Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
File: trJJosVixe29t1BY4mvXcBI-la4.mft (raw, json)
Hash identifier: XL/Cr4DcmMUtkmR4u8I/tdWO/T1dfuLKR4Mw8m+vkqk=
Subject key identifier: D3:B2:BC:55:EA:52:FC:F4:D6:A2:A7:EF:AB:AB:ED:1E:4F:47:31:8A
Authority key identifier: B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
Certificate issuer: /CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Certificate serial: 0194BD17D2F2D128ADB2D74912C3C592D7E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
Manifest number: 10BD
Signing time: Fri 31 Jan 2025 16:00:42 +0000
Manifest this update: Fri 31 Jan 2025 16:00:42 +0000
Manifest next update: Sat 01 Feb 2025 16:00:42 +0000
Files and hashes: 1: Tz7aM9m6dWZAHAxiGKhjTtjsp6I.roa (hash: 1/urxUwqVm4ILEtV4SR7woJSlB4+PTBY3yo3Lt2enUw=)
2: trJJosVixe29t1BY4mvXcBI-la4.crl (hash: 1AWT1Zum8FjBg65DX867xmYO12J4508eu6oUfN7zTH0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d2:f2:d1:28:ad:b2:d7:49:12:c3:c5:92:d7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6b249a2c562c5edbdb75058e26bd770123e95ae
Validity
Not Before: Jan 31 16:00:42 2025 GMT
Not After : Feb 1 16:00:42 2025 GMT
Subject: CN=d3b2bc55ea52fcf4d6a2a7efababed1e4f47318a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:10:24:b7:91:f7:33:ec:22:92:fb:a5:87:ee:
93:1d:84:60:fa:2c:43:d5:14:4b:45:d2:46:5a:1f:
44:dc:ff:04:66:b9:cc:bd:5c:73:bc:ae:61:ff:82:
54:81:ab:a1:ea:c4:69:1e:ba:8a:2c:68:fe:21:28:
0c:e3:fe:07:34:82:2b:59:61:13:a6:c2:1f:93:dc:
0c:c9:48:27:86:98:e6:29:e1:22:72:e4:93:1b:b6:
79:a4:fe:9d:a5:34:3c:29:a4:cc:43:ca:54:30:11:
ba:bf:a2:fe:99:80:b6:0d:0c:2e:fc:ef:a2:df:1d:
9a:0b:c6:2d:f3:68:63:95:d3:46:f5:19:f9:76:1f:
e6:a2:9b:7d:2f:0b:96:82:32:ae:ca:34:7f:07:fb:
f1:76:de:ee:9c:5a:21:b2:da:93:12:5e:62:90:2d:
9c:44:7c:4b:13:3a:b1:72:cc:d1:ce:e7:16:ac:f9:
e7:b3:50:7c:08:26:ea:97:0f:5f:b2:38:d9:ae:a9:
d3:9a:da:23:5e:76:83:17:32:79:fb:50:e0:ed:a6:
3d:a7:45:54:a2:b2:af:60:07:31:fc:17:40:c3:e1:
b1:a6:b5:3a:54:c0:0d:be:4d:9d:c0:b8:2f:1e:8c:
67:fc:37:39:39:ce:20:b4:75:20:1d:f8:a8:60:62:
f3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:B2:BC:55:EA:52:FC:F4:D6:A2:A7:EF:AB:AB:ED:1E:4F:47:31:8A
X509v3 Authority Key Identifier:
keyid:B6:B2:49:A2:C5:62:C5:ED:BD:B7:50:58:E2:6B:D7:70:12:3E:95:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/trJJosVixe29t1BY4mvXcBI-la4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/455b26-6aa1-435f-bd45-9ce31c273108/1/trJJosVixe29t1BY4mvXcBI-la4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:15:a5:11:30:85:f7:c6:5f:4a:49:83:4e:71:65:55:ee:df:
65:c7:7c:8a:a5:98:de:15:40:0c:c5:c5:0b:e7:cb:5e:e1:61:
75:50:13:4d:1d:84:63:ff:e4:cc:9e:fc:8d:2c:9e:2b:c4:2d:
e5:11:82:61:c5:af:7d:cf:9b:bb:76:fe:30:a7:2f:40:18:d1:
8a:c9:2f:3f:42:83:39:cb:8f:69:98:40:f0:91:62:f0:ea:19:
40:79:f1:20:0d:b4:3f:4a:5d:b2:26:c0:de:f8:3c:e7:e8:e9:
78:f1:96:e9:08:78:48:1e:f1:1a:11:4b:88:a0:89:81:0c:52:
68:22:cb:a4:73:85:2f:ee:90:e9:a9:e7:00:bd:40:b6:e2:2f:
dd:30:a3:dc:20:41:dd:07:4d:3f:6f:a2:33:40:eb:f2:dd:37:
1f:47:86:51:4a:a7:b3:ce:9f:0e:9b:ac:b0:54:ab:c0:a8:b0:
6d:b6:1d:1f:de:07:2e:15:e2:dc:e8:fe:db:f6:b4:26:12:31:
bb:43:31:5e:a3:82:59:e9:83:8b:6a:be:8d:67:23:e6:e9:72:
48:0c:4f:7a:53:f6:a8:7c:9f:c0:75:d9:ff:e7:19:63:5e:f2:
a4:af:03:75:a2:c3:a8:e7:c8:e5:50:7e:73:74:5d:c5:02:a3:
ac:1a:2d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:46 2025 by rpki-client