Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
File: TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft (raw, json)
Hash identifier: qxdwNoQhlfzCa8rowWtqNedPlj/Pl2Hs2oOhwNOwYmk=
Subject key identifier: F8:2A:AC:40:84:AA:42:77:E1:3D:A9:9E:C8:34:01:0D:07:5E:19:B6
Authority key identifier: 4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
Certificate issuer: /CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Certificate serial: 0195E1598793B67BC66687B7B9A1C01EF201
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
Manifest number: 11B0
Signing time: Sat 29 Mar 2025 10:01:35 +0000
Manifest this update: Sat 29 Mar 2025 10:01:35 +0000
Manifest next update: Sun 30 Mar 2025 10:01:35 +0000
Files and hashes: 1: H36xXwuB9FJ3ESjpo_XmH_KZ2R4.roa (hash: CUtTMRPtfP9rNsMoQeZ2J44Z+jwTnsWRsKW5k/0LKug=)
2: TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl (hash: THmFeKkIqiUiiEAEionB+hP0zbnlqyRR0X/2blH4mro=)
3: tpqvdlW8wuSttlFQd80uk4F5YQY.roa (hash: yDvp+gGPiyhARcManoLZEVb02KcZ7k4JkC3clhGu75w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:87:93:b6:7b:c6:66:87:b7:b9:a1:c0:1e:f2:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1b0c40969080957fccee1fb8a3fb4bb38bf5dc
Validity
Not Before: Mar 29 10:01:35 2025 GMT
Not After : Mar 30 10:01:35 2025 GMT
Subject: CN=f82aac4084aa4277e13da99ec834010d075e19b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:79:71:72:eb:32:fd:be:74:58:40:99:c0:44:
fd:16:a9:be:fe:8a:f0:00:63:10:e8:b4:7c:2d:80:
b5:b5:b8:9f:6a:54:94:51:29:94:58:06:88:bc:a4:
fb:f2:50:04:61:82:29:e7:eb:2d:fa:a9:06:b2:75:
ad:e7:c3:5b:03:d7:8b:01:9c:31:8a:72:4f:0f:6e:
83:fd:8c:a8:58:a6:b1:fd:8a:a5:97:15:83:b8:f1:
a6:ab:f7:55:22:86:3d:32:ce:6e:2e:22:45:2d:39:
0c:3c:b5:e5:37:e9:c5:81:2b:f4:9e:87:6e:21:9d:
f9:0a:e7:11:af:8f:37:79:5f:58:00:47:2a:e5:a0:
d9:82:70:45:bb:63:1e:05:e0:1b:52:e7:1a:b2:5f:
e4:40:b0:50:ac:48:76:c9:45:5d:3c:1b:63:b6:49:
b1:67:de:4e:0d:d8:8e:6f:47:19:eb:c5:12:6f:cd:
8c:58:fa:45:b2:f5:e3:c1:2a:13:0b:49:b3:11:1f:
0d:d7:60:43:9d:bd:ba:56:e2:b6:a1:9a:da:3e:c7:
e5:f2:46:45:0c:9a:7c:f0:b9:63:95:cb:bc:06:3a:
74:8c:43:8e:df:63:b6:86:79:70:a3:33:c2:6b:5a:
84:ed:2a:96:67:6b:8c:0c:00:23:92:2a:bc:4a:a0:
d6:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:2A:AC:40:84:AA:42:77:E1:3D:A9:9E:C8:34:01:0D:07:5E:19:B6
X509v3 Authority Key Identifier:
keyid:4C:1B:0C:40:96:90:80:95:7F:CC:EE:1F:B8:A3:FB:4B:B3:8B:F5:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBsMQJaQgJV_zO4fuKP7S7OL9dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ee29a6-691d-4b0c-ad63-94c8254bd3b7/1/TBsMQJaQgJV_zO4fuKP7S7OL9dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8d:00:70:47:cb:42:7a:09:21:df:f9:0d:48:6d:1f:d2:e3:
3c:26:2f:ff:3d:f8:1c:8b:62:88:29:9c:1b:64:6d:6a:b6:4d:
7f:90:54:96:5d:71:4e:0a:1c:eb:c8:37:be:19:9a:24:ea:92:
16:b5:9b:7a:15:4d:f0:75:39:ab:4f:71:ff:98:6e:87:3e:7b:
fb:03:8c:1f:c2:38:c6:52:90:7f:ee:56:26:6a:95:58:4b:2c:
7a:71:75:1b:00:5b:7e:79:b4:e0:f7:d3:55:54:e3:c4:ad:77:
87:50:b3:b3:91:79:31:c7:25:02:72:2b:91:db:20:98:15:a6:
a0:17:2e:f5:43:f5:10:5a:5f:2a:29:c2:fa:e6:b9:33:d8:8f:
1d:18:e0:00:ed:cb:9f:9b:42:78:1a:a4:8a:fe:25:72:ff:76:
dd:b0:dd:5f:de:24:13:0b:e2:93:7b:86:17:19:7a:c2:40:e4:
c6:2b:8f:83:3c:5d:bc:41:3d:d3:24:68:ff:35:c3:8c:bc:1c:
a4:32:96:f3:25:f0:44:44:38:ff:37:51:e0:8c:de:e8:27:c2:
18:2d:fd:5b:d4:55:3f:df:d8:1a:99:17:74:d9:83:45:0c:77:
a4:66:96:e9:c7:5b:d3:ef:de:bc:2f:02:39:50:52:ff:68:b8:
9b:85:74:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:53:36 2025 by rpki-client