Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
File: tDqirb6dQEE3M58g_VhiPIo58TA.mft (raw, json)
Hash identifier: c3ZYFGPOM0CbFmfKNozmNjo5BcvKVgePfZ0eVKp5C7c=
Subject key identifier: FE:B9:2D:C0:F2:A5:F9:5A:E4:6E:39:86:9B:BF:B2:B1:A0:19:1A:C8
Authority key identifier: B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
Certificate issuer: /CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Certificate serial: 0194BD4EAD6B5F53CC5F973C606CFD536CB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
Manifest number: 03D7
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: DR42yKGsjL2cx3Lp0nYZ2-J6QjI.roa (hash: SNpq+XJB/gPAUUzDmYBdIDihlauDEu/Coqako/V/GUw=)
2: tDqirb6dQEE3M58g_VhiPIo58TA.crl (hash: OwDHBxEyMFDGX+O4n20Pe905I4XO2Ok1nnFcc64XB6M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ad:6b:5f:53:cc:5f:97:3c:60:6c:fd:53:6c:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43aa2adbe9d404137339f20fd58623c8a39f130
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=feb92dc0f2a5f95ae46e39869bbfb2b1a0191ac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8f:d4:48:e7:26:45:a2:6c:ec:3c:09:82:a8:
41:86:b4:f2:57:df:26:c5:0f:aa:3d:c7:df:5e:1f:
12:27:f0:98:52:87:8a:9c:0d:01:2d:42:81:c2:fe:
e8:13:73:e3:86:33:fa:26:2c:f0:3a:9e:49:98:c7:
a7:f3:97:b4:cb:ca:77:5d:28:11:d6:61:1c:36:b8:
3d:f9:9c:d2:5e:39:17:90:13:f2:94:31:08:bb:6f:
51:03:23:0c:2d:23:0b:b5:5a:7e:02:39:f6:57:87:
e6:f5:47:19:a7:2b:60:85:0e:ed:fd:a8:49:07:c4:
be:ea:a8:47:4e:16:01:e2:9f:52:e2:99:cc:1b:ba:
2a:ee:bb:1d:06:61:f8:20:ca:38:95:f7:19:ae:87:
61:39:c1:6d:c4:63:2d:29:6f:d7:bb:76:3b:18:5f:
77:49:ad:4b:ec:ad:b5:20:4c:24:f0:c0:4c:23:4b:
66:b9:4d:6f:d7:6b:5d:d4:56:61:cd:e8:b0:10:cb:
c0:80:4d:cd:2c:e7:d4:a0:32:e0:65:52:7d:03:1e:
75:fa:08:e9:ce:50:0b:5a:33:89:fe:db:9d:7a:92:
a8:05:83:0d:86:a9:8c:df:65:f5:09:e4:bf:79:f0:
47:0d:61:a6:55:df:f7:e3:8c:d4:88:dc:f8:94:f2:
c4:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B9:2D:C0:F2:A5:F9:5A:E4:6E:39:86:9B:BF:B2:B1:A0:19:1A:C8
X509v3 Authority Key Identifier:
keyid:B4:3A:A2:AD:BE:9D:40:41:37:33:9F:20:FD:58:62:3C:8A:39:F1:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDqirb6dQEE3M58g_VhiPIo58TA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/262f40-48c7-43c6-9d83-1548ac1356be/1/tDqirb6dQEE3M58g_VhiPIo58TA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2b:c9:53:ce:c8:3a:5b:2e:d5:fa:6a:00:03:d8:52:ac:0f:
68:43:00:c8:0c:68:a8:af:a1:3c:3c:76:b3:76:57:fd:61:74:
d7:f3:be:8a:98:88:40:4d:31:cd:06:65:9c:20:34:66:5a:e0:
0c:71:a7:d4:ad:da:5d:e4:b5:30:c3:24:ae:0d:98:0f:26:ef:
6a:ee:f2:ac:f5:31:f8:a4:19:fa:29:70:d8:78:7a:53:1f:3b:
c6:b9:27:1d:f6:68:31:39:49:3b:27:05:3f:ca:c7:50:1d:d8:
26:aa:3d:e2:14:3f:b2:9d:c3:43:bc:d9:e7:86:1c:68:2e:17:
ca:fd:a6:1c:62:e5:78:07:2e:1b:f6:bb:57:65:cb:13:6a:26:
a3:62:ab:03:3a:13:6e:75:2c:19:42:cf:17:28:1e:c0:5a:8f:
fd:2f:8d:27:66:6d:12:2a:5c:e4:b7:91:01:42:c8:14:99:3d:
7e:6a:40:ac:22:da:e5:8b:46:5b:68:57:02:8c:4c:60:7a:7a:
e0:82:bf:94:30:c5:94:0e:94:0a:fc:88:13:88:7f:c5:0d:1d:
07:e8:64:e4:73:1b:26:fc:68:33:4d:f1:ca:bf:41:1c:4c:df:
74:0e:71:ea:be:9f:57:bf:c6:5c:8c:9f:cf:dc:2f:64:e2:53:
48:05:3c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:24:35 2025 by rpki-client