Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
File: tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft (raw, json)
Hash identifier: H9jXJ6oJ/lwDzOsMndLA3Q8UXNneeHLtejzVV5BijfY=
Subject key identifier: A9:D7:FC:13:3C:5D:95:21:69:51:E7:0B:79:5F:14:9E:4A:C3:17:FC
Authority key identifier: B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95
Certificate issuer: /CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
Certificate serial: 0194BD1786D25D7F700355EC3FA606B216E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
Manifest number: 0F79
Signing time: Fri 31 Jan 2025 16:00:23 +0000
Manifest this update: Fri 31 Jan 2025 16:00:23 +0000
Manifest next update: Sat 01 Feb 2025 16:00:23 +0000
Files and hashes: 1: gOpessaE3KR3BE7y4M-QryrS1Ks.roa (hash: YdF4inQqBoygiKj6DuoyGUjs1/73Ha+wGsnO74e4IH4=)
2: tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl (hash: fFaSBw7RY8Yr3WgOZ4QWCVLAGp1FEvUIVjUr04RpNDs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:86:d2:5d:7f:70:03:55:ec:3f:a6:06:b2:16:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5167e7ee37838f0751c49c5e5f3ec000064ae95
Validity
Not Before: Jan 31 16:00:23 2025 GMT
Not After : Feb 1 16:00:23 2025 GMT
Subject: CN=a9d7fc133c5d95216951e70b795f149e4ac317fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:bd:86:4d:47:12:aa:0f:87:b9:1b:50:09:9a:
ae:61:a9:30:4b:0f:5c:77:cd:86:f0:68:77:7d:fd:
5d:a2:e7:bc:e9:ee:22:59:a8:0e:a2:8b:46:86:c3:
fd:eb:86:03:f2:11:f0:83:8b:08:9d:b3:17:28:ff:
25:ec:88:84:c0:2a:95:3a:d0:12:0c:07:23:15:7a:
8d:cc:ed:51:91:62:7a:81:cf:e9:04:ff:26:11:38:
67:fd:c7:5c:4d:ef:05:b8:96:e8:74:f2:36:df:d4:
ae:3e:e6:91:e9:59:d6:0e:1e:96:2a:5f:8c:d8:06:
42:bf:f0:26:a4:fd:7d:d1:0f:95:0a:43:f2:5f:49:
d4:c6:d2:a6:cf:e0:9c:c2:1b:a4:e1:6c:7d:4d:a3:
b2:8f:28:f9:0f:23:98:0e:7b:66:8c:2a:ba:04:91:
3b:e8:2a:0a:ac:87:20:0e:a3:fe:b2:a9:e4:e6:e9:
74:87:3c:83:c2:9e:1e:77:33:a2:48:44:72:85:f1:
3f:1d:ed:a1:c7:76:b7:5a:cd:79:df:89:e6:c2:74:
bd:aa:9b:c3:25:ea:f4:54:39:61:ef:bd:d1:28:21:
13:d8:6f:da:e2:9e:f3:7d:77:bc:34:94:1f:5b:78:
35:2a:80:b6:2f:31:24:5e:a0:e3:22:f3:e4:18:90:
fa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D7:FC:13:3C:5D:95:21:69:51:E7:0B:79:5F:14:9E:4A:C3:17:FC
X509v3 Authority Key Identifier:
keyid:B5:16:7E:7E:E3:78:38:F0:75:1C:49:C5:E5:F3:EC:00:00:64:AE:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRZ-fuN4OPB1HEnF5fPsAABkrpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/c7dc34-44db-4c06-8a32-e22aed1f08ec/1/tRZ-fuN4OPB1HEnF5fPsAABkrpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:16:4d:28:b0:70:9e:2e:ca:21:11:40:c9:be:ab:6c:e5:e3:
dd:3a:13:80:17:47:3c:db:44:f3:ed:d7:92:c3:49:c8:5e:0e:
c5:fc:85:cb:f5:cc:af:6a:8d:5a:8e:45:a4:b2:15:60:26:e9:
c0:c8:3b:f5:35:c2:65:e2:20:09:0b:8c:4c:1a:18:fc:02:04:
63:b1:39:1d:a1:06:ed:b6:3a:2e:1d:e8:af:0a:b3:98:f9:53:
3c:ac:90:59:7c:92:5e:05:05:13:68:50:f9:4e:25:7c:f7:ce:
ef:a2:99:b9:e2:8f:d7:15:63:1b:ce:a1:df:de:94:b6:99:1a:
49:0f:eb:ab:ee:d6:65:72:c0:4b:5e:4b:14:60:36:70:ac:ae:
bd:76:40:a7:b1:79:76:0a:68:1b:1e:a3:b8:e4:56:c3:ee:23:
81:64:92:3c:84:62:21:c7:73:d8:01:f3:af:e7:ec:48:8d:84:
45:3c:97:43:b1:02:11:17:70:80:20:67:94:45:40:b0:26:a8:
20:45:10:c2:18:de:c0:e7:22:20:dd:b4:d1:99:49:64:a8:aa:
e9:8e:17:0f:86:f2:ad:e3:be:3f:37:36:a3:4e:a4:b6:ff:b5:
49:8b:04:d6:04:e1:be:9d:38:8a:b0:09:b1:f5:58:2b:87:11:
14:05:81:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:01 2025 by rpki-client