Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
File: tlkY8l1WAA-IHamN4yPZGgZOAIc.mft (raw, json)
Hash identifier: XVbgiQOYJU++Pj+R0rrrxRnd1Fn0SXfHneQkzJZST74=
Subject key identifier: D9:84:5E:2D:D8:A6:14:85:1E:2D:31:02:CF:33:71:B4:E6:22:D0:11
Authority key identifier: B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
Certificate issuer: /CN=b65918f25d56000f881da98de323d91a064e0087
Certificate serial: 0194BC72ED1696DC96D5A860413A10A62940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: 3H05rdAgVKWjnmulxpd_QVny7EM.roa (hash: XNOX3ZfUh5A8jT1DxzFm+Aa/cbH+g3ioLrsV3E7LshQ=)
2: tlkY8l1WAA-IHamN4yPZGgZOAIc.crl (hash: V/HBBc3QRh/mfoG2iXSswjpR/AjQZxOd6OZcX/e4EWw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ed:16:96:dc:96:d5:a8:60:41:3a:10:a6:29:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65918f25d56000f881da98de323d91a064e0087
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=d9845e2dd8a614851e2d3102cf3371b4e622d011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:31:5c:ea:d9:7e:c6:e5:bd:de:d5:96:9f:f7:
7f:bb:de:b6:d7:11:fc:b1:41:c5:b8:11:fc:e4:69:
d1:58:6d:cb:b1:f5:ca:3f:1c:c2:3e:cc:48:84:8b:
86:ed:75:91:40:9a:1a:1a:ea:cf:af:f3:da:9c:e8:
ea:a0:73:07:ab:04:4a:82:09:9d:23:4f:06:db:e9:
0d:d9:27:19:9a:c7:21:6d:95:89:15:c8:c4:5f:39:
ad:5c:5f:e2:ae:15:cf:b8:a2:a3:59:08:5b:1f:08:
26:fe:dc:ae:15:73:09:02:39:5d:81:79:f6:e7:f4:
bb:b3:b0:38:4e:d1:05:62:08:89:fc:03:f8:31:b6:
d0:70:f5:d8:fc:e1:d4:4d:fe:f1:bc:3a:63:67:64:
7f:5b:3d:41:38:52:9e:28:a6:d0:db:f8:2d:a5:d2:
61:46:8a:99:81:04:b6:fa:15:0c:69:18:13:db:37:
61:6a:1f:8c:cb:0f:37:c3:2a:d6:af:e0:1b:04:59:
cc:79:f6:75:c9:50:e6:e0:51:c0:ff:ae:be:58:c8:
2d:1b:82:4a:f9:db:66:b7:87:5e:a6:38:77:ec:37:
1e:ce:9c:ab:12:77:41:6f:55:68:04:da:bf:d1:a1:
84:3b:8d:db:2b:e2:aa:1e:22:1f:2e:8e:46:6e:2b:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:84:5E:2D:D8:A6:14:85:1E:2D:31:02:CF:33:71:B4:E6:22:D0:11
X509v3 Authority Key Identifier:
keyid:B6:59:18:F2:5D:56:00:0F:88:1D:A9:8D:E3:23:D9:1A:06:4E:00:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tlkY8l1WAA-IHamN4yPZGgZOAIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/5506de-0b1a-47ee-99d1-a520d434654a/1/tlkY8l1WAA-IHamN4yPZGgZOAIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:78:5f:8f:90:35:b9:a7:33:7b:73:4c:1e:1e:f5:ad:10:29:
c0:11:c2:41:4a:da:a7:4f:ce:43:e7:fe:c5:19:7a:b0:25:41:
ea:d4:97:99:e0:ce:ad:e7:a3:a4:11:9e:04:0f:c9:e3:a4:4f:
da:98:1a:bc:7e:36:54:de:79:f4:0f:4b:ac:e8:4c:54:b7:7a:
29:eb:72:82:b2:c0:87:89:2b:9c:01:e5:7e:06:80:f5:66:9d:
b8:f1:fc:32:36:d2:cc:30:5b:dc:08:53:99:2e:f5:35:d7:35:
24:17:98:9f:bc:6c:11:b6:86:77:11:a7:af:31:04:69:e7:ce:
aa:41:7b:d8:3d:c1:c2:10:fe:3d:58:6a:36:e1:90:6e:cd:1d:
04:f1:34:48:ae:19:72:61:9f:11:58:3d:75:47:7e:6f:cc:b4:
8c:f4:37:41:e6:80:64:c9:77:2d:76:1e:9f:c8:de:68:a2:ab:
8f:99:f5:fe:c2:f0:74:f7:25:1d:7a:f0:59:91:ef:df:1a:97:
a3:13:a0:9f:04:66:06:76:b7:09:04:1c:0f:9e:fc:ec:a7:47:
60:e2:31:60:03:d7:61:6c:76:3f:31:9f:55:1e:0e:ca:4f:77:
6c:e3:8e:cd:8b:5f:1c:0f:35:2c:2f:36:9e:e9:11:cb:9d:f5:
41:fe:c6:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:31 2025 by rpki-client