Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
File: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft (raw, json)
Hash identifier: 5Dp77LjFEBpY5Md6s+NzaMoCikvB5fxtYclRk8TjjRY=
Subject key identifier: 8C:0F:5A:2E:2B:17:99:3F:8F:C6:69:4A:27:CB:64:8A:97:AE:00:E1
Authority key identifier: B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD
Certificate issuer: /CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
Certificate serial: 0194BD17D7E8B9EF6B8FE0B3BFB68705D5BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
Manifest number: 0A4F
Signing time: Fri 31 Jan 2025 16:00:43 +0000
Manifest this update: Fri 31 Jan 2025 16:00:43 +0000
Manifest next update: Sat 01 Feb 2025 16:00:43 +0000
Files and hashes: 1: ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl (hash: PAn/pkmhRMWh3pon4OUxaoDpHQfrCkgkhK/NAE17xY0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:d7:e8:b9:ef:6b:8f:e0:b3:bf:b6:87:05:d5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5ad0967ca0002dd9ce45bc43bb701b4173d79bd
Validity
Not Before: Jan 31 16:00:43 2025 GMT
Not After : Feb 1 16:00:43 2025 GMT
Subject: CN=8c0f5a2e2b17993f8fc6694a27cb648a97ae00e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ac:79:f7:92:cb:6d:e9:9c:d9:2a:6d:a7:72:
52:20:e4:10:3f:f7:a4:9b:2f:80:ec:af:60:2c:bf:
30:73:e6:0e:dd:78:56:4b:bc:66:58:71:06:fb:de:
71:67:36:db:d5:db:48:6a:7e:9f:9f:39:27:02:7a:
c3:e1:82:c8:f4:32:9e:b0:6e:fd:53:fd:10:cc:f0:
31:3d:c5:3f:b6:9f:21:3f:02:92:8d:bd:23:bc:ca:
3b:b1:a3:cc:cd:0f:7a:c3:06:55:7f:e0:34:30:57:
36:8d:da:23:03:2d:94:7a:43:8b:48:cf:88:a5:b4:
84:e5:37:40:19:79:e5:1e:8d:04:33:ab:01:9f:50:
df:38:07:d9:6a:f9:66:3d:2a:a6:fe:1d:88:0e:df:
14:4c:2b:a7:b0:6e:ed:f8:4e:4e:e2:d9:bb:d5:b3:
a8:ba:62:b2:7f:f9:4b:e5:36:8d:23:4c:70:33:4a:
92:57:c4:cf:fb:0b:1a:19:0d:9f:d1:eb:56:17:85:
92:1f:18:6d:75:38:e3:ee:22:60:a6:8d:7a:7a:47:
b3:05:a4:8b:e7:eb:6c:e9:b7:f0:6f:93:e0:61:60:
cc:9a:c2:e3:76:20:bb:a4:05:92:2c:36:ed:7a:e6:
3c:38:83:98:b1:96:30:67:ff:5e:61:d5:3c:67:0d:
37:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0F:5A:2E:2B:17:99:3F:8F:C6:69:4A:27:CB:64:8A:97:AE:00:E1
X509v3 Authority Key Identifier:
keyid:B5:AD:09:67:CA:00:02:DD:9C:E4:5B:C4:3B:B7:01:B4:17:3D:79:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/34819d-e231-4060-9f12-7c36ef613a8f/1/ta0JZ8oAAt2c5FvEO7cBtBc9eb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:66:3e:d6:df:a9:43:79:fc:fd:f6:22:10:c7:f4:a2:d7:cc:
4b:ab:5a:09:06:db:e8:ee:01:04:c3:7d:4b:66:e5:e2:fa:da:
da:27:72:6d:8b:d9:7b:ec:9f:33:ae:b2:19:c1:7e:62:e6:7c:
33:6a:aa:54:64:b7:77:cb:32:3b:34:b0:60:de:ec:12:bc:aa:
7a:f5:cc:07:a9:7b:9d:8e:0d:53:47:84:11:b8:34:69:27:68:
43:15:f8:b0:e7:68:b3:c3:28:67:18:c6:a6:bd:b6:bf:68:16:
60:fb:70:98:cc:87:17:86:05:b9:d7:4d:6e:5b:88:59:fc:05:
c0:20:c3:31:21:9d:a8:cf:7d:1f:05:32:9d:a6:a0:01:26:21:
cd:e9:89:da:7e:aa:62:a5:0a:66:6e:3d:b2:db:76:42:35:92:
59:a9:0f:6c:7e:78:3f:99:68:27:64:b3:c6:37:bf:60:8b:62:
2d:e9:80:32:58:29:d8:c4:d6:f0:c8:c4:ec:9f:70:92:3b:41:
2c:2c:e1:93:17:14:07:7f:bc:e5:4d:2c:67:89:72:c8:7a:d1:
17:a2:9f:15:a6:b6:85:5d:21:5e:8c:ce:f1:2e:7e:52:79:7c:
11:f2:92:2a:d5:ac:66:30:40:0a:15:eb:87:cc:90:3a:0d:ad:
f2:66:7c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:22 2025 by rpki-client