Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/tfOkHre0qwKEW1sMCD9fQGwoOho.mft
File: tfOkHre0qwKEW1sMCD9fQGwoOho.mft (raw, json)
Hash identifier: CqBsby57TvhewwNEZyi5yMKkyUm4F8RkIb3CPMLsHCk=
Subject key identifier: FD:D4:86:2E:77:32:F4:18:C7:87:64:0B:1B:29:8C:10:3C:EE:CC:B8
Authority key identifier: B5:F3:A4:1E:B7:B4:AB:02:84:5B:5B:0C:08:3F:5F:40:6C:28:3A:1A
Certificate issuer: /CN=b5f3a41eb7b4ab02845b5b0c083f5f406c283a1a
Certificate serial: 0191C4A1EE0359A16BDD53206B73AA9F6AF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfOkHre0qwKEW1sMCD9fQGwoOho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/tfOkHre0qwKEW1sMCD9fQGwoOho.mft
Manifest number: BC
Signing time: Fri 06 Sep 2024 00:00:32 +0000
Manifest this update: Fri 06 Sep 2024 00:00:32 +0000
Manifest next update: Sat 07 Sep 2024 00:00:32 +0000
Files and hashes: 1: M_wJLXUPnyAF-pgq3XLVjmJFmBg.roa (hash: B9HQRgcInIThy0NS5CcO27Q+N1HKuEB6UZqSgRqnaOU=)
2: p4cA2LkfrCTIdRfoMbcuAxrs6_o.roa (hash: PydqBoHR5MWdeFG26uqpNdN1pxfipu34LI+HJkEtsSk=)
3: tfOkHre0qwKEW1sMCD9fQGwoOho.crl (hash: ISHNRkq1a3apUGYT4uQBcgYESZvfECPWhhzF5QkwE0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c4:a1:ee:03:59:a1:6b:dd:53:20:6b:73:aa:9f:6a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f3a41eb7b4ab02845b5b0c083f5f406c283a1a
Validity
Not Before: Sep 6 00:00:32 2024 GMT
Not After : Sep 7 00:00:32 2024 GMT
Subject: CN=fdd4862e7732f418c787640b1b298c103ceeccb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:02:15:18:2d:56:d3:b8:2e:6d:46:1a:c6:50:
4f:3b:ed:22:3d:21:be:f6:71:63:0d:73:c9:0e:2d:
b7:7e:a1:8d:65:7f:34:44:68:d8:66:d0:55:cc:22:
de:58:37:c6:9e:45:7b:71:17:15:ec:4b:df:15:6e:
f1:47:46:40:be:8a:83:3e:cc:43:23:9a:4e:30:42:
6b:05:d8:cb:62:c7:f7:32:77:5a:0f:b5:1d:7d:3a:
05:33:35:a4:a6:58:37:e2:aa:47:5a:dc:a5:ca:22:
9c:b6:81:00:f9:e2:a2:65:3a:4f:d3:2c:ef:81:47:
76:bc:44:f6:3d:7b:5d:ae:56:da:92:f5:4d:ed:a7:
65:42:e0:9d:98:9d:54:ef:98:4a:00:79:45:ae:29:
6f:24:13:09:c3:95:ff:05:c4:78:bc:b5:52:7d:00:
54:db:4b:c6:19:47:a6:e2:74:2d:8e:92:d7:6f:2e:
49:51:75:03:22:9f:31:b6:7d:c5:0b:fc:49:1c:06:
ef:e5:fa:da:96:c8:8e:21:a9:55:40:f5:5e:aa:fa:
f7:b2:22:c9:9e:b3:89:93:74:0f:c2:aa:f9:60:ed:
c8:c3:fa:08:d3:bb:d7:a6:fe:df:f5:85:b5:d9:69:
93:09:97:e0:6c:03:9f:68:7c:20:ab:6a:99:4a:17:
3f:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:D4:86:2E:77:32:F4:18:C7:87:64:0B:1B:29:8C:10:3C:EE:CC:B8
X509v3 Authority Key Identifier:
keyid:B5:F3:A4:1E:B7:B4:AB:02:84:5B:5B:0C:08:3F:5F:40:6C:28:3A:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfOkHre0qwKEW1sMCD9fQGwoOho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/tfOkHre0qwKEW1sMCD9fQGwoOho.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/2e8cd3-8859-4ba0-b86e-db1cbe79bf3b/1/tfOkHre0qwKEW1sMCD9fQGwoOho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:a1:9f:cf:36:50:b9:6c:9e:75:5d:e5:d3:05:a4:e8:9d:d9:
3e:7b:f8:28:f3:6c:c7:64:9c:fc:56:a1:14:8c:79:d3:6c:4c:
77:9d:57:22:b2:5a:aa:a3:a4:a1:01:99:85:70:ff:e7:af:ad:
15:ec:5d:5c:a5:83:19:73:3e:19:cc:b8:73:49:4b:7e:1c:de:
fd:a8:08:4e:e7:36:6f:63:8a:54:6a:a7:57:07:bb:13:3d:c7:
c9:c8:95:3e:39:62:c3:fd:9e:ff:7b:4e:5c:04:51:3d:b2:77:
49:f7:9d:44:6e:fd:50:6a:7e:f7:58:61:52:09:b2:06:16:76:
ec:ca:f8:63:c7:23:fd:8c:68:59:92:56:47:12:fd:f7:b1:82:
42:9f:c7:6f:05:b5:65:bf:9a:01:40:03:4a:23:cc:31:c6:fd:
63:16:07:3a:3b:ac:10:9b:18:37:05:92:26:a8:0f:b9:5f:4c:
3b:c4:c7:6a:44:0d:5b:3d:d4:67:e5:50:c6:16:94:31:1e:ec:
9a:ca:87:ab:40:a3:bb:e7:3a:06:40:e6:f5:79:67:17:f5:bd:
89:19:eb:40:de:1f:4f:85:2d:51:25:e2:97:25:69:af:17:30:
0c:73:70:5d:d2:77:38:a5:2f:0f:78:ec:30:cf:8e:b4:8d:1b:
c9:88:e4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 23:59:30 2025 by rpki-client