Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
File: tmDXgyCGDV7-cp4gi160sqvr4Hg.mft (raw, json)
Hash identifier: EyMy4FDHIKumZ+wJOtisXptiIxd/CSixChDzpm1SUMk=
Subject key identifier: BE:5F:9A:A0:49:E8:C9:CE:D9:EB:44:A5:09:12:23:F0:2F:E2:E3:B8
Authority key identifier: B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
Certificate issuer: /CN=b660d78320860d5efe729e208b5eb4b2abebe078
Certificate serial: 0194BCE0E5C92EC5AB8F2B267EDB1BBCB6C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
Manifest number: 09DD
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: H_s46FVu3VtqmBdzQOsgFtOpwm4.roa (hash: xXfRZ05adaRJT3b+JBMiwuYhoS+v9eiqRiPqJaWYY3s=)
2: tmDXgyCGDV7-cp4gi160sqvr4Hg.crl (hash: NJbZj/36hZYNkPdiKb5Cv1qNKL89LRmOhkPdNpUFWkU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e5:c9:2e:c5:ab:8f:2b:26:7e:db:1b:bc:b6:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b660d78320860d5efe729e208b5eb4b2abebe078
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=be5f9aa049e8c9ced9eb44a5091223f02fe2e3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c9:ab:27:67:c6:3b:43:c6:f8:b8:41:4c:4e:
34:f6:24:a3:c0:5c:15:7f:91:8a:66:f2:e7:0f:c4:
46:a8:61:34:eb:ec:64:d3:eb:70:91:74:96:89:5a:
6d:5e:5c:c0:37:ee:be:72:5e:7c:f1:42:70:1e:b1:
0c:bc:70:13:21:cc:41:18:d3:cb:e8:71:25:59:97:
21:8e:93:3a:c2:3c:3f:f5:4e:74:41:c2:9b:b9:82:
89:6a:c2:6f:fb:61:10:e6:c0:99:69:9f:4c:22:a3:
d4:a6:aa:27:0c:7c:76:33:24:a2:c1:6f:55:99:b4:
06:c7:d1:7f:dc:7c:ec:e3:c6:90:15:9f:36:20:fa:
f9:f3:65:14:78:7a:6d:a1:1a:68:77:4e:fb:09:54:
20:14:b2:18:3f:83:5f:0f:c3:2f:ad:b1:d3:32:7f:
b5:f3:2a:a8:f7:46:7c:ec:ad:60:6c:ab:63:d9:de:
db:61:04:d3:75:e1:c1:ca:40:6c:be:07:ac:6b:d9:
b5:a6:5b:02:0d:c3:cf:de:2f:a5:47:b1:f9:d3:fa:
6a:95:1e:f9:2b:5f:7c:85:48:65:5b:1d:d8:e9:3d:
72:1d:eb:4d:34:d6:2c:dc:de:19:55:cc:b2:37:66:
e8:7f:5f:ee:06:3a:e6:7d:04:97:36:47:d7:ed:4f:
9d:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5F:9A:A0:49:E8:C9:CE:D9:EB:44:A5:09:12:23:F0:2F:E2:E3:B8
X509v3 Authority Key Identifier:
keyid:B6:60:D7:83:20:86:0D:5E:FE:72:9E:20:8B:5E:B4:B2:AB:EB:E0:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmDXgyCGDV7-cp4gi160sqvr4Hg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/daf212-f009-4bd4-874d-624c3e788cdf/1/tmDXgyCGDV7-cp4gi160sqvr4Hg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:a4:9d:6f:f9:d9:0e:79:20:97:5f:73:3b:df:20:c2:f5:ff:
2a:5a:82:1d:95:15:7a:76:57:d8:16:55:3a:fb:e7:e9:7f:11:
84:86:ab:a9:dd:d6:10:c1:bc:8d:92:95:7e:99:34:e9:e6:55:
46:ea:f1:d2:e1:d5:18:ff:18:da:81:00:b6:34:02:24:ce:fb:
3d:dc:0c:f4:a3:95:6d:04:2c:d7:33:74:55:1a:4d:89:1b:12:
9a:28:c0:c2:27:18:8f:46:7d:ca:c2:66:2e:40:6c:fb:f8:fb:
bf:a4:18:6b:51:fc:a8:96:65:10:31:db:29:9c:d2:0e:8d:b2:
22:98:d2:30:a3:e2:0d:5e:27:15:cf:8f:50:95:b1:76:b8:c0:
3e:e8:d2:0b:39:8d:ae:d4:41:fa:8e:18:f1:25:40:c5:3b:c1:
bb:d9:85:d5:e8:9a:db:0a:03:bd:b2:ee:fd:ad:d9:31:a5:50:
ee:41:e4:d0:a4:64:b4:be:b9:35:cf:e0:26:7e:73:d7:95:be:
10:34:bd:dd:01:4e:8c:5f:f8:6f:58:50:45:81:ac:9e:15:7a:
90:ca:e7:98:01:6c:61:b3:24:4c:66:bc:14:82:be:bf:1c:ee:
df:45:52:4e:2c:aa:56:f4:29:8b:68:a5:2e:64:8d:47:58:a1:
8e:98:f7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:39 2025 by rpki-client