Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/t1SZK6SIqHLInL30LKTfiV5gnFM.mft
File: t1SZK6SIqHLInL30LKTfiV5gnFM.mft (raw, json)
Hash identifier: 4+VtrY0K94DvQHNWS/H05LrTlSXwanmm6XC3IfHLnwg=
Subject key identifier: EA:96:0E:A1:BE:B8:22:1A:B5:EC:54:4C:BE:4E:33:60:43:3A:A4:C6
Authority key identifier: B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
Certificate issuer: /CN=b754992ba488a872c89cbdf42ca4df895e609c53
Certificate serial: 0194A9FE71CAA61AD52BC5CE107BF92EFF07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/t1SZK6SIqHLInL30LKTfiV5gnFM.mft
Manifest number: 0F16
Signing time: Mon 27 Jan 2025 23:00:12 +0000
Manifest this update: Mon 27 Jan 2025 23:00:12 +0000
Manifest next update: Tue 28 Jan 2025 23:00:12 +0000
Files and hashes: 1: 6WH-2thvqB-e2s9Fz_imyr6m69I.roa (hash: Nnq4pPKoMxr3q0BGYwBu9twzf/NwTHTZGOPMM7rzxSk=)
2: t1SZK6SIqHLInL30LKTfiV5gnFM.crl (hash: 85oDQ5LnRXh88x33WnRIX7u7DFzqywfZw42XXCfRNIQ=)
3: uvgO__JPUatiCykPjzRtFnrNm8Q.roa (hash: hkdTvQ7u2vT4Ed4Lh62TZebe7eF6MTAA8DYI6Q5jbVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a9:fe:71:ca:a6:1a:d5:2b:c5:ce:10:7b:f9:2e:ff:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754992ba488a872c89cbdf42ca4df895e609c53
Validity
Not Before: Jan 27 23:00:12 2025 GMT
Not After : Jan 28 23:00:12 2025 GMT
Subject: CN=ea960ea1beb8221ab5ec544cbe4e3360433aa4c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:88:9b:54:54:5d:b3:7f:9e:62:89:b0:af:
41:94:fe:5c:a3:3b:f0:22:ae:3b:a3:14:6a:e0:d2:
22:48:b8:5f:44:32:0c:3b:b2:b4:2e:11:32:22:b0:
6d:b4:83:c1:35:7f:02:f5:b6:31:8f:b0:f0:bf:53:
c7:db:17:b1:65:1d:1c:13:42:7f:64:64:91:73:4d:
1f:b9:5a:a1:5e:44:dd:a3:20:00:31:2d:d9:30:24:
d2:7e:81:45:cf:a5:a1:85:ed:1c:c4:c2:a0:d5:70:
de:3d:d6:57:df:2e:ad:5d:d7:9a:96:15:7d:85:6d:
bf:0b:71:12:ed:8c:b0:03:5a:c1:a0:8a:2f:52:2e:
95:52:42:34:8d:09:20:3c:b1:5a:91:67:e9:12:69:
69:57:3f:c6:d8:7e:29:c4:73:21:5a:d7:f7:67:81:
20:59:96:82:14:fd:4f:e6:f4:e1:5c:67:88:b7:5d:
af:4a:f5:27:6d:fc:13:35:99:a6:2b:ae:94:a8:cb:
fd:3a:df:bc:29:3b:7c:dc:a6:8b:b5:a6:1d:0b:53:
f9:f6:69:59:0e:2c:43:b9:4c:2d:58:98:b9:a7:fa:
d6:51:41:59:67:0e:6a:1a:b4:2d:b9:89:c0:bc:00:
8c:2e:aa:a9:52:51:74:56:cf:f4:fe:ea:4e:81:c6:
4a:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:96:0E:A1:BE:B8:22:1A:B5:EC:54:4C:BE:4E:33:60:43:3A:A4:C6
X509v3 Authority Key Identifier:
keyid:B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/t1SZK6SIqHLInL30LKTfiV5gnFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/t1SZK6SIqHLInL30LKTfiV5gnFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:a4:a9:c3:95:2c:bb:0d:4f:ee:5a:3d:d6:7f:d0:2f:fc:4d:
e5:d9:1b:e5:ee:0b:4e:de:ee:10:3d:ae:0b:cd:5b:90:59:99:
6f:66:2a:2f:dc:b2:7f:43:93:e9:a1:fb:b2:71:9d:c2:ee:58:
2b:7e:94:ea:d9:e6:0c:9a:ce:64:42:a8:78:df:bc:db:df:d5:
98:5e:89:38:90:45:f9:87:52:aa:2f:bb:25:ca:61:df:c9:c5:
fa:2b:df:0f:c4:e7:62:31:b9:3d:f8:ce:29:44:e4:b4:7e:43:
1c:d5:a2:6d:b7:f8:aa:da:46:6a:5b:38:f2:97:72:56:59:52:
f5:99:7c:ac:eb:54:ed:b2:b3:67:5e:9f:62:0e:01:76:68:d0:
84:15:61:2e:51:f5:2b:74:c5:ef:74:3d:20:10:dd:da:a2:54:
2d:80:97:84:e3:41:ff:ba:d9:6e:c8:4e:5e:8e:13:60:a0:6b:
99:f2:2e:db:7b:f0:e6:80:af:71:bf:a6:75:bf:97:3f:73:c0:
a4:71:ac:51:04:5c:0d:bc:65:e2:93:bd:9d:e8:17:21:b3:4e:
8c:66:a2:73:99:10:fd:cd:d7:e5:ca:db:a0:51:34:96:68:87:
2d:aa:19:d2:0b:2d:23:12:51:92:cc:b5:30:f9:1b:70:3b:55:
9e:9a:f2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:12:00 2025 by rpki-client