Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.mft
File: bT7hpSpdZbkJHeWltGT7lwMtDps.mft (raw, json)
Hash identifier: kak/asNw6mK9UE4bIOjoL2BWw6Ydz8QZiNyN5+dKAMQ=
Subject key identifier: FD:41:34:5F:52:F7:FC:15:C7:E2:90:1C:87:50:3A:98:BD:76:45:32
Authority key identifier: 6D:3E:E1:A5:2A:5D:65:B9:09:1D:E5:A5:B4:64:FB:97:03:2D:0E:9B
Certificate issuer: /CN=6d3ee1a52a5d65b9091de5a5b464fb97032d0e9b
Certificate serial: 01936632BF6CED821F574217209432C78DB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bT7hpSpdZbkJHeWltGT7lwMtDps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.mft
Manifest number: 137B
Signing time: Tue 26 Nov 2024 02:00:22 +0000
Manifest this update: Tue 26 Nov 2024 02:00:22 +0000
Manifest next update: Wed 27 Nov 2024 02:00:22 +0000
Files and hashes: 1: GD-9n631uNSRgYJQm1IFJclkl_U.roa (hash: 7OlvcJ1tO8PBJobNmdxjO7ukNmc17Wt+B6PDydm2R90=)
2: bT7hpSpdZbkJHeWltGT7lwMtDps.crl (hash: S3KkR7DijgOIlETDZir/HBeFmer9W1NAJe/WEwaCehg=)
3: iwoQn86gyH4ivAQ7Ktn23ij8ehQ.roa (hash: lFROFOojtHXWE6yEC4lSCNmHuRCtl2lzg/pQlTGVL2Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:66:32:bf:6c:ed:82:1f:57:42:17:20:94:32:c7:8d:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3ee1a52a5d65b9091de5a5b464fb97032d0e9b
Validity
Not Before: Nov 26 02:00:22 2024 GMT
Not After : Nov 27 02:00:22 2024 GMT
Subject: CN=fd41345f52f7fc15c7e2901c87503a98bd764532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:15:91:78:e1:35:60:e4:1a:89:20:0f:78:
71:8f:ce:7a:18:2d:6e:ad:a5:aa:43:4d:44:30:2c:
3a:6c:1c:26:c1:e4:7d:e2:b7:c7:d6:ac:62:1a:89:
4a:c0:c9:19:c1:9e:ba:b7:56:2c:26:49:1e:e1:f1:
2b:d0:9a:d2:e2:48:2b:ad:3a:a4:e4:c9:e3:31:a5:
dc:af:1a:54:5d:06:33:19:4b:08:3a:5b:3c:4e:aa:
42:f9:fd:57:88:f2:4a:bb:ed:4c:99:5a:dc:f3:de:
48:03:e7:3c:3f:1a:89:76:c9:d0:84:4c:ba:7c:b1:
94:3d:c0:14:45:ee:3b:3e:67:80:ad:30:37:12:28:
d4:6d:e2:e2:7d:9b:e2:fe:6f:18:cd:a8:cd:24:c3:
99:bc:3b:69:e2:d9:01:53:2e:ee:7f:58:1a:97:87:
fb:d7:13:a6:2f:fe:0e:92:44:5d:0f:db:f8:18:1f:
c3:86:c2:ee:9b:84:c8:68:1a:28:f0:f5:b7:0d:ab:
d9:b1:87:e6:87:ff:b9:d6:c6:ac:1c:88:24:38:9c:
b2:5b:ac:58:d0:a2:e0:dc:f1:03:b9:fb:98:7b:d0:
0a:86:a2:26:74:10:76:c0:10:aa:c3:14:54:62:db:
70:79:cf:dc:b6:44:e2:bb:11:f4:db:bd:98:4b:4f:
ad:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:41:34:5F:52:F7:FC:15:C7:E2:90:1C:87:50:3A:98:BD:76:45:32
X509v3 Authority Key Identifier:
keyid:6D:3E:E1:A5:2A:5D:65:B9:09:1D:E5:A5:B4:64:FB:97:03:2D:0E:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bT7hpSpdZbkJHeWltGT7lwMtDps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f8:c0:d0:a0:ea:27:da:80:21:3a:56:6a:4b:8a:6b:5e:52:
9d:8f:c3:f3:4b:93:8e:0b:08:c3:1c:a0:c0:17:4f:19:c0:81:
f7:d3:69:59:a6:ff:a2:ef:c6:b8:0f:70:d5:54:76:75:52:62:
b6:18:c1:0f:7e:cf:77:be:99:99:45:30:a3:c7:25:a5:04:78:
64:af:77:f3:e3:88:16:9f:00:87:af:80:f0:d5:b1:9b:0e:2b:
15:85:04:b3:53:9b:27:44:0c:4c:bf:91:ac:38:91:40:5d:1f:
9a:64:f4:39:8e:2c:95:24:b7:0f:5d:30:e9:32:e7:87:1b:25:
ab:5a:97:5f:a7:98:4b:21:5d:af:51:c5:4c:44:b3:15:4d:4f:
c0:8e:79:a0:d7:2b:48:1c:b0:f6:30:cc:51:21:d0:39:26:e9:
48:20:1c:74:39:74:12:21:43:d7:e5:de:6f:aa:f6:94:8a:33:
07:a5:5c:bb:50:26:d3:8a:56:a2:6f:f6:f7:f9:f3:36:65:c3:
24:36:0c:c0:0c:03:89:d8:e4:f0:5a:a1:95:d0:d3:8e:a9:63:
94:41:9b:9d:cd:3a:f5:53:8c:37:5c:65:48:c1:c2:bf:ee:c4:
43:44:8f:83:eb:2c:d0:f1:a9:58:35:60:d7:ce:60:27:e8:09:
4d:20:61:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:41 2025 by rpki-client