Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
File: tYe8Eust4poQJrj1a-jUafL1jPM.mft (raw, json)
Hash identifier: NogW/cIb37rrmWRiJmf6qhUIqIumm1T7kLk3APjSm8g=
Subject key identifier: 27:77:A3:C3:CD:BB:24:FA:95:65:37:94:6B:62:23:38:E5:42:AF:AA
Authority key identifier: B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
Certificate issuer: /CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Certificate serial: 0194BD4EB10DA9B73BCF0DFCD639729E32B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: SRbcYTDvBK2K42GBZURfc-9owLk.roa (hash: ou7G18aw8/QVFexo/f3lobAxj/5Hzi02IWmge/V7dxQ=)
2: tYe8Eust4poQJrj1a-jUafL1jPM.crl (hash: gyIzeR4VI63ZCljnGSM6l5Qweo50VKSao5JV6mqNMxc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b1:0d:a9:b7:3b:cf:0d:fc:d6:39:72:9e:32:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b587bc12eb2de29a1026b8f56be8d469f2f58cf3
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=2777a3c3cdbb24fa956537946b622338e542afaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ab:db:cf:9d:05:7f:ae:05:c8:e1:b8:49:d1:
b7:39:aa:d6:df:4c:a2:9c:a4:82:5e:90:67:c5:f1:
e9:5f:36:2b:2d:13:23:49:ed:fe:0a:6a:53:2e:e2:
1e:fe:91:93:dc:d3:96:46:13:d4:12:93:12:55:49:
57:a3:d7:25:78:85:1b:04:3a:ac:6f:98:2b:09:e8:
06:46:64:cf:c9:71:08:87:b3:45:f0:07:fc:74:a4:
57:4c:6f:98:f1:4a:0b:3f:3e:5f:0c:85:55:cd:00:
42:bb:85:d3:10:ff:6d:a3:0e:71:19:e6:49:69:ca:
5f:fc:db:57:43:ea:88:b2:a2:6b:04:ad:7e:fb:03:
99:bc:41:e8:cb:d0:43:18:5a:c7:b7:6f:be:75:fe:
e5:d2:e2:09:06:c9:1c:49:f2:1a:9b:29:d3:87:01:
48:97:32:26:48:ec:a6:1a:08:dd:4c:e7:be:33:c1:
02:e4:69:a6:ef:d1:2c:3e:47:e2:a6:8b:7e:05:b2:
2d:a6:24:40:6d:86:94:c0:8a:90:43:5c:80:ae:f6:
39:74:41:03:11:5a:b5:4a:bd:04:c2:ab:8d:74:e3:
02:e7:a1:16:1d:e0:a8:02:0f:eb:a2:98:5c:1f:6f:
9d:63:ad:f9:91:5a:d3:51:50:48:d4:f6:e4:6f:29:
98:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:77:A3:C3:CD:BB:24:FA:95:65:37:94:6B:62:23:38:E5:42:AF:AA
X509v3 Authority Key Identifier:
keyid:B5:87:BC:12:EB:2D:E2:9A:10:26:B8:F5:6B:E8:D4:69:F2:F5:8C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYe8Eust4poQJrj1a-jUafL1jPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/4c3e19-a489-4e3a-a3a2-7e52e749c3ad/1/tYe8Eust4poQJrj1a-jUafL1jPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:7f:a5:30:d2:ee:1d:20:2c:5a:21:db:cc:2a:02:8d:4d:54:
81:4b:ce:de:8a:36:e6:2b:7c:57:8d:71:bc:17:75:d3:63:07:
b3:ea:0f:a7:bf:63:36:cb:4c:a3:83:9e:94:2e:b4:ae:23:e9:
81:6e:1b:f4:c7:0a:c9:96:63:0c:bb:01:ba:c1:39:ca:6c:3b:
2e:82:48:6f:bb:6e:13:cb:7f:13:4f:61:0d:f5:fa:ac:8b:dd:
ce:65:1f:7c:bf:40:85:4b:5f:61:9f:16:28:6a:3a:91:61:64:
48:18:94:24:8f:31:2d:3c:ec:7c:ce:f3:2d:e6:77:b0:4e:05:
ca:c6:ad:61:fe:1d:ec:64:94:1e:d0:67:16:b0:63:d8:e3:2a:
91:44:df:c4:ad:91:76:87:27:77:df:c4:29:54:44:87:5d:93:
e4:03:ca:43:4d:83:9e:4c:c3:f1:3a:0a:bd:cb:2b:ab:65:0f:
32:0c:02:0e:a6:cd:34:2c:1f:a8:1a:17:bc:6b:57:92:c5:66:
36:7e:53:2f:e9:f2:2d:c6:81:e3:79:d2:e3:51:04:f2:2d:38:
c5:cc:52:48:21:89:b4:98:e7:d8:a9:d3:a9:1d:08:0f:21:55:
11:fb:68:45:11:2b:77:d9:c5:63:b1:60:0d:e9:0e:b2:b2:8a:
f0:73:34:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 14:21:00 2025 by rpki-client