Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
File: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft (raw, json)
Hash identifier: 04OK12O/6dQHh9kC++JC/U6L6X582aVnIuJJW1xmVxc=
Subject key identifier: 41:0A:20:F7:C4:58:57:D0:EB:12:69:03:4D:35:CF:B9:84:CE:A7:77
Authority key identifier: 4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
Certificate issuer: /CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Certificate serial: 0194BBCE7F02AD27CECB41E115EADEF3F81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
Manifest number: 0BD9
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: QjtOOOK5pwQKBGSkxklhdFksgp4.roa (hash: mBFc78U/Py4iQS+BrsEjELYMOU1hEEh06mY9X8mzPLw=)
2: T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl (hash: x4fh6WX05wxNXphVspCj4/jq0Rxwu6T3Vt+JIEbpLUs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7f:02:ad:27:ce:cb:41:e1:15:ea:de:f3:f8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa5cde524f7810d5868bc49ab0bf6621f44dc21
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=410a20f7c45857d0eb1269034d35cfb984cea777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:34:92:df:19:24:3b:e0:e8:ae:50:97:bb:e9:
60:22:58:2b:7b:21:39:ee:a5:7f:7c:ad:d9:ae:30:
e7:b0:cc:b2:98:6b:de:5d:36:81:8f:8f:5a:9f:56:
e5:ea:c9:92:0f:89:1d:7a:8b:42:3a:02:2e:05:f7:
83:79:86:1d:46:15:70:f6:bf:f7:1d:14:19:75:b3:
89:e9:82:81:8f:3f:6e:e7:25:89:8b:c5:7b:28:5d:
1a:94:80:f5:e7:fd:76:9a:4f:d1:60:85:8f:89:c7:
25:e2:9e:95:1b:6c:cd:ee:af:9b:a1:d4:40:1c:18:
88:0d:bf:82:71:26:a2:cb:54:31:5a:88:12:9a:c6:
42:3b:0a:fe:4e:9c:a7:1b:a1:a8:49:44:b2:4a:f6:
b2:59:c8:99:3e:d3:20:a4:c3:cf:c0:73:9c:b8:b7:
da:1d:74:31:e0:c4:80:b5:95:91:a2:3f:8f:ea:76:
1d:98:5f:d6:dc:6b:bb:0c:a6:08:01:70:c4:79:12:
3d:0e:f0:99:d8:0d:a4:7e:e4:a2:c2:6d:51:e7:55:
0a:e8:ea:eb:cf:34:e5:7b:60:b2:1b:a4:80:0e:30:
6d:a1:62:34:5d:ba:d0:3a:25:c9:35:be:30:6d:aa:
a7:6a:6d:bf:aa:cd:3e:01:90:54:5b:c7:ed:fd:f4:
c5:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0A:20:F7:C4:58:57:D0:EB:12:69:03:4D:35:CF:B9:84:CE:A7:77
X509v3 Authority Key Identifier:
keyid:4F:A5:CD:E5:24:F7:81:0D:58:68:BC:49:AB:0B:F6:62:1F:44:DC:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/d6088c-3110-41e1-b996-32d4ad8f56de/1/T6XN5ST3gQ1YaLxJqwv2Yh9E3CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:b3:f9:56:5f:3c:c7:3f:67:9e:46:d6:b2:2f:6d:26:6a:b2:
8f:f6:78:4f:ef:22:ff:38:e4:4a:dd:31:b3:61:57:07:f5:76:
46:e0:de:13:2a:8b:e4:a8:6e:c0:a2:ea:a8:13:50:6a:39:f1:
4a:e7:34:fd:41:a4:fc:19:38:3a:35:59:35:c7:21:28:00:49:
a5:fa:7e:f1:4b:2d:cb:72:23:db:56:21:b5:20:34:72:5e:a3:
ff:65:2d:0f:f7:54:9d:0f:14:6b:ed:b3:94:6f:55:1f:f4:d9:
f8:99:6e:19:f9:9b:2b:28:00:08:88:26:bc:3b:ee:2b:c2:41:
d3:1d:3e:09:a1:fb:db:ef:6a:04:b1:d3:b9:46:56:b8:7e:a1:
63:9b:89:5c:59:0c:ac:86:b3:01:ce:c6:f8:24:6f:dc:3e:91:
87:f5:63:21:d2:a2:69:11:78:7f:21:49:b4:46:78:4b:a7:8d:
9b:85:7e:0c:29:ca:df:04:9b:b1:db:c2:60:1d:89:0e:5d:2b:
ec:1f:64:6d:c7:b5:4e:d4:65:9f:61:b2:30:6f:83:f1:fa:fb:
74:a6:68:21:07:be:40:80:7c:ae:01:c3:7c:af:a2:b8:41:bc:
73:f2:63:5d:0f:72:23:6d:37:76:7f:c2:db:69:62:e5:6a:ad:
8e:82:e3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:49 2025 by rpki-client