Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
File: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft (raw, json)
Hash identifier: fqUaNo5i1346JHnwGBUuyn+TzFVw0O/w8YJjn42HkyI=
Subject key identifier: B4:0C:2C:1E:DE:28:30:E4:75:5E:3E:92:6C:E4:ED:F2:5C:91:8C:96
Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Certificate serial: 0194BC72E16AB59045C864EED624BF8ACBA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
Manifest number: 0985
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: DWyS6ktuYXD1HWtRdim_tw6aAHw.roa (hash: ZpPs8QmClGInLrYdfgabA/tiTnRpT7Agrz+vwk6fAyc=)
2: ebklZqmx0-dRJX-3stcdCCjPSZQ.roa (hash: oxCqtL4IdqqluHjcszErTou8uGJlC2MCnMVsPPzgZCM=)
3: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl (hash: oDMGMUg8VW+s6aLNM39IZJD6m9LeBp9N2RkNp8WBt8Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e1:6a:b5:90:45:c8:64:ee:d6:24:bf:8a:cb:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=b40c2c1ede2830e4755e3e926ce4edf25c918c96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:65:5e:75:56:4e:76:05:27:32:3f:5f:57:38:
f9:21:72:47:a8:79:b6:0c:04:a0:f0:b4:2d:ba:aa:
fa:9a:4e:6f:32:26:8d:cd:6e:06:41:50:ca:88:de:
33:ad:36:64:98:f6:2a:3b:6a:b0:8d:ce:26:ae:68:
e7:67:f2:4b:70:b1:d0:91:92:ea:02:a4:2d:cf:20:
ff:c4:4e:ad:49:15:e2:83:a3:eb:0f:63:0b:64:2d:
d8:e9:74:a7:0c:9c:4a:f1:c5:3c:3e:e7:11:d7:55:
3b:75:68:4a:96:06:7c:cd:5c:af:8d:28:4b:5e:c4:
ae:29:88:e0:7b:a7:b2:6d:92:1d:e2:4f:96:1a:da:
6b:2e:f1:18:b4:63:38:68:98:5a:57:91:3a:81:38:
d1:b8:c0:36:8f:98:dd:0b:62:76:c7:f7:74:5d:5b:
bb:cf:c6:2b:50:2a:58:20:61:92:2d:b0:59:43:b8:
cd:21:1f:b3:b7:8b:1e:18:00:ed:21:79:ef:41:e9:
32:0d:2d:fe:0c:5e:af:38:56:0f:5a:56:d0:43:11:
11:e4:b9:60:d9:11:c7:8e:36:61:bd:d2:02:35:26:
e7:a7:0b:ba:74:2b:a7:c6:f4:fc:1d:4d:6f:d4:9d:
ef:1d:3c:7e:7a:88:f1:ae:17:01:09:ea:1a:9a:9d:
50:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:0C:2C:1E:DE:28:30:E4:75:5E:3E:92:6C:E4:ED:F2:5C:91:8C:96
X509v3 Authority Key Identifier:
keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:4e:ae:41:b5:bc:fa:10:16:83:0e:2c:fe:74:6f:f2:0c:d6:
c7:ee:d2:2a:20:1f:ac:4d:09:26:8e:3e:16:57:4c:f2:f5:35:
65:2c:30:c9:f4:89:cc:69:ec:63:9a:34:c8:e5:5a:19:a2:62:
22:2a:37:91:b3:22:e0:70:9f:8a:3e:cc:73:6a:a3:68:cb:ab:
5a:42:30:c0:78:c2:85:0e:90:25:0a:df:11:56:0f:e5:9d:4a:
b9:d2:48:75:6c:fb:83:f1:1e:6c:9c:80:3b:a9:e4:1b:b6:3e:
31:2f:ec:ef:fa:28:6d:62:4c:39:ac:84:8d:89:80:02:e9:42:
2c:c1:15:a3:70:50:24:7e:41:a5:25:38:e5:06:ef:73:fb:0d:
ac:c8:59:ac:7c:88:d8:f3:cf:40:a4:69:08:bc:00:ee:af:39:
3a:c5:7e:64:3f:ee:36:54:4b:fa:71:38:08:16:b0:86:20:9b:
af:fc:41:51:c2:79:b9:8a:9f:6f:cd:d3:24:3b:44:f1:ca:33:
16:06:d0:20:75:3d:b0:89:1d:ee:ab:25:c8:f0:9e:b5:39:66:
ed:4d:a3:0e:62:20:bb:c9:3b:04:b9:e6:07:e0:1b:24:b9:2a:
bd:07:ee:9c:a1:bc:f5:43:91:c8:f0:85:03:12:73:48:3b:d7:
89:3c:21:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:00:12 2025 by rpki-client