Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
File: TNN3vorxFHipq-Jx-L3i3j0zNAg.mft (raw, json)
Hash identifier: csCWuvOEyO31+LnAIiHPrwQovvNIEksqyA9FXzqS30I=
Subject key identifier: 5D:41:6A:B7:C4:F1:CF:DB:F9:6A:F1:53:EF:D5:44:75:6C:ED:4C:06
Authority key identifier: 4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
Certificate issuer: /CN=4cd377be8af11478a9abe271f8bde2de3d333408
Certificate serial: 0194BC3C226F349F1BD1E355EF19A757E41C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
Manifest number: 067A
Signing time: Fri 31 Jan 2025 12:00:45 +0000
Manifest this update: Fri 31 Jan 2025 12:00:45 +0000
Manifest next update: Sat 01 Feb 2025 12:00:45 +0000
Files and hashes: 1: TNN3vorxFHipq-Jx-L3i3j0zNAg.crl (hash: 6262fLdmiVNKIU8CkAQ8Q94EEsDMb2amj+TabgzWI+g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:22:6f:34:9f:1b:d1:e3:55:ef:19:a7:57:e4:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd377be8af11478a9abe271f8bde2de3d333408
Validity
Not Before: Jan 31 12:00:45 2025 GMT
Not After : Feb 1 12:00:45 2025 GMT
Subject: CN=5d416ab7c4f1cfdbf96af153efd544756ced4c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9c:5a:5e:e9:9a:68:96:b2:03:53:37:de:83:
e7:8c:0d:96:08:3d:b3:7d:fb:e5:18:6a:63:16:9b:
c5:64:fb:84:11:21:e3:90:a8:22:56:b7:bb:88:95:
10:f4:60:fb:c1:af:30:7c:1e:8a:fb:37:38:51:f4:
e3:89:a6:b6:91:68:86:2a:1d:71:16:e3:98:98:0f:
9b:ad:e6:1f:6d:67:de:18:9f:07:a6:09:d4:27:37:
ab:f6:d1:c0:30:f7:25:5b:3c:3d:01:39:57:75:c3:
91:86:62:70:9c:2f:78:43:5f:dc:91:c3:60:cb:60:
6b:ce:4f:79:ec:a1:60:c7:09:db:6d:b1:47:56:f7:
27:19:6b:ea:fc:5b:cd:3f:ce:70:c9:aa:30:4f:a4:
09:29:89:bb:ce:db:85:88:a8:dc:2a:ea:ef:b0:29:
b9:ef:1c:a2:88:9e:e4:2d:d9:a8:1b:22:f9:26:d8:
d3:ff:f0:f0:35:11:ba:ec:62:46:be:79:83:a6:73:
73:8b:22:1d:27:67:3d:c1:e8:60:bf:a2:55:d6:73:
d6:00:24:e2:94:62:5b:85:bc:12:32:a5:29:fa:5b:
57:e0:30:f0:62:68:c4:75:1a:ab:de:97:2f:98:8c:
6b:d2:f2:c3:32:46:0f:b9:d3:3e:e6:56:dc:9a:43:
24:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:41:6A:B7:C4:F1:CF:DB:F9:6A:F1:53:EF:D5:44:75:6C:ED:4C:06
X509v3 Authority Key Identifier:
keyid:4C:D3:77:BE:8A:F1:14:78:A9:AB:E2:71:F8:BD:E2:DE:3D:33:34:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNN3vorxFHipq-Jx-L3i3j0zNAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/51e8b5-7e2c-4008-bf83-b12eb1ceaa14/1/TNN3vorxFHipq-Jx-L3i3j0zNAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:b6:8d:c8:aa:d7:c0:8a:5d:79:d1:75:96:43:d2:0e:78:05:
39:bc:76:b6:ae:e9:06:2f:53:c4:af:10:bb:f4:65:e3:f3:e3:
82:f1:c8:56:0e:a2:70:01:fd:41:58:34:67:bd:c9:24:59:7f:
10:76:0e:22:31:50:6e:a2:f2:70:4e:a0:51:eb:26:48:2d:9e:
e8:46:85:ca:cf:bd:40:99:64:14:21:cd:9a:99:56:4b:48:83:
75:be:e9:15:47:29:21:c7:f6:e3:3a:c7:a7:e5:24:7e:30:f0:
8e:d7:ed:8c:3a:a9:5e:8a:34:af:f8:18:cb:b5:92:7a:f8:d4:
97:a6:3b:f8:42:6c:38:b3:54:2a:75:ce:ce:58:6c:26:4f:90:
6a:3b:c8:95:d5:8c:69:ce:cb:0e:a0:1c:06:3c:2a:51:1e:89:
02:be:4b:b2:57:80:9a:5b:97:38:b1:bf:2e:30:97:d7:81:a8:
fc:10:03:7f:f9:18:74:2c:7a:de:26:cf:17:42:1f:3e:92:c4:
10:aa:5f:98:bb:2b:ce:4a:d2:68:6a:83:e1:21:9c:7f:c3:a5:
6a:02:3a:e7:f2:a4:21:64:9a:9b:9c:c8:43:37:44:f9:f2:64:
05:3f:16:c9:ea:54:e8:cd:05:49:2d:81:51:53:26:a9:3c:ce:
b7:91:c0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:56:29 2025 by rpki-client