Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
File: tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft (raw, json)
Hash identifier: sWMulW9aeP8EF05VyYmDcsGj1kN5ITfXXcLiuTFrSGY=
Subject key identifier: 54:2E:37:2D:DD:B1:04:66:F8:18:EF:24:F3:64:AA:A1:0D:8F:BB:62
Authority key identifier: B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
Certificate issuer: /CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Certificate serial: 0194BD858FEA1725B08B769262923DA084DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 18:00:34 +0000
Manifest this update: Fri 31 Jan 2025 18:00:34 +0000
Manifest next update: Sat 01 Feb 2025 18:00:34 +0000
Files and hashes: 1: VJtvXDXYtAcS9C4LIbmlaqXh4Co.roa (hash: THcKGdc9aA5a+OjJYNnV65xxowh1d3kb8KQrHqiCPq4=)
2: kCuU_akaKx5LyFBq_aC8tJZmW4k.roa (hash: rwiklkShetbqI+JCF0U82yUoqMzfmqbO8VSJkou4nX0=)
3: tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl (hash: eXn7HDdYBjHwsGNPlrZ22ftj2K7hYSPes4F9Z6uosOM=)
4: zRUeWa0cHwYSeCulaQD7CwglfcA.roa (hash: n64Z0LZHJ6IaidXI5aCAz7/vA6SxDaNJnSQHAtoQauA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8f:ea:17:25:b0:8b:76:92:62:92:3d:a0:84:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5427ea49f972d19c56393a689e7cbeb990d5d7a
Validity
Not Before: Jan 31 18:00:34 2025 GMT
Not After : Feb 1 18:00:34 2025 GMT
Subject: CN=542e372dddb10466f818ef24f364aaa10d8fbb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b7:03:e9:63:77:69:0b:8d:7c:8f:bb:e0:dc:
a8:b3:ed:e5:01:ac:48:29:be:9d:ba:94:77:28:2e:
2b:e5:3f:a0:5b:a7:a8:bc:cf:35:e4:2d:d7:92:29:
41:da:39:4f:7b:1b:2b:2e:7c:6a:7c:2c:ee:fc:f8:
7a:13:dd:7d:c5:9d:39:40:3b:36:8b:a5:80:ef:c9:
46:aa:df:ab:ea:5f:4c:4c:e4:fe:1e:df:4f:1c:42:
0f:46:91:f6:0d:2c:18:3a:46:6f:d9:fb:f1:aa:ea:
e2:ac:82:61:7f:b8:02:fc:09:b0:08:0a:47:a6:c4:
d7:55:c8:55:6f:08:fb:c6:88:56:c3:ab:f6:d4:4c:
b8:2e:5b:34:a7:2c:b4:8e:04:a4:02:29:f6:82:b9:
e2:4d:a4:9b:44:d0:be:1c:80:7e:62:3c:d2:0b:01:
74:af:85:4c:31:61:db:66:bc:7e:67:72:c8:b9:f1:
55:1d:44:84:89:ec:4b:42:8d:f3:b2:64:bd:a9:ac:
ba:7f:46:d2:fd:55:e8:ff:f5:dd:cf:9a:08:94:ef:
0a:d6:6d:88:ff:25:d5:c4:16:d6:bb:6a:d9:4d:ec:
65:23:88:56:c7:1d:37:10:0e:e0:e3:a8:15:80:e7:
32:04:05:c0:5f:6a:40:ab:bf:21:6d:3a:b8:02:46:
5d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:2E:37:2D:DD:B1:04:66:F8:18:EF:24:F3:64:AA:A1:0D:8F:BB:62
X509v3 Authority Key Identifier:
keyid:B5:42:7E:A4:9F:97:2D:19:C5:63:93:A6:89:E7:CB:EB:99:0D:5D:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUJ-pJ-XLRnFY5OmiefL65kNXXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/d2bb68-9bc7-4791-8528-0c495477ca10/1/tUJ-pJ-XLRnFY5OmiefL65kNXXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:92:08:10:39:a6:cf:84:b9:33:49:dc:04:58:16:e2:95:f6:
18:41:61:16:39:89:8c:b1:41:cf:52:dc:fe:0b:a3:c0:c5:62:
39:8a:b1:93:52:72:3d:65:cd:2a:65:0b:ec:77:ec:8b:54:a6:
fb:d1:6c:8f:af:68:50:94:ba:ea:b9:0b:47:0a:97:f4:5d:64:
4d:80:d3:85:1a:83:d8:18:7f:1c:b9:2a:32:62:0a:ab:82:71:
be:f1:47:5c:32:d7:96:3e:27:d9:e1:8a:51:40:b9:52:4a:7c:
cc:53:40:6e:62:5f:67:69:f5:b4:6e:01:33:8d:8f:bd:68:4b:
02:3b:08:62:46:02:07:08:78:e1:97:da:29:27:55:84:c8:80:
ea:f3:e4:8b:ef:3b:45:bc:28:26:3e:3c:fe:c3:f5:bd:1c:c6:
d5:fc:d6:0d:32:db:a4:53:00:27:3d:2d:48:be:fe:aa:c0:c7:
ed:df:44:88:6d:51:2b:e3:88:2a:2c:77:91:3f:40:e3:31:83:
c0:ff:75:53:92:b0:51:1c:52:59:d9:38:0c:e4:fa:b1:b1:6e:
82:4f:73:f5:ac:02:b2:47:ec:64:e7:4a:75:04:27:f3:33:03:
60:a7:6b:4b:10:69:78:a8:5b:c2:02:65:5a:9f:7f:61:5c:e6:
f9:c3:e3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:38 2025 by rpki-client