Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
File: tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft (raw, json)
Hash identifier: JXg4UvyEfjimlcWByc+FHZaESuxcDrFtDUfTRhhnLjE=
Subject key identifier: A9:1C:4A:24:22:33:A3:04:1F:F4:2A:E0:F8:4A:D6:52:93:5E:B2:BA
Authority key identifier: B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
Certificate issuer: /CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Certificate serial: 0194BBCEA06330331D7144130F96DB65F96C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
Manifest number: 0A94
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl (hash: mbAseXHx5wnVvQeutwjsQs2q5Yl0uB3bWlUcfGBH41M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a0:63:30:33:1d:71:44:13:0f:96:db:65:f9:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6707197e836760c592e1ef11f1b4cbe5bfd4d2e
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=a91c4a242233a3041ff42ae0f84ad652935eb2ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:fa:70:d6:02:58:f7:11:5f:8e:31:15:6b:
10:3a:18:e3:10:48:ec:b3:7b:99:22:9f:c7:f5:35:
ed:40:c9:86:cb:1c:d0:b1:4f:70:82:0e:75:ba:1d:
62:f6:0d:c2:23:50:c7:1c:bb:15:51:a1:66:01:1a:
6a:9f:f0:24:d0:0c:e7:c5:65:d5:52:03:5a:8e:f1:
67:93:52:50:4c:1a:2e:4e:3b:86:86:08:f4:30:d2:
12:d1:d8:f1:08:5c:ba:73:24:6d:51:2c:3f:bc:65:
32:47:1e:e6:ca:73:c2:53:f3:d7:78:3e:2d:61:f7:
51:b9:cc:72:22:67:f2:2c:07:f5:29:14:87:2f:94:
7e:7b:62:0f:8f:f4:49:17:a3:57:fc:19:1f:24:c2:
e3:62:2e:05:f4:cc:01:21:05:a0:5a:c6:15:2c:6d:
37:c6:21:ba:f2:51:29:67:7a:c9:30:dc:02:70:36:
a5:57:9a:44:5b:30:d3:dd:5b:1a:1b:74:cd:4b:9f:
ee:c0:6e:f5:bc:0f:c2:b2:a4:0e:79:47:ed:c1:ab:
6f:41:79:df:17:98:c2:29:e1:af:db:7a:29:26:fe:
d0:3c:d8:1e:cf:75:0c:78:5a:86:3e:82:a1:e7:35:
d2:0e:fb:19:4e:9c:22:59:4d:44:b8:1d:53:8b:8c:
d0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1C:4A:24:22:33:A3:04:1F:F4:2A:E0:F8:4A:D6:52:93:5E:B2:BA
X509v3 Authority Key Identifier:
keyid:B6:70:71:97:E8:36:76:0C:59:2E:1E:F1:1F:1B:4C:BE:5B:FD:4D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tnBxl-g2dgxZLh7xHxtMvlv9TS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/80ac78-bbe1-4124-b878-6667fa51c460/1/tnBxl-g2dgxZLh7xHxtMvlv9TS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:8c:ff:6b:d4:1f:01:ee:b9:ae:47:d9:82:95:76:43:00:d7:
25:4a:84:d6:53:fe:56:0b:87:01:5e:af:83:2d:7d:73:95:91:
d8:3c:1e:62:6e:6a:b3:65:15:64:37:33:3d:9b:eb:dd:79:bf:
9f:fd:8c:da:c8:d8:dd:8f:50:c6:e8:a0:d0:b7:00:51:12:19:
82:69:70:66:a6:1f:6f:85:2c:e8:c2:51:69:e7:60:11:2b:7d:
6c:99:18:05:08:ab:a1:3d:5a:58:66:9b:72:33:e5:e1:8d:f3:
eb:6e:28:fa:1e:d3:fb:8a:0f:66:46:e7:85:82:5b:b9:a4:47:
f5:ba:6f:c2:29:fa:23:bb:85:27:1f:98:a9:03:06:05:02:c7:
1b:74:3e:9b:9f:48:1f:6e:14:f3:77:84:8f:bd:8a:e5:7f:d6:
46:eb:b8:e7:75:5b:03:3a:8d:96:55:4f:7b:00:99:14:8c:40:
c1:97:42:be:2f:9e:0a:7f:d7:85:e5:c0:9f:ac:2f:1c:18:4e:
35:91:69:ae:f2:a1:f7:0b:fb:20:55:61:50:48:e0:22:17:bc:
f5:82:26:15:88:66:f8:ec:59:4f:7e:ba:c9:2d:c8:bd:2a:c0:
54:6c:2e:0e:94:48:d6:62:5f:29:67:f6:d4:8d:7e:e7:68:4c:
28:9e:24:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:09 2025 by rpki-client