Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
File: tTZGbQNoUuL3N2reE4BGFDuZTMM.mft (raw, json)
Hash identifier: 1HenAJB/bntAuSWcBumlvHFzLXVu1CQMozVYbu7bgE8=
Subject key identifier: 0A:8B:1F:87:7A:F2:07:B8:FB:23:47:DE:0B:3C:D5:26:4D:EF:B6:60
Authority key identifier: B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
Certificate issuer: /CN=b536466d036852e2f7376ade138046143b994cc3
Certificate serial: 0194BCE0B1CF52593EA4F3C983C4824C9227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: 4dgJmFIjsrGv5rSLSqks3SszRsQ.roa (hash: Sg9Vz95hfxUFPzxyRHpzX8FvIho0lOoY/A6mHLZCWkE=)
2: tTZGbQNoUuL3N2reE4BGFDuZTMM.crl (hash: QJsLBmYkVDe3vjKJkZ4S3lUEK0gaDGmvtiV+gA0nmD8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b1:cf:52:59:3e:a4:f3:c9:83:c4:82:4c:92:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b536466d036852e2f7376ade138046143b994cc3
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=0a8b1f877af207b8fb2347de0b3cd5264defb660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:17:c8:72:4d:fe:dc:fe:18:ba:0c:e8:17:bd:
9a:c3:3c:1d:54:00:32:f2:0d:d7:9f:1b:c0:9d:85:
f6:43:7f:c9:96:85:0d:53:d7:b8:28:32:96:ef:eb:
26:a6:cd:0e:f6:8b:16:98:ab:bb:57:da:5e:f6:6c:
11:19:73:5b:aa:8d:b6:8c:61:5b:8d:b8:8b:27:27:
a1:19:13:6e:35:5c:92:7a:a9:a9:84:25:9c:90:c6:
14:66:43:69:a9:ac:9d:d0:06:13:ee:5c:4e:c2:bc:
2a:de:8f:62:6f:ca:fc:ba:6d:ec:d1:33:2a:dc:04:
c1:ca:e1:42:27:40:56:42:c8:59:8b:fd:d9:40:bd:
53:7e:14:ab:a8:92:af:1e:58:bb:2e:c1:72:a6:06:
97:10:40:d8:b6:19:ab:31:16:74:e8:94:84:29:e1:
04:1b:4e:4d:52:28:3c:25:aa:12:13:39:d8:4e:a4:
78:3d:68:70:b7:72:2f:8d:d1:61:a7:8f:f8:e8:85:
f1:2e:12:09:b0:5d:72:39:a6:5b:42:35:38:27:b9:
37:74:e0:13:24:0b:9d:43:77:89:13:4f:a3:96:03:
3f:e9:10:af:0c:ae:c7:85:42:f3:f4:9c:e3:46:37:
97:61:ac:6c:e2:f0:4f:af:2b:be:e3:df:d5:2e:9b:
c9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8B:1F:87:7A:F2:07:B8:FB:23:47:DE:0B:3C:D5:26:4D:EF:B6:60
X509v3 Authority Key Identifier:
keyid:B5:36:46:6D:03:68:52:E2:F7:37:6A:DE:13:80:46:14:3B:99:4C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTZGbQNoUuL3N2reE4BGFDuZTMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/e1b422-162a-498a-92d8-b102fe3283a3/1/tTZGbQNoUuL3N2reE4BGFDuZTMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:06:16:ad:f3:ba:03:5b:59:8b:1e:8d:f3:63:d8:4d:8b:60:
fb:6c:5d:9c:be:15:66:33:2a:5e:ef:22:2e:6b:da:9c:e4:c9:
c5:05:16:bc:53:c6:1b:b1:0f:b6:24:01:f8:96:70:52:7a:cc:
77:17:8e:23:26:dd:31:8d:0d:a3:e2:f7:5c:29:84:4e:8e:c0:
a7:4e:6d:2b:6e:9f:e3:74:bd:f4:fa:0e:68:68:1e:c5:ec:5b:
e1:2d:dc:c8:66:fe:5e:23:ae:2a:f8:32:98:af:fe:c5:ff:b8:
f9:7e:96:91:3e:78:93:42:bc:d1:fa:2b:8f:d5:ab:4a:01:59:
6e:cd:9c:c0:c3:c7:7d:d0:7c:24:f3:97:5a:90:e9:35:12:4e:
63:7d:5a:2d:d7:3c:49:0b:53:55:00:8d:62:eb:3f:52:37:c8:
c2:0b:5c:3f:40:70:ac:ac:2e:2e:7b:94:65:5c:ad:25:d6:c8:
cb:67:9c:3b:ea:a9:87:20:23:ae:e3:9f:85:37:19:da:ea:5f:
bc:b5:1f:c2:23:bc:ef:ae:7c:ec:9f:04:73:8f:6e:6e:16:c6:
04:e7:6c:85:54:20:f6:67:77:fb:99:b9:78:30:05:b9:6f:6b:
8d:5e:22:c4:68:78:3a:6f:53:86:a6:4c:82:59:fe:17:df:88:
ac:2d:cc:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:48 2025 by rpki-client