Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
File: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft (raw, json)
Hash identifier: nv/gOcrqixI2IYCm9oq47TvqZiy0HWfyoNOF92hIh/Y=
Subject key identifier: A7:FC:D4:0F:37:D8:0A:E3:B9:59:EB:A8:5F:08:10:98:2C:4C:83:34
Authority key identifier: 4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
Certificate issuer: /CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Certificate serial: 0194BC3C1178909FDAE6594A90E05A1E657F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
Manifest number: 114F
Signing time: Fri 31 Jan 2025 12:00:40 +0000
Manifest this update: Fri 31 Jan 2025 12:00:40 +0000
Manifest next update: Sat 01 Feb 2025 12:00:40 +0000
Files and hashes: 1: DAiAlkKu2uIH3tPrZHXW35UovoY.roa (hash: ii+y3ES147W1gYE6b/JQu7S5U4fp3robU9GiKGcJGDs=)
2: Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl (hash: rGHlXW/P9YkCCU9QiwngaHMDf1chG5A0cgLyNsPrH2o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:11:78:90:9f:da:e6:59:4a:90:e0:5a:1e:65:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eee86b22c24bca7713071de95d6822c339cfd1c
Validity
Not Before: Jan 31 12:00:40 2025 GMT
Not After : Feb 1 12:00:40 2025 GMT
Subject: CN=a7fcd40f37d80ae3b959eba85f0810982c4c8334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:65:35:1c:c9:f5:ed:4e:d9:df:dd:cf:8c:f4:
4c:b0:0f:2c:72:bb:dc:df:af:11:a7:94:9b:a2:30:
de:e5:40:da:79:a4:c9:7e:49:42:24:bd:8a:75:88:
39:99:90:cb:56:86:bf:7f:00:72:cc:f4:4c:71:df:
d5:8c:33:6d:c2:12:4f:43:cd:2a:b0:48:fc:e5:27:
14:c7:65:97:d7:cd:30:f4:91:3f:0e:fc:2a:42:4d:
08:14:5e:a7:e3:27:27:f3:95:7a:28:1b:ea:cc:07:
ab:98:79:8b:6d:38:cf:1c:70:0c:35:2b:5c:d8:fb:
60:8c:e1:6c:fd:2d:1d:d9:0f:e5:8b:c3:b1:c5:50:
c0:8c:20:31:03:00:f0:16:ab:a6:c8:0f:5c:7d:04:
42:ea:ad:08:b5:4f:e5:a7:8b:88:f4:d5:3a:a6:e5:
65:58:d2:1c:77:58:72:71:eb:5d:29:3c:30:8f:0f:
c0:b7:67:cf:bb:e7:e3:62:15:be:7c:ae:28:eb:f1:
09:ae:5c:cc:b5:f6:7a:08:d7:b8:7c:a7:c5:96:21:
8e:a5:eb:c1:db:ff:14:ac:a3:09:dd:b5:e9:56:3f:
05:8a:c1:dc:cd:7e:a7:6e:ea:1f:86:08:1e:e1:78:
b9:88:ca:71:3c:b2:e2:f0:eb:98:51:61:3a:43:ff:
8c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:FC:D4:0F:37:D8:0A:E3:B9:59:EB:A8:5F:08:10:98:2C:4C:83:34
X509v3 Authority Key Identifier:
keyid:4E:EE:86:B2:2C:24:BC:A7:71:30:71:DE:95:D6:82:2C:33:9C:FD:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c68bd1-8a98-41b2-b36b-386eea8d8dd6/1/Tu6GsiwkvKdxMHHeldaCLDOc_Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:62:0b:5a:35:72:80:16:c4:fa:3f:bb:67:58:8b:08:f1:da:
a2:b4:e4:2d:9a:d6:27:aa:78:10:ad:87:d7:3c:4f:dc:63:3a:
49:1e:e9:be:4f:19:30:c9:7f:5a:85:f3:dc:c3:04:16:a6:a3:
17:b4:f1:34:0d:08:14:a5:9c:73:84:0a:a3:37:9d:6e:8d:d0:
9c:c2:46:6e:f9:0f:75:e1:56:b1:7e:b3:56:b1:55:86:fa:63:
1b:87:d5:c6:c9:cc:5f:94:43:52:33:ee:ce:2b:19:5b:df:79:
fd:c2:fb:e8:6f:ee:91:3e:fe:80:48:d1:02:2f:2d:da:cb:36:
cc:01:4e:ee:aa:75:df:74:e7:79:60:d1:82:ab:9c:00:c6:32:
00:ce:9c:df:2d:36:4e:fd:8a:b6:b6:0f:88:8e:a1:b2:90:e4:
64:5e:7c:6a:80:89:08:ab:b5:9f:12:60:d1:87:de:a8:b2:20:
9f:d1:04:3e:88:b2:dc:12:5c:98:71:b4:bd:3e:65:75:08:78:
e0:c0:76:bd:18:73:c1:42:bc:9d:42:a1:ac:b6:c7:96:a9:ed:
01:75:30:e6:9e:5b:fe:28:31:7b:3e:ff:fe:b3:46:6a:3c:2a:
fb:ce:fc:4c:63:57:f9:0c:74:62:cf:48:0c:0c:c3:9c:67:60:
3d:94:0a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:34:16 2025 by rpki-client