Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
File: tBuxzdW4a-d4BoidLhsgKswnsiU.mft (raw, json)
Hash identifier: wYtx961RYT1BAyWbCCPFmYAB5Fuv12EPauEhhNjcUSk=
Subject key identifier: 0A:F4:D1:98:C0:4B:D0:04:F0:B4:C6:01:4E:12:DE:FB:79:83:81:8E
Authority key identifier: B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
Certificate issuer: /CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Certificate serial: 0195E1906057967E6CB5E36668008034FCFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
Manifest number: 0190
Signing time: Sat 29 Mar 2025 11:01:30 +0000
Manifest this update: Sat 29 Mar 2025 11:01:30 +0000
Manifest next update: Sun 30 Mar 2025 11:01:30 +0000
Files and hashes: 1: 7E7gyymF8j2toEenFO04AQuZbVQ.roa (hash: HKny0hIiEORMsHrCnF3pLBTGlpUFzpGxVsMxMmuOnho=)
2: tBuxzdW4a-d4BoidLhsgKswnsiU.crl (hash: 3MmGUCfjejSJcpoItpWeLxyh1WTpZpdTlDPrTefQsOc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:60:57:96:7e:6c:b5:e3:66:68:00:80:34:fc:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b41bb1cdd5b86be77806889d2e1b202acc27b225
Validity
Not Before: Mar 29 11:01:30 2025 GMT
Not After : Mar 30 11:01:30 2025 GMT
Subject: CN=0af4d198c04bd004f0b4c6014e12defb7983818e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:54:11:b9:c9:ae:5e:84:59:9b:b5:ec:8a:d9:
f8:ab:d3:0c:fb:00:c6:c6:56:76:61:9d:dd:da:f5:
1f:76:e9:ae:2f:77:3a:ee:72:be:8e:4b:51:d4:8f:
cc:d5:c5:e3:ba:77:53:4b:54:1f:5c:8f:d9:82:51:
0e:46:f2:4f:49:fd:6f:9d:fe:29:7e:95:14:aa:03:
bb:cc:88:81:90:f4:1a:ad:fb:6c:3e:e5:fb:fa:8d:
d9:53:d6:73:c2:48:30:e1:be:cf:cc:e9:75:f8:de:
54:01:58:a1:c3:f8:2b:90:3d:92:24:3d:30:ec:65:
40:cb:b6:a4:29:8a:2e:c7:1b:d1:09:34:e2:00:3c:
4a:3a:b8:74:36:5a:cf:0e:03:9a:bb:b0:62:1d:41:
cd:2e:f9:1a:30:33:8a:49:98:ea:5f:42:e9:5f:41:
17:6d:a0:e7:63:49:42:d7:28:c1:d9:c0:f2:b6:ad:
18:63:0d:28:74:67:6a:86:b8:19:26:02:a0:23:64:
eb:6f:71:49:36:82:5a:d8:aa:5f:c2:65:02:24:0c:
84:1d:ea:49:03:52:9a:7b:07:a8:08:ba:43:dc:bb:
cb:69:99:fb:71:6b:7a:07:3b:ea:d4:b8:8b:44:e6:
46:45:da:32:57:10:f1:26:d0:12:25:98:e9:e0:d5:
9a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:F4:D1:98:C0:4B:D0:04:F0:B4:C6:01:4E:12:DE:FB:79:83:81:8E
X509v3 Authority Key Identifier:
keyid:B4:1B:B1:CD:D5:B8:6B:E7:78:06:88:9D:2E:1B:20:2A:CC:27:B2:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBuxzdW4a-d4BoidLhsgKswnsiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/18c8d5-089a-470e-906d-dc4e7988a28a/1/tBuxzdW4a-d4BoidLhsgKswnsiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:76:77:2a:2c:e5:50:90:b2:08:a0:f6:b5:13:84:24:76:64:
fd:cf:6e:32:73:bc:d8:c5:b4:07:71:a7:1b:c1:50:bf:e3:f0:
93:d1:fe:20:67:ae:f1:3b:ac:de:74:2e:39:18:48:2c:a4:12:
24:5f:02:0e:12:f0:33:ee:99:03:f1:c4:9d:14:ec:37:de:25:
d4:b4:89:05:4e:72:36:5a:5b:99:25:53:f1:86:cd:ed:b0:26:
98:35:68:fd:4c:f0:7c:46:64:b8:a1:0b:88:21:61:e7:98:9e:
1f:32:e7:c6:5f:5e:a0:bb:7e:63:5b:6c:be:61:97:76:6f:34:
54:5c:24:33:41:82:b8:45:f4:2d:88:9a:25:ac:2f:03:05:44:
d3:9c:70:95:31:bc:0e:bf:6a:82:14:f5:b8:44:3f:de:e9:0a:
1d:df:ae:3b:44:a7:e0:fb:82:b2:aa:64:44:0a:47:dd:04:47:
0c:76:78:d4:23:c7:98:07:ec:23:56:22:77:22:6a:20:69:b0:
d4:00:92:fa:be:4e:5b:b2:8e:9c:4e:03:78:51:51:56:c8:5d:
4d:f5:73:46:0d:c2:bf:64:3d:cc:77:9c:49:f9:f2:07:8d:9e:
a6:38:e0:2d:b6:6d:12:8f:88:27:ab:74:0a:22:bb:12:70:6f:
83:6b:02:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:02:09 2025 by rpki-client