Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
File: tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft (raw, json)
Hash identifier: dzarKnOsWgPVxk4sPFc59RZoJ/jXnIiUnY8+DMEb2NU=
Subject key identifier: DE:29:7B:5F:D0:59:29:20:BE:AB:1F:B0:1C:50:94:88:3A:D2:14:84
Authority key identifier: B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA
Certificate issuer: /CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa
Certificate serial: 0194BBCEB82C970475DA183100731BC55D46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:14 +0000
Manifest this update: Fri 31 Jan 2025 10:01:14 +0000
Manifest next update: Sat 01 Feb 2025 10:01:14 +0000
Files and hashes: 1: tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl (hash: 8ZQIenWNsbK89qvan8ZXlwxSTshb9qdk7kzq6Md1IOk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b8:2c:97:04:75:da:18:31:00:73:1b:c5:5d:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b73d88d7468af601af14c5e1ed903c4f36caf5fa
Validity
Not Before: Jan 31 10:01:14 2025 GMT
Not After : Feb 1 10:01:14 2025 GMT
Subject: CN=de297b5fd0592920beab1fb01c5094883ad21484
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e2:3d:33:a3:3f:0a:73:1c:8e:9b:07:8a:d2:
9e:5b:5f:e7:8e:95:12:88:c1:7e:fc:1f:c5:23:cc:
45:0d:1f:52:4c:07:9a:74:21:ef:3a:86:b6:1b:78:
70:01:4a:0c:8d:20:e2:e0:91:2d:e9:93:45:e4:ad:
03:58:3a:50:f7:5a:29:6a:43:af:39:78:ef:5a:d0:
3c:2c:7d:1d:20:c6:f8:18:dc:22:bc:67:46:e2:fa:
98:7b:9c:51:85:ba:7d:f6:9d:91:70:86:92:a8:27:
17:21:80:8a:5a:0c:93:4a:06:d8:b3:ec:38:e4:75:
b6:b4:66:11:5d:ba:d8:e8:69:8a:fb:28:a7:cc:47:
37:b3:13:11:11:e6:a5:ba:fe:33:c6:aa:10:fa:67:
b4:8c:1b:fc:ec:d3:52:28:3a:da:86:dd:d7:03:9e:
c7:b0:f6:01:78:79:e8:d5:c2:27:9f:8e:f6:e9:d3:
ce:38:e7:c5:4e:50:41:69:4b:7c:77:f8:79:f0:b9:
69:a2:be:97:82:74:d0:d2:45:e3:1b:f0:af:13:b7:
9c:36:75:a4:59:74:b6:4a:ab:b7:6c:f3:df:ae:2d:
20:ea:31:d7:67:23:64:05:93:78:bc:fc:13:60:b7:
92:2d:60:bb:67:11:6d:c2:19:df:21:c1:fe:bd:b8:
49:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:29:7B:5F:D0:59:29:20:BE:AB:1F:B0:1C:50:94:88:3A:D2:14:84
X509v3 Authority Key Identifier:
keyid:B7:3D:88:D7:46:8A:F6:01:AF:14:C5:E1:ED:90:3C:4F:36:CA:F5:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tz2I10aK9gGvFMXh7ZA8TzbK9fo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/19c93b-c9a1-494b-9bc0-0f2b540eca08/1/tz2I10aK9gGvFMXh7ZA8TzbK9fo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f2:9c:25:6b:9b:be:32:16:01:59:a6:33:47:4d:4a:ab:96:
22:ad:72:da:e1:b9:d4:04:bd:26:c8:9d:c1:f7:b4:bf:0d:e3:
00:5e:ce:ab:e6:8c:aa:15:76:01:2d:d3:7a:c2:49:9c:bf:1b:
ef:ad:93:73:87:9a:e8:06:89:34:b0:21:71:c7:85:0c:41:b4:
1e:4b:71:77:4d:be:eb:ee:53:ec:f7:a8:fc:8b:72:b2:1f:7e:
cf:9d:29:1c:74:f5:7f:4c:36:ea:07:cb:83:8b:cf:a2:f4:75:
39:de:cd:1a:31:3f:e2:85:d3:31:a0:43:2c:4a:be:be:ed:2f:
ce:55:54:52:d5:a2:35:7f:a3:c1:95:e9:d7:5c:ed:82:ae:cd:
84:59:e1:24:74:a7:7c:e5:cc:26:5c:ad:55:47:8a:94:bb:59:
bb:c1:09:ef:c2:84:43:f1:3a:73:57:31:d2:39:4e:fc:24:27:
fb:5c:ae:53:4e:6f:9e:58:60:e4:c4:80:54:8b:f4:e7:5c:85:
d1:63:2a:0f:47:47:f3:10:b7:ba:14:82:67:24:11:bd:8f:e8:
12:26:f9:ed:25:5e:67:f7:6b:96:3f:88:77:7d:c7:8c:bb:6b:
3d:06:39:b3:c3:85:29:32:5c:f4:0a:89:fb:a5:6b:34:e3:d0:
1b:5f:12:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:27 2025 by rpki-client