Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
File: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft (raw, json)
Hash identifier: 2A5jaVMRmEfB6iqErEQ4Dj+COJxkaRQ7QS65iL42CnQ=
Subject key identifier: F8:E5:19:2C:5D:27:9E:5D:3E:82:32:F7:4D:DF:44:C5:C1:FF:13:D7
Authority key identifier: B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
Certificate issuer: /CN=b522787599f1798e245f993f8cb8182f99cfd104
Certificate serial: 0194BD85752693FA4FD537D662D07EA09EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
Manifest number: 0BA7
Signing time: Fri 31 Jan 2025 18:00:27 +0000
Manifest this update: Fri 31 Jan 2025 18:00:27 +0000
Manifest next update: Sat 01 Feb 2025 18:00:27 +0000
Files and hashes: 1: tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl (hash: qz+4d4O3gZYqa2678ryHIk6OnMpJhfXYt02NdrCsM/I=)
2: xzr06xbQWPKGyePi4W8ezv0xyXU.roa (hash: r6Ttugun2Irp6PGhhAikFJmsuU2fRdTtE284A/50Ue4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:75:26:93:fa:4f:d5:37:d6:62:d0:7e:a0:9e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b522787599f1798e245f993f8cb8182f99cfd104
Validity
Not Before: Jan 31 18:00:27 2025 GMT
Not After : Feb 1 18:00:27 2025 GMT
Subject: CN=f8e5192c5d279e5d3e8232f74ddf44c5c1ff13d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e3:2c:3e:b6:bf:27:94:00:24:1c:0b:7e:38:
e5:f7:2f:c6:d1:7a:a8:45:b8:2e:a7:30:88:f0:a8:
92:bf:c0:11:65:0e:bc:19:d4:fb:7a:11:92:cd:dc:
a7:f8:6b:8a:43:24:9c:c4:e7:67:31:84:1b:d0:3c:
35:fe:c6:c7:72:92:8a:ec:fe:f5:ff:aa:d8:5b:47:
6b:7b:ad:78:d6:5d:a0:d5:92:4a:59:61:fe:6d:ce:
a7:5a:29:00:df:7e:88:2f:59:8b:9b:ee:ec:08:84:
c2:3f:e3:1b:07:1e:ca:fe:66:fe:12:dc:65:50:96:
50:a7:d4:4c:5e:6f:20:92:ef:b3:eb:f3:32:4c:b8:
98:62:8c:83:4f:17:18:5a:37:38:46:75:dc:82:5a:
16:4d:f4:dd:84:62:e0:da:52:63:7b:32:03:df:e5:
fe:c5:5a:6c:24:54:83:a2:f4:bf:17:1d:64:ff:eb:
b1:d5:af:d6:a2:af:0d:3b:84:4f:6f:6e:50:9e:4e:
8b:e4:08:a9:5f:a4:15:70:dc:61:97:1c:3f:5f:dc:
4f:91:c6:43:4c:01:f1:eb:00:8f:57:9d:ff:b5:6f:
4c:13:91:a1:ec:1f:fc:e0:aa:57:1e:90:dd:00:9a:
b5:f0:30:d1:8b:d7:ba:0d:e0:da:50:0e:17:15:10:
0f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E5:19:2C:5D:27:9E:5D:3E:82:32:F7:4D:DF:44:C5:C1:FF:13:D7
X509v3 Authority Key Identifier:
keyid:B5:22:78:75:99:F1:79:8E:24:5F:99:3F:8C:B8:18:2F:99:CF:D1:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9a4cce-fd12-4707-be95-0a246ab05946/1/tSJ4dZnxeY4kX5k_jLgYL5nP0QQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:e6:e3:a1:95:55:35:10:2c:ff:ec:78:de:ca:9e:1d:f7:d8:
93:a0:18:dc:03:dd:19:01:a0:f7:16:21:ac:c5:5a:e7:de:79:
34:b0:3a:8a:d7:17:31:72:26:48:c8:71:65:0c:a0:12:d4:05:
0e:71:b9:11:b9:d7:c9:2d:ec:76:6b:94:14:c2:23:79:bd:ff:
ef:74:5b:fe:3b:a8:37:bb:8e:a0:20:9e:d2:ee:11:f2:f3:0b:
7b:98:c7:c8:30:d5:03:6b:de:3e:e0:3f:89:5a:be:f8:bc:da:
49:b0:95:ea:1a:56:f7:6f:35:b9:de:22:24:c6:1f:fa:8d:d7:
6b:9e:67:aa:3a:db:bc:b2:32:fb:39:b8:77:18:67:e0:3c:94:
15:33:68:ad:f7:75:34:6d:50:c1:f5:f7:af:f5:11:55:ba:67:
11:23:d4:b2:fd:bb:a8:8d:5e:48:22:e2:f2:cd:c5:1d:10:fd:
06:f2:c2:73:83:c4:22:7d:9a:f4:9d:20:e7:dc:69:91:63:41:
49:aa:26:45:d2:6e:2f:9f:22:c2:58:79:2d:95:9b:57:dd:ea:
bd:29:a5:50:74:81:07:94:ba:d8:c3:86:22:bc:42:bf:f9:28:
44:87:b5:e2:36:5e:b3:65:c4:5b:1a:16:19:c0:71:5e:c7:af:
21:c6:6c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:44 2025 by rpki-client