Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
File: t4UKnl5747TStkImX4JbhQwHI2Y.mft (raw, json)
Hash identifier: p6/4lffuMRcUAj+IEE5PcP4q9gCOLdtp0N7a5Ye47pU=
Subject key identifier: 12:1F:D5:53:B1:98:2C:ED:45:CB:6B:6A:D1:B5:52:D7:9B:FF:5B:0F
Authority key identifier: B7:85:0A:9E:5E:7B:E3:B4:D2:B6:42:26:5F:82:5B:85:0C:07:23:66
Certificate issuer: /CN=b7850a9e5e7be3b4d2b642265f825b850c072366
Certificate serial: 0197108C805D3F69735428A75020AC59D5B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t4UKnl5747TStkImX4JbhQwHI2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
Manifest number: 03F3
Signing time: Tue 27 May 2025 07:02:12 +0000
Manifest this update: Tue 27 May 2025 07:02:12 +0000
Manifest next update: Wed 28 May 2025 07:02:12 +0000
Files and hashes: 1: kwLC8Xkv-8Eto1alOjyDVq1k4xo.roa (hash: LC5M9URWylDvxfMKsYWhEBj1id9NYxvTcyivO+BgMe0=)
2: t4UKnl5747TStkImX4JbhQwHI2Y.crl (hash: LJl8+iIYVIxQAMWV3Qgs23XYSPLklunx2W+T6t1PurU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:10:8c:80:5d:3f:69:73:54:28:a7:50:20:ac:59:d5:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7850a9e5e7be3b4d2b642265f825b850c072366
Validity
Not Before: May 27 07:02:12 2025 GMT
Not After : May 28 07:02:12 2025 GMT
Subject: CN=121fd553b1982ced45cb6b6ad1b552d79bff5b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b0:dc:6a:1e:42:5a:79:2e:fb:c6:24:dc:73:
fc:24:20:5d:0f:a4:40:2d:68:47:cc:40:fd:b1:b6:
a8:9e:62:0d:ed:3e:e5:fb:19:ba:38:7e:4a:4c:0e:
40:bc:51:aa:99:fe:bc:94:ea:74:a0:51:fe:46:32:
a1:87:fc:49:d7:67:63:56:d3:53:f7:03:56:44:76:
99:06:ba:57:db:7d:c5:6f:5c:49:e9:e4:bd:96:78:
29:5b:a7:6e:df:5a:8a:16:a8:2b:00:d1:57:5f:1e:
42:51:28:a7:18:7f:f6:2d:71:a8:1f:5a:4e:a2:e1:
8b:5c:77:01:62:e7:d3:e4:38:11:57:f6:95:4b:87:
8c:71:81:d7:66:1e:c4:d5:b6:ae:35:49:70:5c:cc:
4e:b4:f9:32:1c:87:38:d9:74:53:1c:32:8a:bd:bf:
fd:e9:61:e1:6a:42:01:8c:f0:15:31:b2:8f:cc:e9:
21:56:e5:e9:b1:01:f6:a4:d8:f1:45:d5:64:5d:95:
7f:e8:b4:10:e7:50:e9:a6:f5:2e:ae:fc:c1:65:7a:
21:44:d1:37:67:ac:a4:5b:93:b3:79:82:52:09:ac:
fc:84:0e:87:a8:7b:13:49:64:2d:ac:0e:5b:7f:1d:
6e:1c:12:1d:22:73:2f:61:9e:5c:9b:7d:9b:96:ef:
df:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:1F:D5:53:B1:98:2C:ED:45:CB:6B:6A:D1:B5:52:D7:9B:FF:5B:0F
X509v3 Authority Key Identifier:
keyid:B7:85:0A:9E:5E:7B:E3:B4:D2:B6:42:26:5F:82:5B:85:0C:07:23:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t4UKnl5747TStkImX4JbhQwHI2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/07e9aa-a980-46a6-9e84-8a0102ae7a9f/1/t4UKnl5747TStkImX4JbhQwHI2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:8b:97:a0:21:cb:24:65:64:6b:11:b9:e7:9e:36:8b:e7:6f:
91:8a:46:cd:da:48:18:38:d9:a6:89:16:48:e7:74:93:04:2f:
16:3a:d9:85:33:0a:d4:74:28:f7:1b:e4:ec:71:18:d1:4a:01:
73:d6:0d:24:08:00:08:4d:fb:c1:40:de:1e:8c:b7:91:6e:fe:
5d:99:9a:44:cb:57:e6:57:d0:a2:b9:1e:84:07:d4:94:c8:4a:
cd:46:81:46:b4:45:02:0d:38:6c:18:67:70:71:14:c7:f6:89:
71:76:f0:00:19:4f:c4:d8:3a:15:17:ef:c8:a0:6c:c8:21:89:
ff:35:7a:5b:43:45:e1:53:95:64:b8:d2:99:a1:2a:e9:80:9d:
3b:e2:06:9f:ce:15:15:26:02:2f:7b:b9:c4:3a:a3:24:88:5c:
fa:dd:e8:e9:00:76:89:cf:7d:f3:e3:23:47:13:ab:90:68:24:
b6:d5:35:dd:90:a2:b9:e3:54:17:e3:80:ed:38:33:13:d9:e5:
1c:8e:58:cd:ff:f7:37:2f:e8:42:cf:3f:0e:f8:2f:85:54:48:
44:77:44:7e:d6:21:21:32:b3:1d:17:93:90:24:60:b4:d0:f3:
23:e2:5e:33:12:c7:06:c0:9d:7b:97:3b:32:e1:a8:ff:39:1d:
a8:54:48:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:32:13 2025 by rpki-client