4:5d:d4:f9:ee:f9:
bb:89:01:22:c2:88:43:67:ed:f2:a3:21:83:4e:5b:5b:65:67:
e4:ac:2c:f5:22:9f:b3:42:3e:3f:cd:06:db:15:f4:78:51:c5:
32:18:7a:af:e0:7b:b4:f4:a7:fb:6f:91:f3:18:16:15:60:6d:
85:5d:70:ca:4a:86:f8:e3:4a:9f:3c:bc:9a:97:af:6f:ea:13:
9f:ed:4e:ac:a1:5c:a6:3f:f5:1a:8c:00:5b:a0:a8:f2:a8:d2:
69:da:6e:c3:57:4d:40:b3:fc:a5:34:9d:c2:b1:7e:0d:82:aa:
7c:f4:ca:05:8b:87:55:d5:b9:47:ea:46:7c:29:13:72:b2:d9:
02:d1:71:13:d2:e6:59:dc:2d:92:d1:a7:c2:93:ad:40:70:e7:
3b:f2:a4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:56 2025 by rpki-client