Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
File: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft (raw, json)
Hash identifier: PnIRXYMV1E2dZBW7ddR1BsbFVew08Bfp8ZkRP61LOS8=
Subject key identifier: 21:02:CC:83:B4:BA:75:B8:09:6E:C3:1E:2F:5A:41:3B:9F:84:5B:A8
Authority key identifier: B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
Certificate issuer: /CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Certificate serial: 0195E1902DD5A79F6610816AF0CD250AE95F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 11:01:17 +0000
Manifest this update: Sat 29 Mar 2025 11:01:17 +0000
Manifest next update: Sun 30 Mar 2025 11:01:17 +0000
Files and hashes: 1: mAE3_QFYxLK2bxPNIhFbVq5Pufo.roa (hash: 8Db1Fqvg0Iw4fJZLlY1WJu1zNG21SFNmOlpLtn7VYgI=)
2: tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl (hash: quqCULzDx9X6e+MFSM6yXzrLDBZFJ+vGfP3BhWtfh70=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:2d:d5:a7:9f:66:10:81:6a:f0:cd:25:0a:e9:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b435f526d7d0909e7f4a7df2c5cad72d2af6b2c3
Validity
Not Before: Mar 29 11:01:17 2025 GMT
Not After : Mar 30 11:01:17 2025 GMT
Subject: CN=2102cc83b4ba75b8096ec31e2f5a413b9f845ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b3:13:62:e0:2c:4e:1f:6d:9e:b7:55:78:fc:
29:64:d6:4d:7a:5d:88:ea:fb:a2:95:1f:d8:80:60:
b2:08:26:ce:16:88:16:6a:0a:f4:10:b8:a8:57:bb:
2c:a0:ad:24:4f:4e:38:47:c0:6d:8a:69:14:2c:95:
c4:47:80:ea:3a:6d:21:f4:67:f3:02:20:b8:23:bb:
4e:6f:b4:86:52:5e:47:2f:d8:59:d2:2b:d2:83:06:
e2:95:8e:31:26:a1:86:cc:e1:97:e2:35:9d:1d:37:
55:8f:ee:9c:17:e5:4f:68:1f:6d:3b:be:c5:45:c5:
2e:37:38:48:70:60:77:27:d3:45:5c:b4:aa:5d:b8:
6a:19:2c:47:52:f1:2b:ad:2a:ee:bc:6f:f0:33:ff:
45:66:6d:40:bf:da:b8:ce:2e:64:29:77:ae:b1:ff:
ed:83:cf:74:95:90:75:fb:e6:bd:e8:e3:d3:5b:87:
31:55:65:52:c5:00:ec:6a:47:26:88:0b:8b:b9:ba:
84:76:1b:64:5a:75:07:1f:d2:09:d4:c2:dc:a4:0a:
3e:be:ae:84:19:6f:56:ad:4b:bc:de:b9:55:fe:3d:
f0:68:18:6e:95:68:b1:a8:35:81:46:0b:e4:10:a6:
01:b9:89:c5:e7:b0:da:8d:13:aa:84:d8:fc:7b:d7:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:02:CC:83:B4:BA:75:B8:09:6E:C3:1E:2F:5A:41:3B:9F:84:5B:A8
X509v3 Authority Key Identifier:
keyid:B4:35:F5:26:D7:D0:90:9E:7F:4A:7D:F2:C5:CA:D7:2D:2A:F6:B2:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/36b3fa-c925-4b09-b8ea-32f59fa5b311/1/tDX1JtfQkJ5_Sn3yxcrXLSr2ssM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c0:26:13:e9:01:2f:a9:9c:e5:b8:e4:c2:ec:35:ae:fb:15:
62:fe:c3:7f:a5:de:b9:45:c3:c1:35:58:41:e7:5d:6f:99:c5:
5f:cb:04:2c:22:9f:08:ba:2e:7d:e0:eb:6d:b5:bc:32:ff:9f:
42:6c:5c:a5:54:61:76:6c:b1:cc:b8:6a:84:1b:0d:cf:7c:9a:
63:ba:b3:68:f4:6e:4d:06:3b:71:4c:26:b9:9a:44:b3:09:c5:
de:56:44:7e:65:a7:bf:18:b1:4b:3d:d8:c0:a1:e9:0d:71:4d:
68:d7:60:91:a9:40:d8:0e:00:71:f2:bf:d3:85:30:6c:30:6c:
2b:a4:8c:e3:5a:56:e7:6a:b1:35:4d:8e:0b:5c:94:95:43:74:
1c:46:a6:03:9f:a1:29:98:ae:a7:83:4a:02:81:cf:33:2e:1c:
5b:46:31:82:24:c1:b9:41:9b:c8:5d:17:3b:ea:e0:45:54:a8:
36:5a:1a:e6:58:a9:ff:c3:72:14:aa:76:bd:f4:3e:61:c2:38:
07:0f:2a:95:b7:ca:a4:14:c4:a6:1b:22:76:ba:ea:7d:0c:62:
e3:de:bd:39:08:3f:98:b5:00:32:f6:a5:6c:25:b0:ac:17:88:
f8:5b:75:2a:80:64:87:af:19:b4:a4:6c:f2:a3:d5:f4:60:aa:
70:21:8a:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:27:45 2025 by rpki-client