Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
File: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft (raw, json)
Hash identifier: je39+vOS2qPNSdt/HY2Kr6O2d60HI5RXel0d3xexXzs=
Subject key identifier: 93:C8:2A:B5:80:97:DD:4E:6D:DF:97:98:07:70:B7:69:3C:EC:61:BB
Authority key identifier: B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
Certificate issuer: /CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Certificate serial: 0194BC3C536F19D636DFCA4AC3D7FBF7BB22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
Manifest number: 0D3F
Signing time: Fri 31 Jan 2025 12:00:57 +0000
Manifest this update: Fri 31 Jan 2025 12:00:57 +0000
Manifest next update: Sat 01 Feb 2025 12:00:57 +0000
Files and hashes: 1: VYJ9qKilNSj9Z30pGpYaNAGU4Z0.roa (hash: j29BGrdUX9gZWLn/MqLu3C1IYATOJG6BtpBREfenzkc=)
2: dek1yBz9hU9Sw_jKA33of_zM9K4.roa (hash: yub3ufVUEc3WS+XkUJMCp9euptnf3DjONJgSPtRCvNQ=)
3: tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl (hash: eWLt6+QFLxgrTx2WpS+ZdCCJkA3WgT7bxd6Rri/n2DI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:53:6f:19:d6:36:df:ca:4a:c3:d7:fb:f7:bb:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40d494333cb4d9e5fd10c846c47cf56445c503a
Validity
Not Before: Jan 31 12:00:57 2025 GMT
Not After : Feb 1 12:00:57 2025 GMT
Subject: CN=93c82ab58097dd4e6ddf97980770b7693cec61bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:62:2c:aa:92:c9:40:c3:7d:1f:db:86:ea:f1:
af:05:20:5a:81:ee:3f:a9:ed:2c:4d:29:ec:54:c5:
13:6f:76:6a:22:25:e4:55:a7:fc:9d:55:ce:8f:b4:
81:eb:78:b7:37:c4:7f:07:1f:2f:4e:88:b3:47:0e:
33:ab:31:6f:bb:bf:f9:85:8c:f4:25:3a:ad:09:29:
f9:ec:9f:8a:dd:fb:26:27:4c:30:31:85:81:1b:fd:
ad:aa:6e:d9:54:3c:81:e8:81:15:8d:f5:0d:9b:f4:
ca:9d:ba:eb:70:9b:8e:b2:b5:19:e9:54:d5:0a:fc:
90:87:ba:54:60:94:97:ce:82:c2:89:de:64:07:6a:
57:17:92:04:76:e7:5e:f6:15:2b:81:9d:4e:29:d2:
e9:97:39:c5:7d:21:ec:98:aa:6c:24:b0:2a:69:2f:
e7:bc:31:58:94:62:70:3f:95:7b:03:a3:55:bb:85:
79:9b:f3:1c:c1:7b:7e:63:15:1e:b0:d6:02:9a:c0:
ed:ca:3c:5f:71:db:d1:48:14:21:e6:cc:98:aa:bb:
25:a3:59:c3:f8:17:8c:3e:f4:5d:37:5d:75:f2:4e:
d0:0e:ad:4d:5d:7e:64:22:c0:68:c5:a3:fd:b7:b6:
53:a5:ed:78:24:7e:04:b3:00:71:94:97:2d:cd:08:
f7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:C8:2A:B5:80:97:DD:4E:6D:DF:97:98:07:70:B7:69:3C:EC:61:BB
X509v3 Authority Key Identifier:
keyid:B4:0D:49:43:33:CB:4D:9E:5F:D1:0C:84:6C:47:CF:56:44:5C:50:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/2a7bf4-3454-4d14-9e0c-183f9975fc94/1/tA1JQzPLTZ5f0QyEbEfPVkRcUDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:19:3d:3c:ce:30:60:e1:56:24:91:49:b2:e4:73:22:d4:c4:
c8:b5:32:8d:00:12:7b:77:5b:e1:8e:7d:8d:97:82:fb:c0:bf:
c3:44:9e:60:8b:e7:02:5d:79:d5:c1:91:9e:55:f3:fe:4f:22:
68:77:d7:80:a2:7f:3a:84:94:b6:31:c3:de:7f:9d:77:e4:8a:
0b:3c:c5:b7:a7:97:91:fe:50:a4:59:ea:5c:be:53:0f:c0:27:
dc:05:2b:66:c2:7a:a4:74:f7:d6:06:ed:ec:b1:29:7a:06:ce:
ad:bf:79:96:b6:5c:05:5f:68:db:72:02:b9:f6:46:02:60:bd:
31:e8:59:4c:bd:86:82:60:c2:f6:14:b3:e5:73:d9:62:5e:84:
52:30:f1:cc:64:7e:2d:70:3d:7d:42:b0:9d:36:c4:96:6f:58:
1f:88:c6:e0:92:be:44:9b:a8:7c:b4:06:2e:18:15:7d:80:83:
fd:05:46:4f:73:a1:ec:8b:ea:37:22:97:12:97:2f:5c:94:c5:
ee:a6:42:8e:9d:cb:4e:67:f9:04:90:5e:d8:b5:8b:4d:40:b2:
1d:9d:4e:1a:fa:d5:40:e7:74:5d:91:16:5d:a4:08:52:e5:1e:
06:12:ed:d7:69:97:b7:74:54:35:fb:5c:2d:82:6b:f8:82:34:
f6:da:69:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:53:50 2025 by rpki-client