Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.mft
File: bT7hpSpdZbkJHeWltGT7lwMtDps.mft (raw, json)
Hash identifier: 4YKDjx+QjNzZXBVt6TJ2n5DnFR9A/OXLnMsUjUohgb8=
Subject key identifier: 02:C1:05:D7:E3:71:24:50:50:6A:FD:A3:80:EE:4E:4D:FF:C5:FE:F6
Authority key identifier: 6D:3E:E1:A5:2A:5D:65:B9:09:1D:E5:A5:B4:64:FB:97:03:2D:0E:9B
Certificate issuer: /CN=6d3ee1a52a5d65b9091de5a5b464fb97032d0e9b
Certificate serial: 019367B07D950025917519C39BAE317E7659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bT7hpSpdZbkJHeWltGT7lwMtDps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.mft
Manifest number: 137C
Signing time: Tue 26 Nov 2024 08:57:19 +0000
Manifest this update: Tue 26 Nov 2024 08:57:19 +0000
Manifest next update: Wed 27 Nov 2024 08:57:19 +0000
Files and hashes: 1: bT7hpSpdZbkJHeWltGT7lwMtDps.crl (hash: y036c9dJzrcHX+XudotNIeqrKhJoaZBefKM3+3m8J4Q=)
2: gVWKaaVVfiqLMFuvzVo4v8PiWfA.roa (hash: 6ojWFJz0k0N2l8hOpfT4BOa1JkMRwNlZkVLeeexpV58=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:67:b0:7d:95:00:25:91:75:19:c3:9b:ae:31:7e:76:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3ee1a52a5d65b9091de5a5b464fb97032d0e9b
Validity
Not Before: Nov 26 08:57:19 2024 GMT
Not After : Nov 27 08:57:19 2024 GMT
Subject: CN=02c105d7e3712450506afda380ee4e4dffc5fef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:81:a7:ca:b8:35:c6:25:b5:ee:b3:1f:6a:34:
7f:f4:15:06:05:83:d3:8c:a9:2c:12:d8:5e:31:3e:
47:f4:85:98:e9:7d:cd:2e:23:53:ca:e6:50:1c:ae:
ea:28:e9:bb:cb:ce:31:17:b3:1e:f5:c1:7a:cc:79:
a6:81:2e:b1:ce:19:80:83:b2:6b:62:8e:01:ac:d7:
4e:4c:29:ce:5a:2f:47:47:f0:23:63:e2:3d:77:fb:
42:d5:6d:57:95:05:8a:83:ff:63:4d:65:e3:ff:d9:
a9:41:b5:60:34:95:e0:46:79:ee:a4:ec:93:f9:c7:
91:93:f2:63:97:9c:dd:53:9b:65:1d:44:23:fd:b7:
a5:f0:fe:d1:32:bb:b1:b1:cf:56:b5:3d:21:37:4c:
0d:7f:7d:52:e9:60:db:8a:95:59:54:1c:b4:40:0c:
d6:dc:85:c0:b0:c2:8c:15:c5:c6:b1:82:4d:6a:9a:
7b:bf:7e:85:39:24:bc:47:59:4b:43:1e:0e:c3:a4:
e4:b7:d3:74:cb:2e:de:6b:df:fa:5a:5b:00:d4:5e:
32:e9:e4:49:3f:8f:74:7c:4d:09:5d:c2:1e:9f:5d:
e6:bc:72:f8:13:50:c9:ef:82:57:08:44:cf:66:29:
7c:b9:06:a3:7e:30:07:20:e3:9b:16:0f:71:79:3d:
de:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C1:05:D7:E3:71:24:50:50:6A:FD:A3:80:EE:4E:4D:FF:C5:FE:F6
X509v3 Authority Key Identifier:
keyid:6D:3E:E1:A5:2A:5D:65:B9:09:1D:E5:A5:B4:64:FB:97:03:2D:0E:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bT7hpSpdZbkJHeWltGT7lwMtDps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/12e7d5-3a0f-4bc6-9611-05435efd8bf6/1/bT7hpSpdZbkJHeWltGT7lwMtDps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:fd:34:75:29:0b:ab:3a:54:19:bd:62:5e:3e:e5:ba:de:e4:
fb:24:70:62:de:36:64:87:70:c4:f7:4b:91:85:20:90:7d:d3:
3f:73:74:7e:aa:93:89:bd:a1:fd:8e:4f:f2:66:7f:cc:59:5b:
b1:48:bd:98:73:78:b0:8d:55:8b:c6:2b:49:38:74:b5:b9:bf:
43:1d:26:e7:03:4d:cf:01:93:be:14:50:69:fb:7d:15:2d:82:
c6:ad:9b:d4:ee:64:d8:29:dc:de:54:05:63:18:3b:09:aa:cd:
ab:ee:70:b0:f7:59:7e:1e:04:7c:2b:70:65:c0:82:2d:87:52:
ac:c4:b6:f8:7e:92:6f:13:3f:47:ec:a1:37:b7:ea:8b:e7:a2:
6b:2f:76:f3:fb:ff:fa:23:f9:58:65:f0:b7:bd:21:09:75:b9:
c6:13:16:ea:84:c2:c3:16:31:f4:d0:63:ba:ea:40:78:d1:70:
bb:7f:75:ab:67:9d:a4:59:90:e5:19:19:7e:ef:1d:9e:40:7f:
d5:01:f8:1a:34:e9:33:87:84:1b:eb:c8:d3:57:4b:3a:36:77:
f5:6c:94:ce:f1:2c:16:87:7b:ce:3e:06:44:a1:a4:80:da:e6:
b3:21:d7:2b:ec:cf:e0:08:f7:ce:3c:e8:9a:70:cc:7b:35:fb:
da:86:62:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:17:19 2025 by rpki-client