Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
File: tT8fJDLiJL3km_qxn2dTYpq1cH8.mft (raw, json)
Hash identifier: btK8L9QtT569jIgmdzacgbolOHs7tTZALRi7AVXKcf8=
Subject key identifier: D7:35:8F:5E:DA:45:08:2A:2E:13:E8:D3:E7:D2:6A:2A:BC:F1:3E:32
Authority key identifier: B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
Certificate issuer: /CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Certificate serial: 0194BBCDC9422FB6F7E4EE5ECDBA47223EA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
Manifest number: 0A87
Signing time: Fri 31 Jan 2025 10:00:13 +0000
Manifest this update: Fri 31 Jan 2025 10:00:13 +0000
Manifest next update: Sat 01 Feb 2025 10:00:13 +0000
Files and hashes: 1: tT8fJDLiJL3km_qxn2dTYpq1cH8.crl (hash: 8O8xHBGehFYYSmqHpGUEooAPkM+5nq+K7HJnlLtWk+E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c9:42:2f:b6:f7:e4:ee:5e:cd:ba:47:22:3e:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53f1f2432e224bde49bfab19f6753629ab5707f
Validity
Not Before: Jan 31 10:00:13 2025 GMT
Not After : Feb 1 10:00:13 2025 GMT
Subject: CN=d7358f5eda45082a2e13e8d3e7d26a2abcf13e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:0d:9e:45:33:ca:52:49:58:f6:bf:02:46:80:
8f:6a:b6:f7:f1:e6:75:16:a5:95:fb:d2:df:57:3d:
4a:d1:9a:ae:bd:df:0e:55:d9:3d:c7:4c:e1:18:55:
31:11:ea:10:dc:53:7a:bf:03:5a:b3:5c:31:f9:0b:
2b:d6:a5:c1:78:af:24:1c:62:f0:2c:1c:86:9b:ce:
d1:1e:3c:63:b2:05:23:01:c9:99:22:cb:5c:83:63:
ae:10:3a:5c:90:c4:03:23:6a:3a:97:38:83:20:90:
b4:c2:b5:e4:03:52:ef:9d:35:51:80:7c:11:2b:e8:
5a:a2:89:03:59:df:1b:b9:e7:a1:e3:d5:90:ac:8b:
50:c6:99:cd:cd:bb:77:ae:2a:f2:05:f2:e1:2b:34:
51:78:d6:46:ee:bf:c5:da:a5:3b:44:0b:62:54:5d:
83:40:27:2b:c6:ce:15:e7:92:3a:0e:e4:52:8f:74:
07:26:5a:5c:58:c6:74:a2:8d:f8:94:1a:62:11:f6:
b8:3a:71:37:01:c1:83:91:ba:53:d4:78:a0:e3:31:
ff:f6:64:3c:6e:76:2e:da:95:aa:00:89:5c:44:65:
43:3a:ec:1c:c6:f7:bc:52:af:b0:96:01:b5:08:3b:
7c:81:5a:7d:92:73:80:9c:41:d3:bb:57:5c:55:26:
9c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:35:8F:5E:DA:45:08:2A:2E:13:E8:D3:E7:D2:6A:2A:BC:F1:3E:32
X509v3 Authority Key Identifier:
keyid:B5:3F:1F:24:32:E2:24:BD:E4:9B:FA:B1:9F:67:53:62:9A:B5:70:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tT8fJDLiJL3km_qxn2dTYpq1cH8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/fdff01-762f-43a9-a4be-7bb1844014d6/1/tT8fJDLiJL3km_qxn2dTYpq1cH8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a7:36:c0:e0:4d:2f:97:a8:c9:e9:f4:b2:5d:40:e2:c8:80:
37:80:9b:60:29:11:1c:49:5f:e6:f2:0b:8d:58:f3:58:3c:3d:
f9:d4:50:57:ce:ec:24:19:5c:d4:17:ba:39:45:a4:95:34:30:
85:c5:7c:98:51:48:6e:ae:a0:41:0e:f5:a3:5c:83:0b:ea:63:
19:a7:c9:e6:91:09:05:5c:01:d7:10:c2:a5:b0:16:35:de:11:
27:29:4e:0d:9c:d5:d4:cf:6f:69:da:b9:5c:0f:6a:bc:c4:83:
92:d3:be:c9:07:57:d2:b9:74:c5:1c:ea:44:dc:c4:af:a8:d5:
76:0b:8f:84:77:d9:e3:26:2b:7d:0f:dc:6f:97:39:dc:50:9a:
3b:39:3d:60:88:e1:a7:46:41:b2:87:c7:f7:20:91:7f:c9:60:
df:cf:b0:6a:59:45:f5:bd:73:ca:b3:e3:75:12:d4:3f:bc:c9:
08:39:79:af:6c:27:a3:d7:10:3a:f6:cd:79:0c:e7:98:29:68:
0a:e4:58:e9:45:3c:20:10:58:e7:62:3c:b7:8d:53:98:be:7b:
48:80:4c:50:b4:19:32:de:e8:4a:81:9f:8c:1a:b2:1e:d0:4d:
b9:b8:04:33:43:17:b8:84:b4:d6:8f:43:76:86:57:d5:d7:ef:
a6:06:9f:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:47 2025 by rpki-client