Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
File: TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft (raw, json)
Hash identifier: DGQN5qUT/NXyIQ/y7I6hQPTiiG8fL8x0IFClZAsHRmA=
Subject key identifier: 2E:2F:B9:3B:F7:73:5B:23:85:22:8A:11:7A:1D:D2:21:79:3A:1C:86
Authority key identifier: 4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
Certificate issuer: /CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Certificate serial: 0194BC04C818C414E99F3A26CE431975E433
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
Manifest number: 0168
Signing time: Fri 31 Jan 2025 11:00:17 +0000
Manifest this update: Fri 31 Jan 2025 11:00:17 +0000
Manifest next update: Sat 01 Feb 2025 11:00:17 +0000
Files and hashes: 1: TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl (hash: lQm61EbtJ3oJnPBZQL2StSa70zoS5QD9lkr2HLJZieM=)
2: U_0Qm9bmlfNCn0QcnMuKjqVhpok.roa (hash: rS2TodhOY6krb9NSbdEkyp8dkG2jF6/EwmhOAvSbJFk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:c8:18:c4:14:e9:9f:3a:26:ce:43:19:75:e4:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d94f92adbd1bb45d63f9f947017a2164e9d0efa
Validity
Not Before: Jan 31 11:00:17 2025 GMT
Not After : Feb 1 11:00:17 2025 GMT
Subject: CN=2e2fb93bf7735b2385228a117a1dd221793a1c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b7:ea:f4:72:30:53:da:94:42:97:3a:19:ec:
6c:1b:4f:d9:33:ce:2c:30:9e:f1:ae:6a:de:b5:5a:
91:7f:f4:b5:f9:75:29:b5:26:5d:c9:74:d2:dd:38:
3f:27:52:58:97:0e:4f:4b:5c:96:aa:e5:76:99:b6:
ac:ae:0a:5e:09:d7:5f:27:43:96:6e:69:02:5a:18:
e6:b5:7c:7b:c8:ad:67:ef:7e:07:8e:9d:99:de:d5:
4d:22:3d:be:0e:05:bf:9f:39:a2:04:01:e8:fc:9f:
f4:a2:41:eb:3f:7b:5b:70:3e:76:6c:e4:c0:8b:85:
89:dc:13:1f:59:7d:31:bb:ed:14:c3:89:cd:fe:f1:
5a:2d:61:fe:4d:7d:af:4a:43:c4:f9:73:6d:8e:53:
a6:02:dc:f4:78:6a:6a:84:33:46:48:28:77:d7:35:
c5:00:14:80:d2:a7:56:1a:a3:c5:a6:2e:43:f3:47:
08:ef:29:99:c2:46:e2:db:b9:39:cf:f7:ab:b2:8e:
56:ee:42:d3:f2:5a:91:cc:c2:8a:f9:4b:f6:3e:c8:
41:fb:58:f9:45:c8:05:f5:7a:8f:51:42:95:3a:54:
8c:e9:72:ca:f3:9f:6e:e7:c4:f1:0b:9b:23:55:fc:
d4:a0:66:95:0f:26:19:94:ba:90:df:c9:d0:79:04:
c2:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:2F:B9:3B:F7:73:5B:23:85:22:8A:11:7A:1D:D2:21:79:3A:1C:86
X509v3 Authority Key Identifier:
keyid:4D:94:F9:2A:DB:D1:BB:45:D6:3F:9F:94:70:17:A2:16:4E:9D:0E:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZT5KtvRu0XWP5-UcBeiFk6dDvo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/939b98-1508-4740-8dbf-24109edf6450/1/TZT5KtvRu0XWP5-UcBeiFk6dDvo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f9:5e:79:45:2f:ce:c2:7b:c4:ae:5d:c8:25:10:17:8a:5e:
f1:2c:26:2a:08:5b:90:a5:ae:37:3a:9d:12:28:85:d9:56:51:
ec:6a:49:89:19:cb:3d:cc:b3:5e:91:02:b6:94:a9:bc:d9:71:
6b:92:f7:d7:cf:76:6f:8a:dc:03:a6:41:7a:1f:3e:df:11:f4:
a3:4f:11:08:fb:9a:28:15:d7:34:eb:48:0d:8d:95:31:60:fb:
14:7c:04:29:35:1b:74:64:6f:58:89:d7:34:7b:da:f0:83:7f:
0b:5f:cf:f2:fe:25:57:d9:8a:de:ec:3d:66:2a:37:72:e5:cc:
1f:36:68:b7:08:4e:d2:30:bd:b9:c0:a6:04:f7:24:b8:81:b3:
e6:83:12:87:97:d6:de:aa:6e:b6:4b:88:72:61:61:1c:79:e8:
6e:5b:12:dd:ce:ad:c3:de:09:18:18:f8:58:77:75:63:fc:f6:
5c:ea:63:ae:58:a8:dd:82:41:05:b3:e3:f8:39:5f:a8:9d:1c:
75:9d:55:d3:37:48:46:32:9b:4c:82:f0:d4:fa:19:ff:bf:99:
db:98:a3:43:ef:62:1f:8b:34:77:27:66:4a:f9:18:ce:b2:d3:
f6:e6:58:a0:94:5f:84:10:9a:b0:e5:46:7d:5a:8e:a3:54:92:
87:62:48:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:25:15 2025 by rpki-client