Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
File: tKkPaJZnhEKvruG6qqayot7KzTs.mft (raw, json)
Hash identifier: Iakat+9PmsPyBScC1jswXu/x7CJMh4aoJko4u3ip3f8=
Subject key identifier: F5:2A:81:E9:78:E2:75:A0:48:89:67:58:42:9F:38:27:6E:9B:CF:BD
Authority key identifier: B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
Certificate issuer: /CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Certificate serial: 0194BC04AAFFEC1D1930703AC884CC00288A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 11:00:09 +0000
Manifest this update: Fri 31 Jan 2025 11:00:09 +0000
Manifest next update: Sat 01 Feb 2025 11:00:09 +0000
Files and hashes: 1: 39ZjK9ko_rOoFQIzT57AAjvsCVs.roa (hash: BIzWpSHIVnRCyLi48qy1GipHxFT8YyuZOYnCzfTHwBQ=)
2: OazFtN4IiCarucNk5wRvdseM_QM.roa (hash: EMG8IwLgN/B9dcK6/rw77xxT/QPgwRqBDKE5biLAPVI=)
3: tKkPaJZnhEKvruG6qqayot7KzTs.crl (hash: 397mxrQ24n9xVJVFyIX7LdzsQdbbxyUbmYG5zTDzzHk=)
4: v1Ryzz_N409NzbmRAuen4MQjOWo.roa (hash: nCjeo/lqPblEWttxGqrN/iF+J58uOtYvtP5cDeaC0E8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:aa:ff:ec:1d:19:30:70:3a:c8:84:cc:00:28:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a90f6896678442afaee1baaaa6b2a2decacd3b
Validity
Not Before: Jan 31 11:00:09 2025 GMT
Not After : Feb 1 11:00:09 2025 GMT
Subject: CN=f52a81e978e275a048896758429f38276e9bcfbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6a:6d:b5:c5:2e:f1:c1:4e:60:43:f9:64:0e:
39:db:e1:be:ef:7a:25:20:c3:8f:89:c4:28:73:19:
09:ae:83:0a:99:6d:14:2c:ef:2f:7a:d0:70:d5:b7:
a3:10:9c:e1:b9:6d:9f:f9:74:ab:62:9b:0f:9b:79:
26:ce:28:a9:76:2c:44:82:88:8e:24:35:96:1d:70:
ed:e3:15:d1:bf:a8:70:3b:75:42:a1:b1:cb:c1:96:
b9:32:1c:c8:4a:7f:bb:04:b0:b8:02:f1:74:b2:b6:
1a:cb:c9:3f:84:4f:2d:d8:de:a4:a8:51:39:b0:40:
43:5a:a1:8c:78:76:7f:0a:e2:fe:95:5b:d1:a8:d1:
43:04:36:bb:29:68:75:16:da:d8:9b:54:90:c0:c1:
e7:65:91:51:b0:5e:ae:24:60:65:ba:38:fb:5e:72:
e9:0e:d3:6a:7e:93:a0:aa:ba:d9:90:84:13:10:fa:
0c:05:fe:37:9d:85:7a:bc:ed:37:f4:3f:91:0b:2b:
e4:3b:53:3d:59:38:10:f3:6a:4c:10:dd:73:fa:df:
fb:14:c2:a6:ed:c2:df:5a:07:48:7c:3a:7f:b6:7c:
0f:2f:26:0b:61:74:ed:a8:eb:8c:15:03:49:d2:71:
3e:43:b2:10:34:68:25:20:89:2a:1e:95:a1:fe:11:
c7:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:2A:81:E9:78:E2:75:A0:48:89:67:58:42:9F:38:27:6E:9B:CF:BD
X509v3 Authority Key Identifier:
keyid:B4:A9:0F:68:96:67:84:42:AF:AE:E1:BA:AA:A6:B2:A2:DE:CA:CD:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKkPaJZnhEKvruG6qqayot7KzTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/e61614-ebc5-4731-8560-9d1812999a35/1/tKkPaJZnhEKvruG6qqayot7KzTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1a:7f:42:28:65:00:d8:86:97:e5:5c:e2:fd:d9:1d:45:62:
6e:09:4c:89:2b:2e:ea:c6:24:96:4a:ba:fb:e4:2a:fb:8a:a9:
57:1a:7b:40:fd:8c:2c:f0:d9:e3:e6:28:5a:8d:70:63:12:5f:
d2:1b:4b:ca:68:a8:3a:02:c9:01:17:b4:b7:6c:5a:04:48:c3:
ca:14:46:d3:00:5f:af:c7:08:b9:93:b5:bc:ba:a4:48:95:7f:
6b:2f:d6:29:0a:07:a4:39:53:42:af:c1:1f:3f:6b:2c:d3:a7:
24:a0:f4:61:76:23:37:20:4d:db:b2:b2:e1:b8:9f:72:25:04:
43:d8:b6:39:21:31:d4:5a:e1:ef:5d:53:bb:e3:11:3d:61:35:
78:3c:20:6d:c6:05:98:97:70:c6:35:a9:db:9d:87:49:25:a7:
4e:c7:46:2b:78:e1:a1:3a:91:27:89:7f:f8:76:97:c2:7f:d5:
85:a9:b6:de:21:41:95:18:84:7a:44:35:34:7a:10:75:1d:c3:
68:32:1b:95:79:17:0e:45:04:fb:33:ce:64:4d:10:66:30:88:
ce:90:fe:c0:74:b3:d9:12:0c:e9:58:99:39:9b:49:26:a8:61:
a6:37:e3:68:74:65:1c:4d:8c:18:74:3d:e3:f2:85:78:11:5b:
8b:16:ee:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:12:09 2025 by rpki-client