
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
File: tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft (raw, json)
Hash identifier: toL6KksyOARNJmUIvgOB10n5ylumR4uxzzpTbTkKG3k=
Subject key identifier: 32:C6:E7:CB:AE:E1:C2:B0:6D:6B:C8:D8:DC:85:56:EE:8A:AF:42:5D
Authority key identifier: B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
Certificate issuer: /CN=b478410224904494e9c0f7d35650a260e5fb6193
Certificate serial: 0194BC72C732EC2769DDF66705860846829C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:26 +0000
Manifest this update: Fri 31 Jan 2025 13:00:26 +0000
Manifest next update: Sat 01 Feb 2025 13:00:26 +0000
Files and hashes: 1: tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl (hash: oggrmHAb0K7AfTzI321FZbwXqBJp2gdt5AenDyCBHks=)
2: uhCkTjed1Otbl84zKJAXa3t70aA.roa (hash: cZYpuZx9ZnpX3epsbIvoPloPaPVgbUbl6mh5Fr2F3pw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c7:32:ec:27:69:dd:f6:67:05:86:08:46:82:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b478410224904494e9c0f7d35650a260e5fb6193
Validity
Not Before: Jan 31 13:00:26 2025 GMT
Not After : Feb 1 13:00:26 2025 GMT
Subject: CN=32c6e7cbaee1c2b06d6bc8d8dc8556ee8aaf425d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:a5:c5:e3:07:fa:18:ea:1c:c1:60:f3:28:f6:
4c:9b:64:69:b9:4e:81:2b:49:03:4b:9e:ce:f8:2e:
e4:12:5d:47:36:22:f4:6e:02:d8:4f:c5:0e:2e:ab:
ed:2e:b4:15:d2:18:12:ad:b3:cc:35:8f:ac:5c:7e:
75:0d:68:c9:61:8b:1a:93:f5:e9:e5:b5:df:d7:26:
0f:ad:a9:db:2d:0c:3b:d4:9d:0a:bb:63:61:d5:78:
f1:f6:99:90:6e:50:50:ed:d9:e2:07:9d:be:74:88:
d6:d3:f8:47:28:01:4d:cb:66:f1:a3:7e:11:6b:70:
da:22:8d:a7:39:12:c8:a1:cf:1b:b2:b8:92:6c:64:
98:2f:10:0e:06:b7:8f:95:80:64:c1:a9:b2:9f:6e:
03:4a:cb:f0:48:21:e9:cc:59:18:e3:a9:2e:4f:0f:
2d:98:47:39:27:25:e7:e6:ae:57:c0:d2:97:1c:8c:
30:26:b9:f2:17:18:9c:d8:ed:89:78:a7:42:93:c7:
0d:c7:59:b9:55:2d:36:33:75:60:cb:b2:11:3b:bb:
e1:96:9e:15:8c:a2:d7:eb:95:15:8a:06:59:c7:42:
2b:36:b1:d6:f7:6a:c7:99:45:fe:02:f4:54:2a:e2:
d3:50:da:6f:1f:03:af:0f:b5:03:5e:88:f2:7d:21:
78:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C6:E7:CB:AE:E1:C2:B0:6D:6B:C8:D8:DC:85:56:EE:8A:AF:42:5D
X509v3 Authority Key Identifier:
keyid:B4:78:41:02:24:90:44:94:E9:C0:F7:D3:56:50:A2:60:E5:FB:61:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tHhBAiSQRJTpwPfTVlCiYOX7YZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5cfbf3-e782-4013-8eee-de7d3bbfee88/1/tHhBAiSQRJTpwPfTVlCiYOX7YZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:06:0b:0c:b6:ac:d5:4e:75:f2:64:34:34:96:06:f0:60:06:
0b:43:5d:50:ee:83:16:30:18:90:d3:f8:c5:f1:50:27:23:4e:
e3:f2:c0:ee:e9:01:b8:1a:5e:f8:37:7b:79:a0:b5:b9:d5:f6:
be:5b:50:a6:63:80:6b:31:8b:15:3f:40:de:f3:e1:8e:8b:49:
e5:98:9a:d9:c8:0d:08:04:a5:2e:de:e3:64:1f:3e:48:7f:d2:
4b:14:c7:a4:02:27:ea:70:35:5c:60:17:13:e6:7d:9f:47:e2:
03:82:8a:67:0c:a2:2b:ba:09:9a:2f:0c:f9:f8:2a:02:89:7d:
21:47:c2:9c:15:6a:18:5a:ee:fe:45:bd:53:3e:37:b2:80:d8:
f1:7a:46:85:19:b2:36:45:0c:02:22:63:f9:53:ed:36:12:44:
b6:c7:2e:63:8f:66:c6:10:31:65:b8:a1:9f:50:ba:c5:a0:53:
96:e2:4d:03:79:20:ec:8f:a5:03:97:76:f4:96:6c:de:9f:21:
c7:2a:58:eb:ba:bb:fc:42:5c:28:98:65:c4:c5:45:32:6a:6c:
f7:c9:0d:71:7c:bd:37:f9:b0:61:8f:44:f4:d3:62:b7:e3:c0:
1a:ab:8c:13:3d:73:48:c6:83:b3:18:f7:2c:db:a5:52:dc:eb:
5d:3f:9b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:48 2025 by rpki-client