Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
File: rwlQP8rAF2lRWhny3CZX2S_TUN8.mft (raw, json)
Hash identifier: AjGlsIDcvCUvX2q5CF82TvkfRSVYxE0OkjxbBuxrwuk=
Subject key identifier: A5:F2:8C:51:94:E0:84:A1:0B:DF:1B:3C:44:BA:D4:C5:81:4F:89:FF
Authority key identifier: AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
Certificate issuer: /CN=af09503fcac01769515a19f2dc2657d92fd350df
Certificate serial: 0194BC727EEF5DF102FC2E933E7FF27137F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 13:00:07 +0000
Manifest this update: Fri 31 Jan 2025 13:00:07 +0000
Manifest next update: Sat 01 Feb 2025 13:00:07 +0000
Files and hashes: 1: bI5hqVT8m0qS2JmySaAVyieiKDc.roa (hash: Ur47592mLsTtDVQWZDc8e3eMtHnqyDHoxs3kpjL/ez4=)
2: rwlQP8rAF2lRWhny3CZX2S_TUN8.crl (hash: h4noJVF6hKkaCaOkuOuhi9d9zVQC4jTuuFtUMCsT5P8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:7e:ef:5d:f1:02:fc:2e:93:3e:7f:f2:71:37:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af09503fcac01769515a19f2dc2657d92fd350df
Validity
Not Before: Jan 31 13:00:07 2025 GMT
Not After : Feb 1 13:00:07 2025 GMT
Subject: CN=a5f28c5194e084a10bdf1b3c44bad4c5814f89ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:4c:bd:e6:cc:ec:4f:50:a5:6f:ad:c2:f7:3f:
c5:20:d9:66:19:b4:9e:46:5b:16:a6:9f:61:d5:fd:
e6:9f:4a:db:72:d1:29:3e:45:7d:60:9c:c3:2b:f3:
25:b9:b2:9e:d8:d6:2d:62:d8:bc:97:57:3b:d9:b7:
bc:2a:4b:2b:d1:cc:32:0c:97:8b:0f:ee:8c:37:a0:
94:1d:3e:15:e4:72:c5:03:0e:aa:ba:c8:73:bd:c3:
43:43:85:31:01:82:20:a3:2e:0a:c8:fc:85:71:90:
ac:70:51:3f:b6:46:e2:53:f4:96:be:92:5b:5f:01:
fc:7b:22:84:0b:2d:44:ab:fd:6e:a4:06:79:89:3a:
ea:dc:59:f9:7f:6f:f7:9d:2f:d1:64:a8:5c:69:b4:
8d:82:ed:01:69:19:3f:cd:f3:28:4f:e9:a9:e9:93:
9f:59:5d:57:69:f1:61:20:64:bb:e7:ba:95:a0:c6:
c2:f4:88:29:de:ed:51:87:b7:6f:7c:ab:69:63:ba:
f7:5d:76:5a:5d:81:0f:dc:b0:88:29:2d:0f:7c:93:
b6:c1:06:1c:c9:12:3e:1a:6d:34:b3:70:d3:20:8b:
cf:52:a9:65:4c:6a:44:fa:a0:45:2e:7c:6b:6a:06:
9c:9a:d8:48:55:b3:86:eb:88:c8:5c:e1:31:7a:6a:
00:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:F2:8C:51:94:E0:84:A1:0B:DF:1B:3C:44:BA:D4:C5:81:4F:89:FF
X509v3 Authority Key Identifier:
keyid:AF:09:50:3F:CA:C0:17:69:51:5A:19:F2:DC:26:57:D9:2F:D3:50:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rwlQP8rAF2lRWhny3CZX2S_TUN8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/0d1089-d967-43b5-bc30-17502d3df95f/1/rwlQP8rAF2lRWhny3CZX2S_TUN8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:35:05:12:80:50:ec:4b:bc:ab:cf:cb:42:55:0f:0c:9c:8f:
30:de:92:dc:e8:f2:63:f3:45:bf:c7:e4:2c:6c:43:7a:87:a1:
c5:8b:ed:79:fd:07:7c:89:b4:f8:85:e5:e6:8d:b4:48:84:58:
20:0e:f9:8b:25:e0:0a:c7:bf:f5:ef:cb:d8:3f:3c:02:fe:51:
0b:74:62:92:0d:43:db:7d:de:e7:fe:8f:4e:7f:21:a4:0a:a0:
13:86:3b:cc:67:71:ea:c1:43:ac:b8:3c:42:bc:d3:84:42:f0:
dd:9b:fc:39:aa:67:e9:ab:5c:64:16:b6:63:4a:1d:c0:73:74:
d0:05:9d:7e:62:bc:ba:f4:f6:ac:e9:8b:a7:e1:79:52:b5:3c:
ae:b5:96:62:34:29:de:3b:39:6f:4e:ac:f0:da:fd:7b:0c:fc:
b9:e6:20:a6:3d:02:2f:f6:ae:2a:16:ab:b6:cf:66:e6:01:3e:
4b:b3:d3:58:1d:91:88:8e:b6:18:0d:b5:22:b0:e5:11:c9:16:
41:97:54:53:61:07:3f:9d:e8:2e:42:65:32:b5:9c:44:b9:f0:
49:c6:6d:10:ee:06:bf:63:cb:fc:e8:2a:09:b7:6f:fc:9a:fb:
11:28:9a:8d:cf:60:24:52:0a:4e:07:70:5a:8c:19:64:32:79:
8d:cd:ef:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 00:45:03 2025 by rpki-client