Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
File: tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft (raw, json)
Hash identifier: UTVIy/9ibxmHREpDrna8SQp82Mjj8RaEVWfKg+AP02I=
Subject key identifier: 75:96:8F:3D:B1:9E:CF:7F:59:33:13:98:4E:51:09:E5:DD:03:C2:B9
Authority key identifier: B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
Certificate issuer: /CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Certificate serial: 0194BC3BCDD1EAA3DC6D21597F14FEBB1B29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
Manifest number: 0A5B
Signing time: Fri 31 Jan 2025 12:00:23 +0000
Manifest this update: Fri 31 Jan 2025 12:00:23 +0000
Manifest next update: Sat 01 Feb 2025 12:00:23 +0000
Files and hashes: 1: 6mSAzptlMtavroiRBEbzErufO08.roa (hash: lJ5Bp/WretmXqwZLM24/DP1Oy5iyysz4o7F+olg5yZQ=)
2: tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl (hash: 5Tk0+mu7+Lpg7Js09SZ71XDnYdTmREyiZOt5PtrVFbg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:cd:d1:ea:a3:dc:6d:21:59:7f:14:fe:bb:1b:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ccdd883f6dd114ecf6f72716a84634f67ac977
Validity
Not Before: Jan 31 12:00:23 2025 GMT
Not After : Feb 1 12:00:23 2025 GMT
Subject: CN=75968f3db19ecf7f593313984e5109e5dd03c2b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:da:ab:bf:39:ae:e8:49:c5:a9:67:a1:06:02:
ad:6b:a5:be:bf:5a:28:71:7c:08:07:e0:37:41:36:
cd:c8:00:21:d6:14:21:6c:ac:f0:d0:65:9d:dd:62:
6c:c1:39:87:56:22:1c:af:a6:1e:5a:5b:f4:15:47:
90:ba:d1:48:95:57:d1:0b:9d:2f:a0:9a:95:0b:17:
0e:8f:7a:7b:ca:7d:0f:05:71:ab:7d:4e:f5:31:4f:
4b:f1:0a:ec:0e:0f:53:c1:de:26:67:a4:f1:33:2c:
a0:ae:13:97:75:94:99:84:c8:b3:a7:41:1c:6d:46:
b1:b1:51:9e:e7:8f:9c:9c:cb:3c:cb:11:a8:e3:b9:
c5:ba:c3:47:a1:5a:2f:6e:ed:d0:05:b0:dd:6c:72:
95:c6:86:c6:a5:d2:63:55:ec:e4:6a:6a:30:1d:c5:
2c:3d:4e:4c:02:63:24:41:ab:7a:ce:06:63:dc:86:
ff:28:3c:e8:53:5a:fc:f5:1a:37:93:e6:2d:60:04:
9c:2e:7f:8c:25:86:29:ca:ef:72:f3:cf:e4:5a:e4:
01:8a:b4:dc:8f:e2:50:6f:39:40:59:84:78:38:84:
57:7d:ec:41:f8:0e:dc:bc:f6:8f:e0:bc:83:7a:b4:
73:49:15:ef:1e:dd:00:78:75:28:d6:6a:a8:ee:4e:
bb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:96:8F:3D:B1:9E:CF:7F:59:33:13:98:4E:51:09:E5:DD:03:C2:B9
X509v3 Authority Key Identifier:
keyid:B5:CC:DD:88:3F:6D:D1:14:EC:F6:F7:27:16:A8:46:34:F6:7A:C9:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tczdiD9t0RTs9vcnFqhGNPZ6yXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ba784d-746e-49e7-a408-4abaf53a50af/1/tczdiD9t0RTs9vcnFqhGNPZ6yXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:39:11:69:3c:e1:e9:46:a8:39:cf:ed:a7:5e:3b:98:e1:b4:
6e:e7:3d:9d:b4:dc:a4:05:e2:14:f5:63:ed:f8:62:1b:1d:ea:
09:60:3c:e2:e8:a0:29:c3:2b:11:52:af:df:4b:32:58:3a:26:
1c:08:f9:56:db:dd:a4:ec:8e:8f:b7:5e:1b:68:7e:33:3c:ef:
e7:66:d0:60:18:ee:15:d0:64:04:b4:67:7a:2a:4a:9c:35:32:
1a:7c:b6:15:74:2b:ae:20:85:30:59:bc:ec:17:b8:4d:44:a3:
b7:55:7f:5a:7b:13:e2:dd:7a:c4:ae:b1:09:b3:7c:3a:cb:09:
38:a1:90:85:04:f7:79:db:9b:eb:00:9c:28:1a:be:da:f2:2f:
bf:09:fa:09:76:11:b1:cb:05:ab:3e:56:9e:68:e6:64:ae:9e:
82:1e:b8:69:74:a9:2c:5d:84:b5:b0:da:c9:07:f3:f8:41:31:
38:22:c9:4c:01:77:aa:3c:d1:47:97:e6:51:20:ce:c3:0f:5e:
59:48:e0:ac:bd:e8:d9:5e:4a:8a:21:03:cb:d9:12:2a:37:c6:
22:15:ec:08:39:6a:e3:dc:10:23:a2:73:56:74:5f:bd:67:52:
d0:54:8b:c9:cf:19:d1:74:a7:f0:21:44:51:c9:34:ff:00:02:
5e:3f:8c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:23 2025 by rpki-client