Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
File: tokpm8SVhKZFlAwd2H3wr8iqoP0.mft (raw, json)
Hash identifier: psYQSQUBwLDmGvP9AdCFJjtsjGEELB5CNEHvO0Czuj0=
Subject key identifier: 99:41:7A:76:E6:87:A2:B0:A1:A8:45:56:6E:50:7A:F4:74:C3:86:C3
Authority key identifier: B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
Certificate issuer: /CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Certificate serial: 0194BCA9BE96C77240957C24DE54BEF2C1B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
Manifest number: 0FBE
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: 2xCnagkEcPCh3EPzn3LDmjvPSCg.roa (hash: +Ac7Lrh1tuyundor/xB13IJ+b+si7RG8jo65MCfiYFc=)
2: CsiChxgszI-cP-DQwNQC5Xi5Yyw.roa (hash: /kGCjZg1JTnd5ERCxetG3N439bKD+rkscwc58KkAtKY=)
3: pI05WF6SojY6FsMTKm0eiEf8hTk.roa (hash: 6fzkDWaA3qa9z8rWjVIvRr65tFOjqLdLgnGlie32sck=)
4: tokpm8SVhKZFlAwd2H3wr8iqoP0.crl (hash: KUttbR/rY+C5AUGvJBve1NwnyGi+cWC9NvpOIgS+u8k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:be:96:c7:72:40:95:7c:24:de:54:be:f2:c1:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b689299bc49584a645940c1dd87df0afc8aaa0fd
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=99417a76e687a2b0a1a845566e507af474c386c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9d:9f:94:a7:dd:9d:f9:c3:c6:ac:69:65:2b:
28:cd:62:13:b6:60:0b:be:70:a0:4c:86:0a:18:dc:
47:b7:35:8a:54:a3:a0:73:41:76:c8:d8:90:db:3c:
ef:87:f1:38:6e:22:5a:c9:36:04:50:56:0a:e2:fb:
93:21:e4:c0:2f:dc:7f:36:6b:cc:70:79:07:9b:16:
e1:a7:28:4e:53:1a:03:17:cd:4c:d0:51:f9:1f:51:
5a:88:74:54:26:d2:df:c5:94:01:80:5d:1a:e7:5d:
b9:af:9e:db:ff:76:f2:d9:da:40:0c:f8:7c:a2:33:
10:cd:1f:b5:bc:73:88:a4:2a:46:a1:24:d5:1c:a0:
52:33:b2:eb:9f:d3:c0:17:0e:c1:75:00:7b:80:d9:
82:30:c9:c7:ba:f5:fe:74:14:b7:7f:f0:dc:5a:d8:
5a:bb:93:48:93:2a:ff:a2:85:f5:96:88:f0:29:8f:
2d:b5:62:58:63:07:14:c2:89:f1:22:64:01:a8:4c:
58:0e:4a:8b:32:55:ce:f3:72:26:08:2c:84:74:33:
67:76:1e:04:4b:5e:5a:26:95:f7:e2:bb:98:0f:7b:
5f:4a:15:1c:23:c9:0a:8d:74:4d:bb:c8:7e:f3:7c:
6b:2b:de:78:70:f3:86:e0:25:60:82:bd:ac:0b:70:
67:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:41:7A:76:E6:87:A2:B0:A1:A8:45:56:6E:50:7A:F4:74:C3:86:C3
X509v3 Authority Key Identifier:
keyid:B6:89:29:9B:C4:95:84:A6:45:94:0C:1D:D8:7D:F0:AF:C8:AA:A0:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tokpm8SVhKZFlAwd2H3wr8iqoP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/7ca61a-ce3d-4bac-9110-c0f3bad99a40/1/tokpm8SVhKZFlAwd2H3wr8iqoP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:45:d9:ec:c2:6e:df:06:dc:52:95:1e:d3:c8:4a:6b:36:73:
af:17:b0:5f:82:79:e5:ee:54:ef:74:ab:36:cc:32:a1:d5:94:
2a:de:c4:bd:01:7c:76:1b:1e:56:d7:61:f8:8b:75:5e:86:ea:
3e:00:db:27:8e:cf:b7:d6:97:ad:39:d4:05:7c:91:72:bb:c2:
69:b8:38:43:06:4f:f8:65:9c:5f:dd:4b:11:bf:2b:af:06:f6:
a0:f5:3b:54:61:8b:61:12:59:c2:73:20:0e:e0:d7:c6:17:c7:
be:8d:70:67:c0:74:82:da:5e:db:58:81:68:00:29:07:38:3f:
89:64:f1:74:ad:d8:19:53:b4:63:35:e7:1f:b2:b2:c6:19:8c:
95:0f:87:b9:03:29:98:58:cb:8e:35:30:90:00:19:1d:19:e9:
db:a5:ce:75:93:d9:79:55:dc:bf:b5:7b:1f:86:36:4f:c8:b1:
df:7f:00:6a:ef:97:41:84:af:59:71:ae:69:ad:66:5d:6d:e4:
23:a9:77:86:56:bd:c7:6b:bd:5e:6f:f9:97:3e:42:47:54:10:
40:d9:f3:e5:da:16:a8:f9:57:f0:b1:73:76:81:7b:51:4d:80:
ed:a8:91:20:e6:a6:f0:3d:23:7e:44:aa:6e:7b:b6:12:34:a7:
f1:cc:c2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:04 2025 by rpki-client