Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
File: TtA31O4-XScGWtgDVlgqL9wrSI0.mft (raw, json)
Hash identifier: t64FX1hS1UMcX6//rrUaPtgNtlmWrpZRy6eqWMllorM=
Subject key identifier: FB:0F:AB:F1:C6:FD:15:EA:10:1D:6B:B5:6A:ED:2D:54:A0:FA:79:48
Authority key identifier: 4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
Certificate issuer: /CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Certificate serial: 0194BCAA312C4ED8375393721F6B426D930E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
Manifest number: 0DA8
Signing time: Fri 31 Jan 2025 14:00:57 +0000
Manifest this update: Fri 31 Jan 2025 14:00:57 +0000
Manifest next update: Sat 01 Feb 2025 14:00:57 +0000
Files and hashes: 1: TtA31O4-XScGWtgDVlgqL9wrSI0.crl (hash: JEHLpWz3MwLLZZmEp2VyA5aB5n//mAXrYm+ol/MMjU8=)
2: eOJpQF5FNoppqB79NhjuknNPvas.roa (hash: 0TneR6h3XAtyeO7uLkVkGQTYXZHCJ04//nJtpw2jBn4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:31:2c:4e:d8:37:53:93:72:1f:6b:42:6d:93:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ed037d4ee3e5d27065ad80356582a2fdc2b488d
Validity
Not Before: Jan 31 14:00:57 2025 GMT
Not After : Feb 1 14:00:57 2025 GMT
Subject: CN=fb0fabf1c6fd15ea101d6bb56aed2d54a0fa7948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d3:80:08:f5:61:33:2e:a5:e5:c0:85:4f:46:
5c:52:7b:dd:8b:52:56:72:f1:e9:a1:2f:e1:b3:e3:
2d:ac:11:a6:1a:52:d6:4b:f3:c9:b4:74:c2:f2:ce:
6b:47:84:25:bd:e6:42:af:69:63:1a:5d:64:f7:a6:
f9:92:0b:a8:70:f9:f2:1d:0e:89:86:8d:e7:57:2c:
20:fe:49:73:c3:f4:ed:82:95:58:b5:9c:19:5c:12:
b0:e5:4d:a5:39:a3:db:34:08:01:c3:74:14:2e:37:
0d:c5:9d:9b:1d:66:78:59:c4:cb:87:96:32:65:2c:
72:f1:b6:27:14:4e:8e:dc:af:11:93:18:88:cd:00:
52:c8:2a:b8:d3:70:16:d0:56:2f:7a:01:31:7a:d4:
d3:67:b4:6c:60:9b:32:08:79:6e:76:5c:a7:5e:28:
78:98:fa:21:18:88:d1:4b:75:4b:fc:4f:a2:98:33:
d6:1b:bc:63:8e:be:0d:19:67:52:9b:7d:3e:8a:7b:
f6:10:cd:55:22:d8:4f:e8:92:8d:ca:b5:2c:93:d3:
41:65:22:e5:4d:af:47:d7:13:f1:26:4e:a3:22:2e:
51:7c:62:c1:9b:34:84:c3:f9:f8:c0:47:b4:22:c7:
fa:1d:ea:c0:29:e2:b3:11:6c:d9:ab:d9:00:5b:ca:
f9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0F:AB:F1:C6:FD:15:EA:10:1D:6B:B5:6A:ED:2D:54:A0:FA:79:48
X509v3 Authority Key Identifier:
keyid:4E:D0:37:D4:EE:3E:5D:27:06:5A:D8:03:56:58:2A:2F:DC:2B:48:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TtA31O4-XScGWtgDVlgqL9wrSI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/74b996-80ee-4c39-8e74-350e681b99d1/1/TtA31O4-XScGWtgDVlgqL9wrSI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:ee:92:01:be:2c:3f:4e:1a:cd:d6:bf:44:78:b1:7b:58:41:
b1:75:c5:d8:47:0c:2d:45:41:d7:61:c6:3e:be:e4:ac:a8:1d:
90:ef:0c:db:50:b2:c9:a3:67:02:53:8b:52:b9:bf:b3:ac:a2:
09:b9:90:a1:32:61:09:df:a3:ba:c0:63:3e:17:10:b2:17:f2:
1f:69:d3:17:5e:13:61:ed:56:fe:25:52:3d:65:2e:eb:7d:36:
62:5a:60:0b:64:97:5b:50:27:98:3f:a1:88:98:fd:e6:fe:d2:
b6:fd:8f:34:69:10:e0:06:71:5d:42:cd:a0:73:6f:6a:e8:42:
1c:a8:58:a4:93:bd:77:2e:f0:e4:3f:1b:cb:8c:d7:fa:db:b9:
d9:6d:f9:e0:4b:44:ef:37:51:99:fd:97:a6:72:95:fc:cd:45:
e8:82:b5:05:38:09:3b:cc:0e:da:70:91:79:dc:1e:0c:42:23:
07:30:0a:d8:b2:30:13:1f:0a:50:10:41:9b:9e:6d:85:bb:e0:
ac:d0:3d:06:18:0e:2d:b4:a1:53:67:fc:1e:22:a4:62:4e:e0:
0a:c9:3b:41:1d:5f:f5:0e:20:bc:28:8a:81:0f:61:26:a3:f1:
ca:70:83:7e:8f:a9:01:95:9d:a4:17:cf:7b:95:b5:50:fa:ef:
ea:96:3b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:27 2025 by rpki-client