Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
File: ta_Rv-OIQKaf9WcdWb89siuY3eI.mft (raw, json)
Hash identifier: POs3zigsZaBcmotGclsiUNIstj0dBQPyJ/3Ys5dxz8g=
Subject key identifier: CD:A1:DC:67:CB:95:AD:70:92:E6:1E:85:BA:04:D3:A8:DE:84:40:85
Authority key identifier: B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
Certificate issuer: /CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Certificate serial: 0194BC3BD3E43ED20921023BF459E3F002C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
Manifest number: 016D
Signing time: Fri 31 Jan 2025 12:00:24 +0000
Manifest this update: Fri 31 Jan 2025 12:00:24 +0000
Manifest next update: Sat 01 Feb 2025 12:00:24 +0000
Files and hashes: 1: ta_Rv-OIQKaf9WcdWb89siuY3eI.crl (hash: W6SLWhA0NReVqtDW+MPgMqwGfpFK2PMollz6/gq7es4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:d3:e4:3e:d2:09:21:02:3b:f4:59:e3:f0:02:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afd1bfe38840a69ff5671d59bf3db22b98dde2
Validity
Not Before: Jan 31 12:00:24 2025 GMT
Not After : Feb 1 12:00:24 2025 GMT
Subject: CN=cda1dc67cb95ad7092e61e85ba04d3a8de844085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:94:2d:ce:b2:af:b9:ea:db:21:b0:af:93:52:
fa:05:05:c8:ca:ec:a6:ed:b0:fe:ea:72:6c:4c:ee:
9d:db:38:d3:12:f5:36:1a:e8:94:3a:37:65:d0:3e:
cd:9b:95:40:a2:c9:37:cf:26:0d:b7:db:f1:5d:e0:
8d:49:81:f9:08:2c:f7:7a:ac:92:6f:b2:f4:b5:4c:
53:29:fc:71:76:c3:16:09:be:a1:af:23:9d:c1:5e:
9d:1d:7c:fe:f0:5a:eb:81:0c:82:53:fe:a4:af:78:
b7:32:e9:3a:ab:4c:93:83:dc:39:de:77:27:35:44:
df:f5:9b:8a:02:30:08:35:ee:8b:82:6d:c3:fd:41:
4e:88:b8:89:82:25:15:30:01:9d:f3:6d:01:94:46:
87:3b:d2:a6:bf:44:f7:f0:9c:cb:f0:e2:24:91:3a:
6c:49:1d:f5:73:26:a8:17:e1:cc:09:05:1d:fe:d0:
f0:f3:a1:46:14:d6:ac:ab:61:32:1a:af:3f:09:d7:
0e:5a:71:11:b6:fb:de:66:0f:c9:2f:89:91:2d:c5:
0b:02:17:d9:40:f3:b2:a9:0a:0b:94:9b:65:48:6e:
b2:12:6f:01:0b:ed:b7:da:f1:0d:40:28:d1:d4:31:
db:58:54:c9:b3:09:32:dc:a9:20:c5:50:95:b2:e3:
1b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:A1:DC:67:CB:95:AD:70:92:E6:1E:85:BA:04:D3:A8:DE:84:40:85
X509v3 Authority Key Identifier:
keyid:B5:AF:D1:BF:E3:88:40:A6:9F:F5:67:1D:59:BF:3D:B2:2B:98:DD:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta_Rv-OIQKaf9WcdWb89siuY3eI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e74848-9c82-4855-a8a9-37ef92d07123/1/ta_Rv-OIQKaf9WcdWb89siuY3eI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3b:f9:9b:c1:a5:4d:4a:f0:b7:26:47:1b:b0:c0:ab:c9:f9:
f2:db:42:74:19:83:86:ec:47:9f:2f:5e:d6:6b:c0:55:e0:cf:
5e:2d:5f:2e:0f:7f:82:6c:ab:98:73:8b:21:09:d0:93:10:90:
40:f3:0c:3b:7c:6a:9a:e6:b5:d8:ec:ae:31:64:f3:9d:0d:c3:
f6:c4:43:64:27:4f:43:3a:24:2e:cd:43:9e:a2:2f:25:e1:fc:
14:ff:bb:85:11:fe:99:d5:05:55:74:81:18:45:80:bb:42:97:
d7:31:d7:85:cd:57:be:cc:37:dc:b4:8b:9b:4b:96:eb:38:3d:
56:ab:d2:31:d9:4c:35:a0:7b:04:fa:b6:0d:92:57:1d:82:56:
c0:70:52:39:30:db:48:3f:96:5d:05:bc:84:aa:bf:0f:b8:a3:
fa:ac:4d:17:e6:54:c1:b0:01:f2:c6:54:c5:26:94:47:ff:6a:
22:b0:ac:f5:68:2c:80:12:f4:48:a6:e6:75:5c:e5:f4:3f:19:
d5:d5:f4:d0:c1:9d:9c:14:09:d8:4f:d8:35:05:4c:b1:59:3a:
a0:c7:1a:3c:6b:18:47:f3:3f:8b:2b:bd:cf:38:7f:59:0b:01:
b5:ac:b5:68:7a:8c:8d:15:24:55:7d:a5:af:32:5c:93:da:ed:
18:5b:fa:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:20 2025 by rpki-client