Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
File: tyDzzrDmtZejgUXFp0M2nH9JZuA.mft (raw, json)
Hash identifier: 2zReD8pC68XIjaBMPFHLJs/qPMiGylwTwPekbhxqGSc=
Subject key identifier: 1F:F6:EB:82:55:B0:60:14:BD:8B:D7:A6:3C:0E:AB:20:84:8D:43:63
Authority key identifier: B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
Certificate issuer: /CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Certificate serial: 0194BCE0606B96506F651B792B00E048E37A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
Manifest number: 0E66
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: ggC5V29BMdNUn59EruOGoGZJaaQ.roa (hash: ttIpUsiJ4qeM8pCSgboK+Vkbkx0DrAYP7DxfAZL+EN4=)
2: tyDzzrDmtZejgUXFp0M2nH9JZuA.crl (hash: +8fIvrB3aK265wBuM4UPlZ1+u4VbL+EiVPuQQQLH6fo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:60:6b:96:50:6f:65:1b:79:2b:00:e0:48:e3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b720f3ceb0e6b597a38145c5a743369c7f4966e0
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=1ff6eb8255b06014bd8bd7a63c0eab20848d4363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4a:73:fe:10:cd:d8:63:45:ae:71:20:0b:ab:
89:bc:84:eb:bf:04:41:43:50:75:ea:c4:f6:a5:35:
e1:a2:7e:42:55:a1:69:38:3b:37:93:87:d1:b8:fa:
fe:a1:2a:e6:d3:6d:e6:43:b6:e2:b4:7e:cc:c4:3d:
bf:65:eb:73:13:f8:76:17:94:29:f2:c0:62:5d:8c:
5e:7d:c8:b4:94:29:a0:fd:ed:bb:c5:b1:01:f3:01:
9e:a5:b1:19:f0:bd:9d:d3:ba:13:ae:89:8b:47:2b:
64:72:56:a4:6c:9c:d1:bf:fe:11:9a:6e:80:df:b5:
01:60:ca:f8:09:b5:69:87:f7:c2:e7:0b:8f:c1:97:
c9:4e:81:98:d9:a6:1c:2b:1c:9f:9c:04:e0:a2:36:
41:b7:55:c7:e7:24:f3:95:79:b2:c5:08:5c:a3:56:
a1:22:29:b8:b0:a7:35:33:c6:42:a0:f1:4d:e8:ed:
77:dd:3a:d7:32:65:ab:52:ad:cf:d8:07:de:6f:1e:
0a:fa:d1:c2:ea:f5:27:35:03:ee:a6:7a:48:7c:d0:
6b:9c:23:f8:6f:65:72:cf:99:cf:73:e8:0a:52:0b:
e3:27:c3:22:80:55:3e:44:04:a5:a9:ea:85:e3:56:
d7:16:4a:20:26:ec:bb:3b:1c:ee:d4:09:80:00:95:
4e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:F6:EB:82:55:B0:60:14:BD:8B:D7:A6:3C:0E:AB:20:84:8D:43:63
X509v3 Authority Key Identifier:
keyid:B7:20:F3:CE:B0:E6:B5:97:A3:81:45:C5:A7:43:36:9C:7F:49:66:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tyDzzrDmtZejgUXFp0M2nH9JZuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/d7fb6d-ebbe-43a2-b119-393c45742259/1/tyDzzrDmtZejgUXFp0M2nH9JZuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:c9:07:a9:c6:a7:cc:2a:c2:25:09:82:69:ae:59:f8:54:8c:
2e:98:7a:d3:ee:5d:a0:a2:0d:ae:8b:ac:85:3d:33:df:99:9d:
ed:14:98:83:c9:65:ff:13:fa:90:57:8a:1d:1a:d7:86:81:15:
75:a3:2c:20:66:b0:97:86:69:21:05:95:78:a8:99:4b:c0:9a:
b0:7e:e8:d3:b3:85:9d:de:d5:fd:c6:f3:33:27:87:0e:8f:d4:
e1:86:7d:97:f6:44:f6:fa:14:ca:08:ee:fe:ad:a7:03:86:1b:
0d:66:f5:b3:7e:98:01:cc:b2:4a:9c:d4:d7:ea:92:5d:0a:a7:
46:35:2e:52:1e:ab:a4:3f:5d:e8:5c:12:61:02:d8:8f:1d:66:
5b:e9:4f:01:59:b0:f4:64:77:d8:37:cd:05:3c:1f:71:6b:6c:
8e:68:ad:d3:06:13:f9:fe:22:a8:85:90:a6:b5:7e:84:9e:08:
0a:16:97:a5:03:d2:37:28:8b:86:a0:e1:3c:98:8e:6d:f8:3e:
46:ba:55:3b:57:bd:a7:2a:53:24:18:8f:af:31:c3:f8:fb:a0:
6c:0a:25:02:6e:5f:ca:e1:85:9f:b7:7f:c6:63:30:f5:90:f0:
36:8e:d7:0c:c3:81:4f:be:d9:10:d4:11:ab:65:4c:e8:65:47:
73:16:05:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:13:26 2025 by rpki-client