Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
File: totCki04fFePpXaSSH8qGQaFibo.mft (raw, json)
Hash identifier: sJp5xaDXAycYxetFUkEpRA6vlMt2+gAXxZO+jk58LDw=
Subject key identifier: 8E:36:38:DC:4E:C5:F0:C9:23:61:09:A7:08:28:21:74:E3:17:24:C4
Authority key identifier: B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
Certificate issuer: /CN=b68b42922d387c578fa57692487f2a19068589ba
Certificate serial: 0194BCAA3FD4E45958C2C25445E51C5DEF37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 14:01:01 +0000
Manifest this update: Fri 31 Jan 2025 14:01:01 +0000
Manifest next update: Sat 01 Feb 2025 14:01:01 +0000
Files and hashes: 1: J7ETwZ7K2fCgyV1XaX6Au_UtOpQ.roa (hash: dYvovPr77xLLc7d4uP9MdZUB44K3nNGqOKXsBkED9JM=)
2: totCki04fFePpXaSSH8qGQaFibo.crl (hash: r4Z1ICbP+xstitWFmZ/DmmngVRQ1fQDmg8TEDRY8RxU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:3f:d4:e4:59:58:c2:c2:54:45:e5:1c:5d:ef:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68b42922d387c578fa57692487f2a19068589ba
Validity
Not Before: Jan 31 14:01:01 2025 GMT
Not After : Feb 1 14:01:01 2025 GMT
Subject: CN=8e3638dc4ec5f0c9236109a708282174e31724c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:18:45:e2:02:55:70:b6:a1:a9:f9:13:75:70:
8c:b2:72:72:76:3d:82:d9:4b:91:5c:11:86:9f:53:
bb:4d:85:27:1b:2e:6f:da:ac:2d:f3:5b:e9:be:fa:
b8:ab:45:e7:3e:c0:3f:7a:f3:27:ca:51:6c:a9:2c:
84:79:94:5c:98:c0:40:43:64:3b:5a:d0:f5:7b:be:
6f:73:18:e1:41:86:72:b5:df:d1:49:2d:10:c2:55:
f5:f6:3e:17:8c:59:0d:2f:fc:55:a1:cb:c6:f0:ca:
e6:e0:ee:56:29:2e:09:5c:d9:3b:25:cc:11:9b:7b:
f8:11:67:77:ce:ed:ac:90:c2:36:1b:af:3d:85:52:
b2:13:fe:6a:d3:5b:d6:d4:19:84:dc:3a:9d:6a:02:
4f:7c:23:5e:d9:f7:c4:8e:2b:c9:dc:19:97:e4:e5:
4a:7d:d6:e7:c1:a1:84:aa:ad:e6:55:72:19:bc:73:
80:ac:7c:76:ce:ab:6c:47:c0:10:01:49:43:f5:00:
35:8c:08:b8:a3:75:a2:d5:9c:17:12:21:5d:7e:9d:
dd:f7:e6:3e:11:d1:54:95:c6:1e:31:0b:0b:b0:63:
88:24:05:74:68:4e:17:84:f3:c7:54:83:5b:25:d3:
58:6e:83:1a:21:0f:ec:54:4d:ca:6a:a2:ad:f4:e5:
9c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:36:38:DC:4E:C5:F0:C9:23:61:09:A7:08:28:21:74:E3:17:24:C4
X509v3 Authority Key Identifier:
keyid:B6:8B:42:92:2D:38:7C:57:8F:A5:76:92:48:7F:2A:19:06:85:89:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/totCki04fFePpXaSSH8qGQaFibo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/336198-3e7b-4615-bcea-4a545b116880/1/totCki04fFePpXaSSH8qGQaFibo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:83:a6:a3:ee:3e:64:00:17:3b:a0:81:bc:6d:89:0d:06:61:
9d:c2:d0:e2:dc:ac:96:33:1c:53:a5:7a:58:64:5b:51:7c:9f:
bc:85:47:43:d2:41:05:06:2c:30:65:e0:85:40:ee:2f:b7:4a:
0f:02:b3:51:30:de:65:e6:79:bd:e9:cc:1e:ee:5f:e6:3a:6d:
e3:c2:7d:05:4a:54:ed:54:06:b6:2d:a1:4e:25:68:dd:5d:91:
19:ba:91:62:f0:cf:92:16:ef:e2:23:35:13:48:83:fb:f6:7c:
db:52:a9:25:61:c0:0d:ec:00:f7:e1:e8:94:d6:a1:26:27:ad:
96:11:c9:75:aa:8b:9c:41:e4:96:25:61:cf:30:f2:2e:fa:33:
7e:0d:5b:69:8c:6a:ec:0b:f9:4a:ad:d9:bd:32:ac:fe:38:8a:
d4:f9:e7:07:0f:86:23:b1:02:fe:83:e5:2c:b7:5f:40:42:31:
4c:34:99:f4:9b:41:d9:61:cf:07:31:e2:29:66:39:2b:0b:54:
cb:89:86:17:22:1c:2e:a5:c9:18:f6:99:12:d4:f6:20:ef:ac:
98:99:6d:7c:14:d7:0e:a6:ea:4f:94:68:3c:27:c5:91:db:7f:
1f:82:21:30:6a:ae:c4:59:01:b1:81:5c:dc:38:97:76:14:3b:
1e:91:99:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:33 2025 by rpki-client