Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
File: TdA6WGuXinCqqC4JWKkBUucmedk.mft (raw, json)
Hash identifier: /Nek4uuyyUJPqoPImcn+DzayNOqCWXk1dyzn50fcBmU=
Subject key identifier: 1B:CC:DC:B0:2A:C7:CC:3B:C8:31:F3:9F:97:4C:6E:F3:D7:6B:75:9D
Authority key identifier: 4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
Certificate issuer: /CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Certificate serial: 0194BBCE22BCB92FE01BC2AC2C89E53F4726
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
Manifest number: 068A
Signing time: Fri 31 Jan 2025 10:00:36 +0000
Manifest this update: Fri 31 Jan 2025 10:00:36 +0000
Manifest next update: Sat 01 Feb 2025 10:00:36 +0000
Files and hashes: 1: TdA6WGuXinCqqC4JWKkBUucmedk.crl (hash: ug5J46cJIkmetaFTtImLLkzh2rbc6Hpp5YIWI7FXC+4=)
2: bMiFWbEVmjXACwoqhdLryOI7ecM.roa (hash: y4qa2SV/D4+dXjdntmc66BpYAvlL021xKDW12tsJ7Ug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:22:bc:b9:2f:e0:1b:c2:ac:2c:89:e5:3f:47:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd03a586b978a70aaa82e0958a90152e72679d9
Validity
Not Before: Jan 31 10:00:36 2025 GMT
Not After : Feb 1 10:00:36 2025 GMT
Subject: CN=1bccdcb02ac7cc3bc831f39f974c6ef3d76b759d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cf:1b:63:d2:a8:db:b9:40:51:20:27:d4:34:
39:02:05:e5:98:01:25:2c:91:6f:30:a1:b9:22:c4:
3c:cd:4a:79:89:90:c0:9d:de:d9:b3:01:0e:40:bf:
19:ea:df:76:20:29:dc:2f:08:6a:13:02:77:9d:45:
4a:f9:6d:f1:d3:e9:f1:97:78:82:d0:63:f1:01:d6:
33:f4:12:0d:1d:c3:5d:a4:bd:b9:f0:58:e8:6a:b2:
5f:f8:ec:10:a5:a0:25:e0:fb:a8:5b:20:f3:4a:2c:
e7:bb:e2:80:08:00:da:14:1e:2f:2e:b4:f7:23:1e:
4a:e6:35:d7:12:29:1f:9c:7f:fa:b5:38:31:eb:a6:
a7:48:83:3d:81:94:3c:97:d6:b3:a0:13:ea:9d:a5:
15:38:ab:0b:e9:3d:16:80:fc:7a:f4:b9:0e:2c:65:
70:82:94:38:59:4a:7e:70:e5:fc:30:9c:d7:bc:95:
82:dc:72:9e:b4:bd:11:9f:fb:0f:bd:15:4b:fe:55:
f4:0c:fd:69:88:ab:2d:70:ea:0b:d0:b0:24:cc:a3:
6c:a8:5e:ff:c6:d9:78:b4:9a:e1:45:fe:28:33:34:
75:20:2b:f6:30:7e:fb:e9:27:6d:9c:48:ea:91:9e:
ce:05:2b:1e:99:62:44:18:b2:cd:81:44:99:32:1b:
ed:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:CC:DC:B0:2A:C7:CC:3B:C8:31:F3:9F:97:4C:6E:F3:D7:6B:75:9D
X509v3 Authority Key Identifier:
keyid:4D:D0:3A:58:6B:97:8A:70:AA:A8:2E:09:58:A9:01:52:E7:26:79:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdA6WGuXinCqqC4JWKkBUucmedk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c9d523-0bb9-4573-9595-76a3a10a26f2/1/TdA6WGuXinCqqC4JWKkBUucmedk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:33:88:90:4d:bc:17:c3:0a:a1:7c:22:b7:b0:b5:a4:fd:ee:
94:e7:a4:20:28:30:9e:91:f6:70:6c:d2:c1:09:84:f3:5d:26:
9b:df:af:53:67:4b:46:4a:d0:26:b8:ba:f8:1e:72:a1:96:68:
24:50:8b:3e:e6:3a:ee:ea:69:a5:c6:50:be:eb:69:2d:4a:ec:
d3:19:98:99:5c:c1:a6:bf:28:d6:b5:4f:07:29:75:71:d0:ef:
c5:76:d6:dd:29:fa:d0:0a:d2:bb:6c:6b:bd:df:db:2e:52:05:
90:11:ac:5b:4f:14:32:d5:fe:05:31:0a:c2:3a:1c:2d:03:ec:
f4:ee:73:f1:20:3f:50:c7:f6:94:3a:86:ab:60:4f:e7:ba:6c:
9d:d2:d7:a7:3b:75:5d:a2:0f:c1:eb:4e:11:4c:1c:d2:61:a6:
75:68:0a:9c:2e:55:29:9d:a6:69:2c:d8:43:91:89:3d:80:28:
9b:92:fd:a9:16:b4:20:ee:17:02:50:60:eb:5a:bb:9c:4a:4c:
2c:7c:b6:93:2a:59:cb:cc:49:b1:93:89:e9:5c:91:95:ae:06:
ac:8c:12:c6:33:4d:5d:de:dc:58:ad:e5:b4:32:a4:62:5d:f4:
ec:08:73:57:01:f6:9f:cd:c1:02:e6:28:00:cc:0a:b6:e1:23:
d0:c1:d6:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:28 2025 by rpki-client