Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
File: Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft (raw, json)
Hash identifier: ehwghG0UR9q6OoqnzVuUymWRSHtLEcKusHMuxtcLcZ0=
Subject key identifier: 8A:70:BD:FD:63:35:5A:CF:11:01:26:1A:35:E0:14:9E:02:1F:91:50
Authority key identifier: 4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
Certificate issuer: /CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Certificate serial: 0194BC728493275DFFC88FB54C3943659863
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 13:00:09 +0000
Manifest this update: Fri 31 Jan 2025 13:00:09 +0000
Manifest next update: Sat 01 Feb 2025 13:00:09 +0000
Files and hashes: 1: Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl (hash: aSNwOR7Qtxjim0uIwgGm3bY/vz3yLpqgJgVK7ooDLkY=)
2: ZPx2mzUkeOD00cVnYPqjI9aytDo.roa (hash: 9BSbx2wnbDuYyWn09oP3MayodoEwoQbrU6xTUmUCOR8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:84:93:27:5d:ff:c8:8f:b5:4c:39:43:65:98:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eae6f524eed0f73c849b0643827b80e37c46c71
Validity
Not Before: Jan 31 13:00:09 2025 GMT
Not After : Feb 1 13:00:09 2025 GMT
Subject: CN=8a70bdfd63355acf1101261a35e0149e021f9150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0b:75:ec:43:c2:d5:39:ec:4e:3a:e1:aa:6d:
bb:91:ec:19:16:68:f9:e1:9e:2d:ed:a0:f9:83:84:
1b:58:31:9e:7b:f8:ff:74:63:19:7d:48:93:ff:19:
0d:d2:e9:88:c4:d8:ff:9c:e0:da:f8:06:4c:7c:22:
7c:8a:0d:2d:6b:4b:cc:7a:f7:20:90:ac:cf:12:19:
eb:5a:e2:49:a9:5d:ce:c3:ab:a7:17:01:78:98:c9:
0b:cb:12:41:0c:25:eb:db:a0:62:a5:3b:bc:f8:25:
d2:a5:4c:9b:8f:c1:03:98:2c:27:87:74:52:2c:7a:
4a:cc:64:1f:73:07:cd:e7:ab:8e:f1:e1:f2:d0:2b:
88:16:37:42:31:56:de:a0:c6:35:c8:a5:c4:ad:c5:
9c:77:c9:85:65:bd:fd:54:03:d4:50:b4:f4:a8:55:
47:d6:15:e7:84:74:28:68:87:8c:54:79:93:0b:b7:
be:87:30:41:e7:df:29:94:45:15:a2:00:8f:b6:c7:
23:e5:77:7a:da:86:6b:b7:9a:e7:44:81:ad:b6:ee:
8b:00:e5:c4:81:f3:08:79:5e:10:51:97:67:be:03:
0f:de:41:47:27:95:e6:17:f3:cc:51:91:88:eb:27:
da:65:ec:6c:12:39:07:ea:1d:5a:dc:73:47:83:1a:
59:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:70:BD:FD:63:35:5A:CF:11:01:26:1A:35:E0:14:9E:02:1F:91:50
X509v3 Authority Key Identifier:
keyid:4E:AE:6F:52:4E:ED:0F:73:C8:49:B0:64:38:27:B8:0E:37:C4:6C:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tq5vUk7tD3PISbBkOCe4DjfEbHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ed384e-9949-4cc0-8a37-3bb2cd80a2c9/1/Tq5vUk7tD3PISbBkOCe4DjfEbHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:69:3f:1c:05:e1:3f:ce:ad:c7:d2:d2:21:ef:7d:d8:a0:be:
87:54:cc:f4:a9:c0:4e:54:d0:dc:31:be:8e:07:e6:86:ae:be:
24:b3:61:b0:65:66:e5:5e:90:80:49:b9:26:f5:4f:a1:81:46:
f9:4e:71:48:93:10:9d:9b:4d:1d:91:81:e5:bd:c7:7e:57:99:
fd:01:8e:94:79:8d:49:16:c3:a0:59:d2:47:ec:0f:86:1d:58:
bd:3f:d3:6d:91:17:01:06:48:5d:11:f1:08:c2:17:29:99:91:
f5:a4:2c:7b:e1:f4:30:f3:02:d5:11:cf:e7:56:0e:d5:5e:fb:
b2:b6:6f:50:48:2d:78:a7:6a:ae:50:33:a1:08:f9:e5:80:8f:
d8:bf:7f:3c:41:12:f8:34:13:e2:3c:d5:de:75:6a:ce:30:0f:
0e:a5:8c:f9:c6:8d:78:14:21:59:72:07:0b:1e:eb:14:61:74:
cc:53:63:f3:27:56:ce:a7:93:97:5d:4a:66:5b:64:68:6d:49:
f5:95:fd:b7:4e:07:02:2e:ee:ef:db:c2:71:0c:9f:81:94:81:
a9:23:08:8e:48:b2:ca:06:bb:0d:50:0c:2b:ec:27:48:54:35:
a7:c1:38:37:40:97:b7:d7:e8:b1:5a:a8:f8:0d:5c:f5:5f:c6:
1c:16:da:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:52 2025 by rpki-client