Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
File: tjC3O1HLxTgN1K2z1ar_TXozTF4.mft (raw, json)
Hash identifier: wyW0LeUv3ricPUoYL28FSN9X+GN68bKP9Z19zTk7hUs=
Subject key identifier: 87:68:E4:7F:F8:2C:C7:99:D2:0F:DE:AC:7F:6B:19:D5:56:9E:ED:EF
Authority key identifier: B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
Certificate issuer: /CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Certificate serial: 0195E12248EACB1D8F545B9631762ABEE06D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
Manifest number: 14CF
Signing time: Sat 29 Mar 2025 09:01:15 +0000
Manifest this update: Sat 29 Mar 2025 09:01:15 +0000
Manifest next update: Sun 30 Mar 2025 09:01:15 +0000
Files and hashes: 1: 6OxWOof5RPwR-dHEi_VKB34xPSQ.roa (hash: 4Bi3uRHuPwAszP4ZsAGHh2LAK/LAgGmZN5E2aAvbKGE=)
2: tjC3O1HLxTgN1K2z1ar_TXozTF4.crl (hash: i6tPFWOb44B6jQKr7OFSXdet8uKpFO9eqGZwN1MzcfY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:22:48:ea:cb:1d:8f:54:5b:96:31:76:2a:be:e0:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b630b73b51cbc5380dd4adb3d5aaff4d7a334c5e
Validity
Not Before: Mar 29 09:01:15 2025 GMT
Not After : Mar 30 09:01:15 2025 GMT
Subject: CN=8768e47ff82cc799d20fdeac7f6b19d5569eedef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:99:42:53:8a:31:38:94:df:3d:4c:ee:17:
f9:1d:25:18:17:80:ad:aa:c7:01:0b:a6:44:e0:19:
67:fa:6c:8e:63:6c:06:e5:44:f5:9b:69:d8:d1:d8:
72:87:51:36:15:fd:b1:ab:98:ea:67:52:b7:5b:01:
20:e7:2d:eb:06:8d:df:db:04:c4:5c:01:a2:a6:fe:
b7:4a:5b:5d:bd:8a:7f:04:0f:7b:9b:b3:cb:49:da:
8d:fb:55:ff:d0:19:2b:89:5b:a4:dc:89:ae:bd:19:
ff:5e:ee:36:9e:1f:54:2e:e8:fc:90:3a:61:9f:e6:
0e:15:5f:ff:eb:f5:b8:c8:17:a5:a9:a1:fc:37:75:
ad:30:41:f4:80:1c:5a:97:48:81:23:ca:9f:1d:8c:
43:c5:30:fd:ba:67:fa:1d:fd:d8:37:8b:1b:81:ca:
ba:13:da:5c:84:c0:c5:49:38:d6:19:9c:8b:f8:3e:
f3:1a:dc:3b:d5:e4:92:47:d6:73:1b:e1:02:2d:fd:
a8:87:96:07:b6:34:79:f1:d1:21:44:09:82:94:ed:
32:46:8a:4b:c7:e5:0d:9c:47:4f:d9:96:1a:9f:04:
b3:44:f2:54:46:51:d7:ad:70:2b:f0:2b:17:5f:47:
93:3b:d3:d1:b2:4d:5d:6e:cb:b6:69:7a:01:4e:97:
23:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:68:E4:7F:F8:2C:C7:99:D2:0F:DE:AC:7F:6B:19:D5:56:9E:ED:EF
X509v3 Authority Key Identifier:
keyid:B6:30:B7:3B:51:CB:C5:38:0D:D4:AD:B3:D5:AA:FF:4D:7A:33:4C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tjC3O1HLxTgN1K2z1ar_TXozTF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/4748c7-cd9e-401e-a8a4-0d48e6895f12/1/tjC3O1HLxTgN1K2z1ar_TXozTF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:c1:a6:69:29:3b:8b:3b:e1:d7:7d:c6:88:54:cf:07:64:d3:
4b:8b:94:dc:06:79:fd:2c:d0:f4:30:50:22:53:f1:3f:77:a6:
54:ce:d5:b5:df:05:2c:99:e9:8c:76:d7:f6:1c:59:a1:30:c1:
d1:3c:dd:8a:cb:d2:2c:43:0b:78:7f:e1:f7:94:45:d1:44:fd:
f7:22:4d:34:ec:4f:0b:05:9b:e7:03:ce:d2:d7:40:41:1d:8e:
30:b3:1e:b7:00:e8:d4:7b:24:31:7b:cb:59:a1:d2:61:22:f8:
09:77:79:ac:0d:97:66:03:1c:d3:d1:1f:5f:a6:0b:8b:b9:eb:
5d:e2:b8:2c:77:64:69:c8:9c:7c:20:33:bb:1a:dc:0b:3a:96:
16:5b:58:f3:48:de:19:7f:c7:31:bd:2b:31:42:e7:31:a5:1e:
a5:75:aa:76:65:10:06:03:bc:43:c5:e6:c0:4b:93:ba:b2:a6:
eb:f2:8a:09:94:aa:33:5f:f9:d0:cf:4f:dd:8f:95:f8:be:86:
86:35:40:97:eb:39:6d:0e:e9:5a:d0:01:13:6b:06:69:5d:8c:
f3:cf:ba:e2:6c:e2:22:bb:da:d8:ac:02:fa:09:89:98:8b:ac:
dc:f6:23:f0:52:32:22:3c:a1:b8:3d:3b:2f:11:6b:aa:d5:bc:
77:20:3d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 16:19:32 2025 by rpki-client