Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
File: t4OAtB43tXV9PU4u7N8G2TCnC50.mft (raw, json)
Hash identifier: cQRaIXEeDbYKPQDEGcYPIcLNx6YSw1xHxteVk+mSoTw=
Subject key identifier: E9:BD:3C:4E:30:B8:B7:56:58:BB:57:97:7E:77:CD:A4:BE:62:C5:4C
Authority key identifier: B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
Certificate issuer: /CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Certificate serial: 0194BCA9BD13E934CF2906C443E887E3AF00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
Manifest number: 1431
Signing time: Fri 31 Jan 2025 14:00:27 +0000
Manifest this update: Fri 31 Jan 2025 14:00:27 +0000
Manifest next update: Sat 01 Feb 2025 14:00:27 +0000
Files and hashes: 1: FFNfocwWW0AfwhIbyh5sOWKp-YQ.roa (hash: +IQV10jr/ct4eRg1uckgNvPR/qQ6+ipg5/BVGvg6xW8=)
2: t4OAtB43tXV9PU4u7N8G2TCnC50.crl (hash: wdntTsiP0mPWw4BhHnNsOjLtCJv2wfKXrzHcKhLGcxU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bd:13:e9:34:cf:29:06:c4:43:e8:87:e3:af:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b78380b41e37b5757d3d4e2eecdf06d930a70b9d
Validity
Not Before: Jan 31 14:00:27 2025 GMT
Not After : Feb 1 14:00:27 2025 GMT
Subject: CN=e9bd3c4e30b8b75658bb57977e77cda4be62c54c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:25:68:cd:5f:53:11:9f:75:60:ba:d2:86:ab:
3c:d7:33:7b:85:87:ee:4c:64:bd:17:01:63:ab:da:
53:80:7d:9a:16:d6:97:43:8e:9b:3c:6c:79:6f:ce:
27:e3:1b:12:d7:28:9f:c8:44:0d:a3:f4:40:da:d9:
0f:18:96:73:e5:51:c2:6d:92:ec:f8:69:66:1f:40:
ba:a2:46:aa:a4:f7:2e:b0:0a:c1:0d:d8:15:42:e8:
c4:d7:40:56:dc:1d:e1:83:c6:c2:3f:fa:23:16:9e:
27:10:99:c2:bc:ad:9d:bf:53:70:e5:fc:eb:32:eb:
cc:2f:ac:2d:17:e3:98:ad:66:78:14:78:82:b1:df:
eb:a9:d6:69:2e:0c:6e:a6:bd:83:7e:7a:0d:d5:e6:
81:a5:d8:e7:13:0c:d8:22:bb:a9:28:77:5f:d5:03:
18:20:85:fd:c4:76:54:3b:66:a2:26:19:e2:fb:9c:
69:1b:80:db:2f:ed:77:81:0a:41:9e:d3:b0:ad:68:
0a:9f:3e:71:e9:10:31:5a:fb:2e:11:00:9a:30:47:
83:95:dd:23:95:43:fe:3d:70:82:14:1f:3f:ea:93:
79:6b:58:c4:79:91:5a:a4:af:40:f1:8c:00:c5:48:
b5:74:11:e9:0a:e8:30:8b:7f:04:c2:ee:e0:c4:d0:
2d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:BD:3C:4E:30:B8:B7:56:58:BB:57:97:7E:77:CD:A4:BE:62:C5:4C
X509v3 Authority Key Identifier:
keyid:B7:83:80:B4:1E:37:B5:75:7D:3D:4E:2E:EC:DF:06:D9:30:A7:0B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4OAtB43tXV9PU4u7N8G2TCnC50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/2e6613-4332-4c19-addf-dedaf79356ce/1/t4OAtB43tXV9PU4u7N8G2TCnC50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:1d:f0:26:8f:48:8a:a0:f2:46:51:4a:f1:70:29:ba:3b:23:
19:ce:97:3a:6a:58:6c:ca:74:e5:cb:5b:62:ab:30:8d:31:11:
e8:5d:34:33:47:19:03:ee:c3:0a:fc:25:6c:8f:fe:b6:75:99:
de:7d:0f:d1:ab:3b:2b:ec:5c:20:b1:3b:79:1f:5a:87:6e:fb:
de:97:00:44:7b:38:3a:3f:23:d6:62:10:88:1f:7f:bf:43:1f:
86:9b:a0:43:1f:03:3f:68:c2:c7:d3:bc:6d:5d:7f:95:9a:5c:
7c:30:da:79:7d:f7:93:e9:9f:78:f8:b5:4e:7f:11:3f:c1:e2:
ac:79:5a:f9:98:0d:39:2f:04:75:b3:33:54:2f:ee:28:ed:f6:
20:63:84:7d:b7:97:33:ee:49:1c:2d:f5:80:f7:8e:31:d8:6e:
8e:28:56:40:c5:72:e7:4b:5c:43:c6:ae:8a:84:8f:9e:df:1f:
b2:cd:c8:80:1a:3a:ae:ca:43:fc:6d:ef:b9:16:f3:97:0e:62:
48:d8:c6:a0:50:21:73:1c:14:1e:96:d9:1b:bb:e8:e8:3e:29:
92:94:83:63:03:4b:5d:f2:64:42:b1:e2:58:b0:b5:20:5b:86:
c0:fc:e0:41:e4:f3:24:e5:f8:48:d4:f5:4c:ce:97:77:26:4b:
82:8b:cd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:25 2025 by rpki-client