Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
File: TWh9higIIltFn6OZ5l-KBpRpq6M.mft (raw, json)
Hash identifier: 5/nsGMeNfUMYGy2iXSKYypb6eLZXELXIo0AR5SXbuVg=
Subject key identifier: 2A:64:35:FE:1F:15:0F:4E:9D:E6:16:7C:F3:FF:CB:EF:EE:15:E2:08
Authority key identifier: 4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
Certificate issuer: /CN=4d687d862808225b459fa399e65f8a069469aba3
Certificate serial: 0194BC72F8F1F254C7075F428BE076EE5307
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
Manifest number: 13BB
Signing time: Fri 31 Jan 2025 13:00:38 +0000
Manifest this update: Fri 31 Jan 2025 13:00:38 +0000
Manifest next update: Sat 01 Feb 2025 13:00:38 +0000
Files and hashes: 1: TWh9higIIltFn6OZ5l-KBpRpq6M.crl (hash: wRmBfpVD01IMAfuEi1pNuPPkfb8Xz4oSUPZriOZoflA=)
2: yj8S8MOtSmVKNjXl11Yr8esDgtY.roa (hash: px/AqUdCFaeUdcOlWlEpkaK3sSjZNzpfw2t/zU4ncMc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f8:f1:f2:54:c7:07:5f:42:8b:e0:76:ee:53:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d687d862808225b459fa399e65f8a069469aba3
Validity
Not Before: Jan 31 13:00:38 2025 GMT
Not After : Feb 1 13:00:38 2025 GMT
Subject: CN=2a6435fe1f150f4e9de6167cf3ffcbefee15e208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:2a:40:fe:66:de:c5:d5:77:f3:85:2f:fa:d8:
eb:de:d1:83:ae:b7:eb:78:e2:5e:bc:68:fc:77:a6:
24:db:ad:b4:12:90:84:e0:eb:00:c0:97:02:31:85:
69:19:dd:fd:fb:7c:58:c9:82:c4:90:4d:0a:f7:92:
45:dc:83:48:d6:38:09:1f:a6:d7:da:0e:4c:96:f6:
2a:44:1e:f5:0c:87:32:b0:6b:22:17:9a:b9:90:49:
86:25:ea:d8:38:36:70:35:2b:17:eb:6a:b3:39:b4:
65:b6:81:34:2a:25:af:c2:70:02:eb:bd:fd:cf:b8:
02:f4:b4:95:84:34:d1:28:5e:46:18:77:fa:df:22:
01:c5:2a:26:1a:29:57:c5:54:18:f3:91:75:2e:3e:
25:12:7a:4b:7a:98:03:b0:e6:cf:8f:85:c9:8a:91:
63:99:65:7d:c2:95:9e:d4:4c:e6:85:9b:37:af:14:
0d:af:7c:9f:ac:79:45:63:32:28:3c:9f:75:36:a2:
85:f4:00:95:9f:63:19:0d:e9:73:02:00:ca:b5:b2:
9f:35:a7:c1:ae:92:ae:07:07:99:ec:1a:35:44:a9:
5c:0e:1a:6f:20:a0:0d:d9:df:a9:6e:b5:f8:fc:ca:
e2:e0:6b:06:1c:e7:54:4a:d4:a0:e8:bb:a3:b1:86:
a7:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:64:35:FE:1F:15:0F:4E:9D:E6:16:7C:F3:FF:CB:EF:EE:15:E2:08
X509v3 Authority Key Identifier:
keyid:4D:68:7D:86:28:08:22:5B:45:9F:A3:99:E6:5F:8A:06:94:69:AB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWh9higIIltFn6OZ5l-KBpRpq6M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ed3b2e-f0fe-4460-850d-5847b1469326/1/TWh9higIIltFn6OZ5l-KBpRpq6M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:3c:a3:70:79:8d:0d:6e:73:97:d8:88:95:95:66:a6:e2:20:
4b:6d:0f:fb:49:a5:9f:7a:4b:07:f0:28:f2:ce:32:22:45:a1:
48:69:3d:c5:0d:1e:58:74:92:07:7e:c2:63:f3:b9:42:f0:1d:
af:69:8b:50:c0:e4:3a:3e:e2:90:90:57:21:65:3f:be:69:45:
da:b6:c1:64:d0:2a:49:5a:dc:99:63:60:9b:b2:84:12:db:0a:
0f:d8:b7:d3:89:75:b6:7b:fb:96:45:7c:55:2d:1e:3c:d9:45:
c4:a7:2b:a8:0a:0f:8f:b7:9e:05:ac:d9:38:7a:2f:28:6e:bc:
dc:89:33:ca:3f:32:ff:6b:98:b0:e2:d1:7f:34:2c:d2:f2:32:
a6:18:0a:94:74:c7:c4:29:51:2f:b4:52:33:5c:a9:7d:b8:34:
ef:3e:97:19:ff:64:62:10:dc:4b:55:9e:82:63:31:a9:9f:13:
c4:93:d4:52:e3:1a:bf:50:c1:1b:48:cd:d3:b8:9e:35:3a:8f:
8d:ff:dc:e9:d7:90:83:04:a9:3d:25:31:07:ea:08:62:b1:d1:
24:1d:c2:00:a7:74:6a:fa:b3:5a:eb:2a:9b:2a:b6:bc:1f:b6:
e1:a1:e9:8b:f2:73:c2:2a:0d:6d:10:c7:59:06:ac:25:ab:19:
1b:81:17:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:41 2025 by rpki-client