Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
File: _tf4F9fm3tVu3txESIzUHAUqDcU.mft (raw, json)
Hash identifier: ewWFl+5WW4zrr6h/Ivp3WznlMXkd7lzhcvFIvK3eP64=
Subject key identifier: 62:D6:14:97:53:AE:75:DE:5A:9B:9A:44:12:60:B6:C4:27:6E:29:10
Authority key identifier: FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
Certificate issuer: /CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Certificate serial: 0194BBCE8D40DE41F86DAFEE28328B1F57D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
Manifest number: 13BA
Signing time: Fri 31 Jan 2025 10:01:03 +0000
Manifest this update: Fri 31 Jan 2025 10:01:03 +0000
Manifest next update: Sat 01 Feb 2025 10:01:03 +0000
Files and hashes: 1: _tf4F9fm3tVu3txESIzUHAUqDcU.crl (hash: h80HmYkCSk/YWnNBMcGrj3aoDuJvlawI3LaSmTS83xM=)
2: jlmeoUxgI0KhFHV99BItMxAYMbc.roa (hash: NI9SzLu0aApCsGkR0hpBvVimZxaK1yHkWwQafkG2nq8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:8d:40:de:41:f8:6d:af:ee:28:32:8b:1f:57:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed7f817d7e6ded56ededc44488cd41c052a0dc5
Validity
Not Before: Jan 31 10:01:03 2025 GMT
Not After : Feb 1 10:01:03 2025 GMT
Subject: CN=62d6149753ae75de5a9b9a441260b6c4276e2910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:80:f9:fd:ab:9d:98:fa:db:09:cd:ab:45:30:
88:54:e3:66:e8:f8:b7:ff:39:e8:14:cd:cc:02:96:
02:85:1d:cd:8c:e8:47:e5:f8:63:dc:bf:6d:f3:f8:
f4:52:5b:9c:88:cc:26:93:ac:f7:81:31:43:09:17:
fe:84:05:89:1b:92:c0:2e:74:7a:19:a1:2f:92:3a:
ba:91:0d:2f:56:06:16:f4:f6:26:4d:9e:8b:8a:17:
2e:26:f3:66:27:af:5e:06:80:ff:b3:24:a1:75:c9:
5c:4d:f3:98:1a:de:da:69:e4:25:d4:7c:9e:bb:df:
dc:d5:13:4f:2e:a7:ee:c0:90:ea:ef:ed:24:9c:28:
a7:e9:b5:bd:09:c9:75:54:26:44:b9:03:44:58:59:
6c:12:3f:1c:b1:1d:20:3d:38:27:11:7c:b4:aa:39:
57:8e:92:ef:95:a3:60:3e:8f:b5:a7:50:3d:e5:21:
a5:9b:ef:5a:fa:50:e9:ac:46:a8:d2:79:f3:78:63:
3b:34:a2:3a:91:40:be:05:53:d5:65:57:66:33:01:
c0:b3:45:92:7c:6e:a1:a3:27:ea:bc:7e:79:70:39:
84:ca:9f:0e:30:88:05:4d:a4:4d:8b:3d:f9:dd:c4:
9e:e7:76:ec:aa:8c:53:0a:80:32:2e:12:68:2c:78:
c6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:D6:14:97:53:AE:75:DE:5A:9B:9A:44:12:60:B6:C4:27:6E:29:10
X509v3 Authority Key Identifier:
keyid:FE:D7:F8:17:D7:E6:DE:D5:6E:DE:DC:44:48:8C:D4:1C:05:2A:0D:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tf4F9fm3tVu3txESIzUHAUqDcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/4f0551-6922-45bf-97d3-7cf9a5fb6a9c/1/_tf4F9fm3tVu3txESIzUHAUqDcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a8:f6:90:b7:b5:93:7b:0e:aa:85:7c:56:c0:6b:c9:45:be:
78:89:89:8f:84:ec:bc:99:32:63:ea:82:4a:25:1c:09:0d:3d:
58:dd:ef:a8:d6:04:f9:47:9b:b2:28:bd:d6:83:65:8c:51:4a:
7f:7c:d2:df:db:83:36:45:f8:4e:23:d0:22:4a:23:e0:04:13:
ee:81:a8:e3:f2:b0:b8:87:02:2a:c4:cf:0a:4a:27:ee:0c:6a:
8a:a8:1c:17:ca:9e:cc:de:9e:b5:0d:69:c1:b2:06:1c:cf:93:
24:40:53:52:e3:54:24:31:38:79:5c:e8:ae:1f:86:8b:a5:d8:
0f:0b:a9:be:3c:f7:a7:63:89:e2:88:74:16:99:0e:46:a4:81:
ef:64:12:60:a8:ac:57:93:66:a8:61:e5:93:6f:af:83:3f:1d:
3b:b6:44:d4:61:be:16:06:c7:6a:16:69:a5:c8:53:ea:2f:b4:
1a:a7:38:a0:1c:f6:2b:fb:24:17:10:bc:83:77:cc:25:ef:47:
f3:23:b4:0f:ec:97:f8:d9:00:d6:69:2e:90:8a:9c:c0:5e:0d:
bf:e6:d9:74:2d:26:34:71:2d:86:39:e8:5e:da:a0:1e:7e:3a:
f5:b8:63:84:bb:b9:b8:71:c4:74:8b:3e:d0:39:44:eb:e8:dc:
51:e4:e4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:28 2025 by rpki-client