Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: 9YbPCI84AGGuYXWs/ThE0Xh7MEiJ/pr6D1vCzDXT7tg=
Subject key identifier: FC:1A:8C:08:29:3D:CA:ED:AB:01:EB:04:D9:1E:99:3C:59:8D:8B:AF
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 0195DFD8FE4BD12EC61F9E249C0F87B5EF5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 14C1
Signing time: Sat 29 Mar 2025 03:01:34 +0000
Manifest this update: Sat 29 Mar 2025 03:01:34 +0000
Manifest next update: Sun 30 Mar 2025 03:01:34 +0000
Files and hashes: 1: 2-8ODfbSISRCVrFLypE1beop4mI.roa (hash: CTu3Z/KQAufmJs+pAxP0V5GvviRUTQPwl9gEk4hUm6E=)
2: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: IhUYpsYDgtFjDZW6NSlOYzbD44/0mOTT424KLcGFJlU=)
3: xOYkGw3SqmDNjUBUXBvZW0U-4J4.roa (hash: CMrEVMiwQAaT7qSr6cVaZ45q/VR6zzPcJBOroZoc7n8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:fe:4b:d1:2e:c6:1f:9e:24:9c:0f:87:b5:ef:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Mar 29 03:01:34 2025 GMT
Not After : Mar 30 03:01:34 2025 GMT
Subject: CN=fc1a8c08293dcaedab01eb04d91e993c598d8baf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:21:f5:94:c5:ee:fc:ef:b9:96:81:92:4d:df:
ba:e1:d6:bd:b0:15:c2:d0:63:a0:72:39:2f:fe:da:
2b:b5:32:3a:9d:ec:2e:0c:75:63:c2:2e:5f:42:2d:
a6:a9:c7:15:e0:8b:18:52:f9:96:d6:0e:fe:ba:cb:
26:a6:7f:f9:dd:30:50:57:ee:e2:3e:c0:e2:34:05:
1a:dc:24:e7:09:f1:f6:64:53:7d:b1:c2:25:f7:d9:
a0:fb:b4:ba:47:f4:05:d8:ed:4b:ff:34:4b:df:63:
8a:0e:de:7c:3b:22:df:0f:6f:a4:49:2b:63:ad:8c:
60:da:2c:aa:fc:a9:4a:00:49:d8:a2:bb:3d:4b:b1:
01:b1:62:96:d7:38:44:dc:f6:c5:43:fe:de:aa:76:
1e:cd:81:bf:98:ea:b3:57:58:b6:03:ab:0e:f2:a1:
ba:21:24:ea:b0:2e:9e:2b:bb:40:ab:1b:3b:69:8d:
5f:7a:a7:04:7d:cc:53:c6:2c:3d:71:05:45:89:f4:
7a:a0:b7:b2:69:46:fb:3e:16:9b:c5:ce:38:fe:89:
ce:b7:63:1c:93:d2:9d:49:ae:bb:0e:41:85:9f:67:
60:61:75:f4:9f:d8:50:8c:ee:33:97:38:b0:b3:04:
8f:32:21:9e:c7:cc:ee:99:20:76:c8:8e:e3:f6:17:
82:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1A:8C:08:29:3D:CA:ED:AB:01:EB:04:D9:1E:99:3C:59:8D:8B:AF
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:54:98:97:9c:ae:6a:dd:7b:81:39:01:d9:6d:13:52:16:40:
8f:f6:f5:fd:40:21:ed:5f:22:cd:dc:12:56:7c:9f:86:08:f0:
ac:23:43:c9:8d:5e:51:35:16:34:f9:79:06:c5:49:e5:e2:d3:
73:df:15:5f:2a:98:8e:3b:7c:de:d2:b1:8b:78:1c:79:4f:0a:
d4:ff:fb:c6:37:53:98:af:ef:95:e5:13:2c:f2:bd:b5:33:2c:
f8:b3:0a:aa:d2:7c:db:9a:11:d5:f3:72:c7:3b:c4:2d:93:a3:
6f:d3:a3:a0:47:11:3c:1a:7a:79:dc:d2:7e:72:04:42:c0:a6:
0a:97:c3:b9:df:03:1b:9c:8b:64:e5:49:a8:46:c5:41:92:3e:
90:b2:ab:7d:dd:06:d6:e9:8a:58:8b:8a:7e:39:91:aa:09:6c:
16:7b:aa:2a:92:5e:57:14:5c:17:c7:68:2c:21:88:1a:5a:c3:
73:79:1b:2c:a5:56:ad:0e:9f:be:4c:7f:ab:9b:35:c2:4c:90:
d1:9e:58:a2:ea:fe:c7:46:80:fe:60:d3:6f:9b:fc:44:81:fe:
97:86:f6:43:84:43:08:3f:03:e8:ab:d7:37:71:6c:1f:c4:3c:
dc:2b:0a:a0:29:4e:39:60:26:0f:b1:b3:3c:50:5b:4e:d9:81:
0e:0c:79:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 18:14:38 2025 by rpki-client