Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
File: to-PMlFKGD6Xejx982Rz1WJgxKQ.mft (raw, json)
Hash identifier: q/4x6AJ6ye9eyzHpywWLMWT+yUEm2HVm6w3nk+eJRYg=
Subject key identifier: 69:DD:86:EB:EC:54:27:36:8F:E2:36:B5:64:F1:75:72:96:50:8E:CB
Authority key identifier: B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
Certificate issuer: /CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Certificate serial: 0194BD17F90907E9B6C3FA528213BA0FE9A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
Manifest number: 088C
Signing time: Fri 31 Jan 2025 16:00:52 +0000
Manifest this update: Fri 31 Jan 2025 16:00:52 +0000
Manifest next update: Sat 01 Feb 2025 16:00:52 +0000
Files and hashes: 1: tQOCxRT0aCE_1_qk1kC7RdCFOSc.roa (hash: n1WxYWjnXTsr8gKXroY5cgEaMb8X/+3xuLpCg/Qcbnk=)
2: to-PMlFKGD6Xejx982Rz1WJgxKQ.crl (hash: 8wPSvQ96WoJh8MzLZw2GCBDA6CWBBfVLd7GhDitUytY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f9:09:07:e9:b6:c3:fa:52:82:13:ba:0f:e9:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f8f32514a183e977a3c7df36473d56260c4a4
Validity
Not Before: Jan 31 16:00:52 2025 GMT
Not After : Feb 1 16:00:52 2025 GMT
Subject: CN=69dd86ebec5427368fe236b564f1757296508ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b3:de:56:0b:76:24:09:c2:7b:51:bc:ef:3f:
df:17:9f:a3:cb:f9:61:56:bd:1e:49:98:4e:f3:54:
6f:12:54:73:60:44:b9:4c:aa:39:5e:73:e8:2d:d1:
85:0b:21:71:d3:fb:89:9c:88:ee:66:7d:83:8b:bf:
4e:5a:6d:f7:83:c3:eb:37:c9:a1:76:eb:18:bf:dc:
c0:43:60:95:71:da:77:d4:f2:4e:1e:34:e8:97:12:
e7:f7:37:e4:d5:ee:6b:c3:99:76:b8:9c:23:24:79:
d5:7e:b9:8b:9f:22:8a:06:da:f8:68:a1:8d:9a:c5:
c5:80:a7:f2:e5:cf:f7:e6:04:90:43:89:b4:33:ec:
2d:a0:cf:6d:73:e5:58:de:57:68:bb:87:b7:bb:74:
42:ef:f6:85:27:79:d2:53:b3:6a:04:5b:3f:05:b4:
b3:96:4f:e1:79:66:4a:84:10:eb:88:3b:3c:90:d1:
60:dd:c3:06:05:2e:96:8c:89:4b:30:b8:0c:c9:db:
ac:eb:63:5d:e0:97:28:4e:6e:14:fe:c7:70:51:62:
7d:fd:b9:58:5e:cc:bd:de:0c:8b:a9:d1:3e:e5:b9:
19:c3:8a:11:f4:d5:6f:bd:36:f0:2c:73:c6:bb:16:
c2:cb:46:76:47:fe:d4:6c:64:c8:74:4c:b3:0e:e2:
57:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DD:86:EB:EC:54:27:36:8F:E2:36:B5:64:F1:75:72:96:50:8E:CB
X509v3 Authority Key Identifier:
keyid:B6:8F:8F:32:51:4A:18:3E:97:7A:3C:7D:F3:64:73:D5:62:60:C4:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-PMlFKGD6Xejx982Rz1WJgxKQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3887e4-b598-45e3-8d85-2210ed9d0861/1/to-PMlFKGD6Xejx982Rz1WJgxKQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ae:08:9e:eb:b6:cd:71:85:6d:3b:91:16:91:03:1d:09:12:
a2:e0:0b:7c:9c:4b:2f:98:d8:58:36:e8:0e:df:1e:89:dd:f4:
df:1b:c0:1e:0c:3f:e9:65:7c:11:c0:24:5e:a5:ba:2f:d6:2d:
27:ee:38:ee:7c:60:ae:72:3a:25:ac:e5:e6:9e:f4:a4:05:1c:
94:e9:8f:a8:ca:e2:3c:e1:48:c9:99:fd:87:43:6e:58:1e:72:
41:23:a4:6c:01:7e:2d:69:3a:e7:96:78:3c:f8:2f:38:43:3f:
89:4b:42:3c:1a:73:5e:88:be:81:12:e0:dc:7d:30:00:8a:28:
30:e8:4c:3d:52:57:90:c5:fe:06:74:80:7d:4b:4e:81:82:d6:
e9:ee:36:eb:54:35:a7:64:c3:62:00:05:be:f9:99:f1:2d:f3:
61:ba:b5:60:a7:ab:1d:0c:07:93:24:6d:72:5f:8f:d0:de:48:
b8:63:e6:89:5f:40:9f:d4:37:ce:69:f5:d1:26:77:e7:73:61:
20:96:13:7f:8a:df:b8:76:2a:2b:f1:70:c3:9d:8b:f0:71:b9:
47:b0:2e:4c:8c:8f:6d:23:81:36:2a:9f:84:ff:7c:ec:af:23:
66:e5:bf:d6:e9:85:c1:a9:95:b6:3b:99:aa:2d:c0:ab:87:14:
87:40:78:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:15 2025 by rpki-client