Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
File: tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft (raw, json)
Hash identifier: Fwp3N6Sc9xxvEPUo0U3PqXnlzn8oqJ9hTYoOZ9R7ZvY=
Subject key identifier: BD:6B:D2:82:A2:12:81:5C:88:16:65:38:FB:9D:3F:98:E8:60:3C:C3
Authority key identifier: B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
Certificate issuer: /CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Certificate serial: 0194BBCDE6EFD9EFC44F07A4AEE8AECDC52B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
Manifest number: 0677
Signing time: Fri 31 Jan 2025 10:00:20 +0000
Manifest this update: Fri 31 Jan 2025 10:00:20 +0000
Manifest next update: Sat 01 Feb 2025 10:00:20 +0000
Files and hashes: 1: tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl (hash: tRC/eXTcIwlVPyThtoaG7oFQR+t5xGhYVJk+eo8UkDA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:e6:ef:d9:ef:c4:4f:07:a4:ae:e8:ae:cd:c5:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66c4985cd60643220e064a2e114d78f5b039c2b
Validity
Not Before: Jan 31 10:00:20 2025 GMT
Not After : Feb 1 10:00:20 2025 GMT
Subject: CN=bd6bd282a212815c88166538fb9d3f98e8603cc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:23:0e:19:1e:c8:62:67:1b:0d:91:85:e2:2e:
63:95:11:9c:26:04:80:14:4d:cb:83:5b:4b:00:49:
dd:9c:7e:ed:9e:4b:24:af:79:5a:37:cd:e3:f5:bc:
98:0b:b3:9e:bf:30:19:8b:38:a4:28:ee:3c:b8:04:
90:93:9b:30:28:cf:17:3b:e8:d8:35:66:45:ef:a2:
7d:11:30:c8:18:75:b3:1b:c5:ee:dc:c5:f1:83:5d:
e2:f0:d6:28:12:a3:83:dc:ab:9a:c0:2c:ac:83:e9:
52:36:35:30:54:27:3f:09:c8:cc:e9:75:f4:70:83:
7c:89:8d:aa:2b:27:f1:82:62:bb:39:f7:90:83:9b:
79:6b:25:8e:51:a4:80:6c:af:0f:a3:e3:5f:51:72:
c8:67:df:11:96:34:5d:cb:fa:01:9a:27:e8:54:2b:
b3:a7:7f:b8:c0:83:fc:91:4a:bf:4e:45:e3:f6:c7:
0e:21:1e:90:04:88:b7:f7:08:c2:f7:0b:d3:0c:cd:
75:2c:b1:0d:84:7a:2f:40:ae:03:db:26:22:5e:42:
e9:52:8e:40:18:97:84:33:2a:b1:91:fd:2e:8d:b4:
e6:07:5a:b4:a4:fc:16:fc:24:45:c7:a2:53:89:84:
5d:b9:a5:7a:f7:c3:a0:fc:3a:3f:18:23:4e:dd:3f:
e0:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6B:D2:82:A2:12:81:5C:88:16:65:38:FB:9D:3F:98:E8:60:3C:C3
X509v3 Authority Key Identifier:
keyid:B6:6C:49:85:CD:60:64:32:20:E0:64:A2:E1:14:D7:8F:5B:03:9C:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmxJhc1gZDIg4GSi4RTXj1sDnCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/1d0c39-2555-468f-be66-ff9bab90af18/1/tmxJhc1gZDIg4GSi4RTXj1sDnCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:09:ed:05:72:30:2c:78:1f:e2:d2:dd:22:31:cd:62:04:2b:
8c:05:fa:68:71:32:2f:cd:be:a3:ca:d1:17:57:06:fe:8b:e5:
d9:83:57:c8:d3:2b:66:07:a3:d2:19:36:ce:c2:f8:a3:13:fc:
66:51:d8:1f:7e:97:82:3f:78:f8:5b:c4:5a:cb:c7:ef:33:09:
d7:11:39:85:7b:9b:3d:d3:73:a5:b7:9b:c6:a6:6a:a7:f2:42:
88:9c:9f:91:40:95:0d:23:40:62:8d:43:d7:ff:b7:1c:48:41:
b2:96:c0:1d:20:b3:26:92:73:f1:a4:c5:38:df:09:95:38:40:
31:6d:12:49:68:33:7e:bc:36:92:8e:23:72:6e:4c:06:a4:6e:
89:9b:a3:97:82:b6:35:3d:95:8d:fb:b5:e1:22:7d:e9:9b:3b:
aa:94:b9:2a:a9:d5:ee:73:2e:6a:ce:d5:49:b9:6a:51:da:84:
89:70:2a:eb:a4:d3:ff:be:38:d2:78:55:58:24:04:39:ab:09:
c1:04:e9:91:0c:80:25:35:30:16:20:07:53:de:7f:db:96:75:
f5:da:f9:16:0f:a6:9c:24:d0:3b:08:ee:6c:fb:35:25:cf:d1:
4d:e3:99:12:23:f4:57:7a:85:fe:ef:3d:89:7b:28:29:0c:4b:
2d:b6:ec:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:23 2025 by rpki-client