Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
File: tYaoZDYz6YdBEai881GKCQXyhgk.mft (raw, json)
Hash identifier: dyUg5WGv0H0MmQ3DKj+R0k05Kraesm5BwQrr6IAC5H8=
Subject key identifier: 4B:97:7A:45:B6:E5:49:B6:34:24:85:01:72:4B:1A:54:2B:EB:28:13
Authority key identifier: B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
Certificate issuer: /CN=b586a8643633e9874111a8bcf3518a0905f28609
Certificate serial: 0194BC04D19C8B2E4D24A0F52C410D2F9BC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
Manifest number: 0FD0
Signing time: Fri 31 Jan 2025 11:00:19 +0000
Manifest this update: Fri 31 Jan 2025 11:00:19 +0000
Manifest next update: Sat 01 Feb 2025 11:00:19 +0000
Files and hashes: 1: KWc-RAvt2weoUx0MAyuZekiSu6M.roa (hash: hfmB9slnA1IL3HuDstN6ATg7sfXi2D378t9Xob1Z1hA=)
2: SX0Et8xCJ-oQPSZhA1vLwpgECss.roa (hash: GtBoUqmPl7+e01rEjLRBIu11uahmgFfyYOp4+G1ts2k=)
3: tYaoZDYz6YdBEai881GKCQXyhgk.crl (hash: UZvN9BFB7vJn3ptQSd2vLiXHb5kyZ70PxdGEIguqVfw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:d1:9c:8b:2e:4d:24:a0:f5:2c:41:0d:2f:9b:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b586a8643633e9874111a8bcf3518a0905f28609
Validity
Not Before: Jan 31 11:00:19 2025 GMT
Not After : Feb 1 11:00:19 2025 GMT
Subject: CN=4b977a45b6e549b634248501724b1a542beb2813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:1e:85:7c:96:7d:0c:e0:78:e4:62:3f:2c:
a5:78:b2:23:16:5b:a8:9f:3a:6c:b9:48:f7:40:da:
38:90:e8:36:eb:37:d0:c9:fb:c1:81:12:9c:24:a6:
e6:0a:48:e1:52:38:ed:3d:d9:cc:fc:39:c0:cd:f4:
c2:fb:26:c3:bc:18:3d:96:3f:54:43:f2:ed:1c:1b:
05:9b:b2:39:1f:d7:02:21:09:49:82:0a:46:3e:76:
1d:4a:14:45:5d:e0:8a:63:4e:4a:19:17:c8:42:9f:
ab:1a:63:fe:63:d6:09:60:c1:34:3d:1b:65:81:07:
1e:a9:05:bf:3b:c5:33:5a:32:11:8c:fd:ea:de:d9:
cd:b1:11:61:b0:63:2b:0a:c5:91:98:54:50:24:11:
53:1f:7b:19:d1:29:ff:b3:98:2b:22:47:49:98:65:
a4:92:8f:47:4e:25:7c:9e:c7:74:ab:c1:f0:82:83:
15:99:39:e8:c1:16:bf:c4:7f:b2:14:bd:4e:3f:af:
78:51:b3:76:35:39:a4:56:7b:1d:53:f1:e9:d1:57:
4c:c7:47:59:15:8f:f2:cf:cd:cf:62:34:f7:96:c3:
d5:19:46:92:1c:99:20:96:f9:7f:11:11:13:17:65:
3a:81:12:9e:ca:36:fa:ed:2b:b2:84:41:80:10:6a:
3b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:97:7A:45:B6:E5:49:B6:34:24:85:01:72:4B:1A:54:2B:EB:28:13
X509v3 Authority Key Identifier:
keyid:B5:86:A8:64:36:33:E9:87:41:11:A8:BC:F3:51:8A:09:05:F2:86:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYaoZDYz6YdBEai881GKCQXyhgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/20ccac-33ee-45dc-bc9c-4499e3239f1f/1/tYaoZDYz6YdBEai881GKCQXyhgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:0e:56:3c:e3:12:f0:53:1d:40:31:59:fa:97:8b:de:b5:81:
e9:9b:0f:d3:1d:14:3c:71:3c:3e:0f:20:76:76:c3:33:50:b2:
13:89:e2:6d:fe:0e:3d:ac:84:25:c2:91:66:16:e4:18:51:53:
15:8c:9d:e4:31:47:9d:15:df:8b:24:44:8a:a9:f2:8c:b6:ee:
47:ed:66:c3:9c:09:49:94:36:01:63:f2:c6:1f:f6:f7:ff:8c:
98:b1:d7:0f:9a:25:26:c7:ca:bb:32:3e:e8:75:51:0f:12:b0:
44:ff:7d:eb:4e:02:b9:d4:a9:a9:37:94:27:45:41:e5:0d:f2:
6c:2c:22:ba:d7:6a:7c:43:16:3a:d7:06:bd:1e:b2:af:32:b3:
ed:d6:9e:1c:b9:e5:b4:8f:0c:ba:16:17:c1:a0:86:86:6f:f4:
2e:0a:35:5d:df:98:c9:23:9f:1f:1e:0d:99:ae:69:05:c7:03:
e9:4f:9b:ec:33:1a:5f:d9:59:6d:2c:e3:eb:48:a4:ba:b5:bc:
86:d5:a7:7e:3c:a9:65:c5:09:bc:0c:84:e8:c6:3d:ba:68:0c:
e9:8d:2b:30:a4:00:9b:56:79:8e:43:c5:a3:3c:b9:c6:15:15:
97:4d:41:75:81:e8:ef:dd:22:73:84:ce:41:31:6e:1a:4b:0c:
5e:d3:8e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:12 2025 by rpki-client