Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
File: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft (raw, json)
Hash identifier: 5uY2y80ar7RAYvu6UcIra5jrBQEzv4ftyB/xiCedrr0=
Subject key identifier: 6B:4D:0D:E9:88:4A:82:7F:01:85:53:E0:4E:FC:64:50:1F:07:E1:65
Authority key identifier: 4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
Certificate issuer: /CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Certificate serial: 0194BC3C41DDF4D7656EC3AFD156D1A056E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
Manifest number: 1327
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl (hash: 3wowgG/icw4FtkS7yQnU1hQnf0j5PBucHQqOBHrCVmI=)
2: gLQdUENVXGMq4s0E2-s0exbZJTQ.roa (hash: qPXxxb8wbYIQ57DIruVSOJKF4C7lGWbN67ERbUHU99A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:41:dd:f4:d7:65:6e:c3:af:d1:56:d1:a0:56:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de4f96771d91f87c21be9f00d120327f5bbf2ea
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=6b4d0de9884a827f018553e04efc64501f07e165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bf:c8:2a:7b:3c:eb:25:da:50:9d:46:69:e0:
b7:e2:c0:cf:d2:b6:3e:9a:a0:5c:93:fe:3a:33:2c:
a4:38:35:30:0c:a2:63:23:a3:23:1f:9d:fa:27:3b:
ca:90:0b:b2:8c:7b:27:a3:60:25:74:a6:78:d1:d2:
ba:e5:d6:d7:b0:6d:4e:c1:c1:31:a5:da:eb:52:03:
ef:6a:72:03:b5:ea:a7:e5:a5:fa:f4:4b:d0:76:11:
42:2a:d8:70:f2:ff:90:36:1f:cc:bb:e6:83:89:56:
6b:5d:1f:55:43:b6:d7:1a:4b:e4:6e:7d:f6:3e:4d:
a1:a8:f3:93:b2:51:41:50:91:20:cc:6b:a4:cc:12:
dd:2e:27:cf:b3:c9:71:70:e9:c5:57:b7:02:4a:cc:
60:f6:77:65:51:13:37:bb:51:0f:9c:f1:78:39:6a:
d6:2b:1a:d8:d5:00:ce:d3:fb:4c:f6:50:88:38:c7:
f5:e4:67:d3:9b:43:2d:2b:f1:32:e0:8a:28:b3:0b:
32:0f:e0:5f:6a:08:6d:2a:fd:3e:e6:44:9b:2e:01:
1b:98:4e:39:f2:9d:31:a4:cb:2e:6c:98:dc:2c:3e:
dd:46:03:c4:ce:21:98:25:9b:7e:45:76:8a:54:dd:
78:09:17:03:61:f9:fc:f8:02:25:e5:ef:28:ee:9c:
d0:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:4D:0D:E9:88:4A:82:7F:01:85:53:E0:4E:FC:64:50:1F:07:E1:65
X509v3 Authority Key Identifier:
keyid:4D:E4:F9:67:71:D9:1F:87:C2:1B:E9:F0:0D:12:03:27:F5:BB:F2:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/02f9bb-6e6a-478a-bac8-5911fe63af79/1/TeT5Z3HZH4fCG-nwDRIDJ_W78uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:68:10:be:5b:2a:07:10:b4:e1:d7:b4:e2:46:ef:68:6f:70:
c5:60:f4:ce:23:d5:64:f7:fa:af:6e:a8:0d:44:84:a5:de:00:
0a:06:65:ce:64:78:9d:6e:7a:45:46:ca:51:ed:c3:1a:c2:fe:
ed:86:d0:12:c4:a5:1b:f9:05:8e:57:40:a5:29:35:1b:d1:16:
11:ef:65:cf:1f:49:57:fc:71:28:8e:0c:cf:24:40:05:54:55:
aa:27:5d:86:b9:71:60:2e:35:9e:53:db:b7:a9:0e:f2:a4:45:
b7:14:57:38:e8:f2:01:5a:f3:a2:2a:7c:fe:28:a7:a8:35:d4:
4c:5e:4b:77:f8:a7:21:a6:b0:67:72:9a:4a:cb:38:36:f9:3d:
d8:62:d8:d1:87:24:84:f9:9a:0a:20:9a:d7:4a:4b:c7:e4:eb:
31:9d:b6:84:90:7d:7f:b6:9f:34:8d:ed:94:37:ed:c8:7e:5c:
5d:d1:e1:e0:14:1b:90:a2:51:18:ad:ce:41:90:18:3b:72:9a:
a4:0d:5f:90:dd:f0:2e:2f:82:32:20:5f:43:37:39:d5:fa:0c:
3e:6f:46:a1:c7:a0:29:ce:9c:84:24:e5:f4:74:75:f7:c8:45:
75:90:16:20:af:19:a0:4c:0a:c5:ea:29:5b:38:8c:c4:d5:aa:
28:33:dc:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:11:02 2025 by rpki-client