Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/a34fb9-f64e-4291-9291-60b4ace004b5/1/tZXiFxdovJspQknw46U1kBecUu4.mft
File: tZXiFxdovJspQknw46U1kBecUu4.mft (raw, json)
Hash identifier: gDN4y0yebJ37Us4vHIywnMlXlg00tbNsuYvUe56TFS4=
Subject key identifier: 3F:1D:32:C0:43:2C:F9:7E:0F:B7:60:60:19:36:12:BB:33:F6:21:DA
Authority key identifier: B5:95:E2:17:17:68:BC:9B:29:42:49:F0:E3:A5:35:90:17:9C:52:EE
Certificate issuer: /CN=b595e2171768bc9b294249f0e3a53590179c52ee
Certificate serial: 0194BBCF0415EEFA75341EA87502A3408558
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tZXiFxdovJspQknw46U1kBecUu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/a34fb9-f64e-4291-9291-60b4ace004b5/1/tZXiFxdovJspQknw46U1kBecUu4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:33 +0000
Manifest this update: Fri 31 Jan 2025 10:01:33 +0000
Manifest next update: Sat 01 Feb 2025 10:01:33 +0000
Files and hashes: 1: tZXiFxdovJspQknw46U1kBecUu4.crl (hash: zba+1ffv2bgAn4zgWj3E2Ot3qKAOd/k9Ajhph1U+4vA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:04:15:ee:fa:75:34:1e:a8:75:02:a3:40:85:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b595e2171768bc9b294249f0e3a53590179c52ee
Validity
Not Before: Jan 31 10:01:33 2025 GMT
Not After : Feb 1 10:01:33 2025 GMT
Subject: CN=3f1d32c0432cf97e0fb76060193612bb33f621da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f0:b0:c0:ad:a7:62:5f:db:1b:3a:69:6e:77:
fc:2e:2f:49:2d:b6:ec:ff:54:f9:12:1a:76:96:43:
7b:e5:7b:d4:ac:bb:62:97:ef:42:51:13:73:f4:a0:
47:06:7e:98:be:e4:31:09:ec:7a:15:40:d1:50:65:
7a:61:fb:1b:ca:02:c1:2a:ac:f3:10:1d:1f:a0:d9:
ad:92:f4:02:1a:9c:fa:b9:5d:b5:19:94:70:08:69:
d6:69:e9:1a:d4:59:13:d8:7c:69:11:44:8a:bb:60:
d7:2b:21:70:95:d7:5d:b7:c2:7f:64:e3:cc:b0:77:
57:9d:0d:83:bd:f2:fd:df:4e:b1:cc:69:6b:18:d6:
40:ea:60:c0:b7:4d:b9:09:76:1a:cf:7b:df:0c:f4:
ac:52:4f:7d:ad:e6:b8:25:75:26:1f:5d:f5:8f:96:
b1:e7:b9:97:4e:2c:a9:c6:53:cd:04:10:ac:a3:48:
d7:17:65:dc:95:7d:00:9f:e2:43:e5:12:90:61:19:
3a:6b:83:b2:dd:10:91:8d:8e:97:ad:2e:ee:2b:55:
6d:98:27:0c:83:51:b3:5d:ce:c2:2a:f1:3d:d6:aa:
bb:31:38:80:01:b0:8d:89:ce:15:f5:51:1b:08:b7:
77:0f:bd:b6:d9:5a:78:ef:1b:28:4e:c8:c5:22:4b:
a9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:1D:32:C0:43:2C:F9:7E:0F:B7:60:60:19:36:12:BB:33:F6:21:DA
X509v3 Authority Key Identifier:
keyid:B5:95:E2:17:17:68:BC:9B:29:42:49:F0:E3:A5:35:90:17:9C:52:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tZXiFxdovJspQknw46U1kBecUu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a34fb9-f64e-4291-9291-60b4ace004b5/1/tZXiFxdovJspQknw46U1kBecUu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/a34fb9-f64e-4291-9291-60b4ace004b5/1/tZXiFxdovJspQknw46U1kBecUu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:f9:df:8c:61:8d:fc:37:af:89:8c:77:f7:eb:3c:3c:19:ee:
5f:16:c3:9a:20:81:9a:6a:52:bf:ac:d7:11:30:05:5c:5b:b9:
2f:0c:88:dd:ce:1c:0b:c1:ea:6b:30:15:2a:d9:38:a7:7c:38:
e0:90:6a:34:94:25:a9:a0:f9:c0:1e:c2:d0:a7:9c:d9:78:63:
4b:1c:7a:47:cf:de:85:ce:fa:38:37:7a:78:e6:e4:4f:00:7a:
72:42:cb:1f:2f:73:b9:8c:b8:03:ba:09:71:25:8b:7b:92:42:
77:29:4e:ea:e0:4e:89:24:d2:47:10:68:d5:92:2e:b9:75:b4:
49:2b:94:50:07:3f:56:f8:b6:dd:d7:5b:80:6d:7d:7b:d0:c9:
54:61:31:28:55:5e:f7:4e:d6:70:88:bd:a6:8f:9d:99:17:b7:
e5:ca:1e:7a:c5:63:97:4c:ad:46:92:0c:43:21:ea:e2:c9:4d:
22:79:58:b3:94:af:93:53:fc:0b:1f:16:f3:55:57:40:82:e0:
e4:a8:f9:97:54:da:fe:e6:b8:55:4e:44:45:98:9a:fc:49:ed:
7d:eb:90:9e:24:67:82:c4:32:f7:27:05:1a:e6:58:41:58:7d:
6a:1a:ec:d5:99:4c:54:73:99:df:94:1b:96:da:04:40:0c:9a:
ff:5c:00:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:53:27 2025 by rpki-client