Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
File: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft (raw, json)
Hash identifier: mQ3XjlUN5XeNcTli5iIDjgBCoY4Sw0XlWs1ulBAN4uI=
Subject key identifier: CD:AB:6A:E2:A4:F8:AC:99:06:15:89:F9:27:EC:52:39:A1:CB:76:40
Authority key identifier: B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
Certificate issuer: /CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
Certificate serial: 0194BD8589CFEDDCC7C486D52F3FEEB2E332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
Manifest number: 0FD3
Signing time: Fri 31 Jan 2025 18:00:32 +0000
Manifest this update: Fri 31 Jan 2025 18:00:32 +0000
Manifest next update: Sat 01 Feb 2025 18:00:32 +0000
Files and hashes: 1: nqRmyRsi2-hKiZqffDikHhIZIA8.roa (hash: vx+mbFW9leAh9kJ2X2Cv3OUNnkvDKbo77etkxvxrmFM=)
2: tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl (hash: eTUK0ByOVogmEE50QEeRA6PRRjvinHRSULPCraMb8sI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:89:cf:ed:dc:c7:c4:86:d5:2f:3f:ee:b2:e3:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d8b27aaa55e51a345f6a4519e367955046c30a
Validity
Not Before: Jan 31 18:00:32 2025 GMT
Not After : Feb 1 18:00:32 2025 GMT
Subject: CN=cdab6ae2a4f8ac99061589f927ec5239a1cb7640
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:87:0a:0b:7b:84:f8:8d:f5:0f:5c:9a:5b:94:
9f:ae:87:78:1c:ca:ac:51:83:cc:15:1f:d3:2c:3e:
0f:5d:d8:73:48:a2:2f:60:de:db:be:24:0c:a2:e9:
8a:89:f4:2f:2a:5f:bb:04:01:b3:48:f4:7b:62:36:
7c:ea:32:1e:8a:6a:22:a8:f1:26:52:f4:3d:e1:40:
f2:4c:fa:d7:73:2e:b7:ee:44:6f:53:20:fd:ed:2f:
5a:08:75:70:ba:5f:43:34:bf:f0:f6:5e:da:44:87:
d0:44:65:0a:ae:c8:3c:1e:30:5c:96:40:0e:d6:c0:
69:f7:0d:bb:13:64:3f:19:87:c0:44:ef:3e:28:b7:
b3:fb:96:8c:d7:85:ff:32:d4:c6:2e:3e:46:17:83:
cd:a6:c8:08:78:08:4e:d5:c8:73:52:dd:b8:68:bb:
4b:80:f4:03:1a:d6:74:7c:8d:ea:55:55:04:01:2e:
d2:58:29:a0:30:3e:fa:40:d7:93:52:f2:4e:57:84:
a9:bc:13:98:cb:5a:96:84:c2:14:e0:ad:e9:86:54:
88:86:83:19:23:24:7f:8f:f1:e0:35:f0:b8:8d:b5:
ce:b4:1a:26:1f:ed:1f:22:64:3a:00:35:4f:ad:50:
e5:5e:8a:21:a2:b8:10:37:34:5f:a9:07:8f:74:7c:
7f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AB:6A:E2:A4:F8:AC:99:06:15:89:F9:27:EC:52:39:A1:CB:76:40
X509v3 Authority Key Identifier:
keyid:B4:D8:B2:7A:AA:55:E5:1A:34:5F:6A:45:19:E3:67:95:50:46:C3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d3c1d5-e923-4831-804c-c7586282fe13/1/tNiyeqpV5Ro0X2pFGeNnlVBGwwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:8c:39:2f:17:0c:2e:92:22:91:14:a0:60:b9:7e:f9:e2:d3:
b0:5f:fd:4f:3f:77:fc:44:63:30:56:fa:30:08:0f:2d:3c:ba:
34:d0:63:09:96:32:1a:c3:11:73:bd:66:2f:a8:9e:52:fe:42:
a0:c7:b4:7e:df:33:23:72:4f:e2:37:36:ce:44:c5:4e:66:5c:
4e:66:b6:9a:a7:a2:77:a4:3b:36:c6:7c:22:25:66:0d:3f:70:
c7:1e:f1:48:a8:73:c1:cc:9d:4a:54:20:8a:94:36:4c:83:26:
8b:bd:00:d3:3d:e8:ed:c8:93:0f:0c:34:b7:e1:65:52:bf:a6:
80:4c:ba:3f:8c:21:97:ee:38:16:37:84:79:53:b3:52:61:53:
83:1f:dc:e2:63:36:4d:80:ae:20:bb:ae:d3:f1:43:2b:32:a4:
af:a6:06:be:e7:dd:50:66:1c:d4:64:ac:eb:03:72:ea:bd:2a:
32:95:0b:74:e1:47:4d:99:84:53:f8:1f:a5:a7:61:78:86:a2:
5a:ba:b4:bd:70:4e:42:f8:43:03:0b:2e:ad:7a:78:56:a1:7f:
31:5f:59:ee:26:0c:64:b9:6b:d0:df:3a:52:8f:9c:f3:f0:ff:
de:75:a8:a0:79:3b:39:ff:92:46:38:75:d0:82:24:12:db:c4:
64:e8:13:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:25 2025 by rpki-client