Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
File: TzVzzX1WHNN-DzMfbKON6SAgQrI.mft (raw, json)
Hash identifier: f65LIdfP3jUqxCVDA2zmzMwqVRbQ5bRbS45BdlcfP3s=
Subject key identifier: 3C:C9:D4:66:FF:9B:7B:21:25:0C:DA:D6:B3:D1:85:C5:91:71:DC:98
Authority key identifier: 4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
Certificate issuer: /CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Certificate serial: 0194BBCEB3550F86D10EF1DE50542450C445
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
Manifest number: 0940
Signing time: Fri 31 Jan 2025 10:01:13 +0000
Manifest this update: Fri 31 Jan 2025 10:01:13 +0000
Manifest next update: Sat 01 Feb 2025 10:01:13 +0000
Files and hashes: 1: TzVzzX1WHNN-DzMfbKON6SAgQrI.crl (hash: PlejLaqJ+Y5WqG1p3kNi0G/sxAHh/OFOcqLUhb14yxo=)
2: gNvVla9QTcgfrH76gu8sofAf_w0.roa (hash: OGSKcOJHQa1w9k6JZ39A0hFW39yZH1IaBP1pJ+a1YHw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:b3:55:0f:86:d1:0e:f1:de:50:54:24:50:c4:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f3573cd7d561cd37e0f331f6ca38de9202042b2
Validity
Not Before: Jan 31 10:01:13 2025 GMT
Not After : Feb 1 10:01:13 2025 GMT
Subject: CN=3cc9d466ff9b7b21250cdad6b3d185c59171dc98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:47:e3:be:e8:94:12:99:3c:65:f6:37:cc:61:
2d:a1:47:8e:66:33:68:50:54:1a:58:c4:c6:eb:c4:
ce:72:29:69:f5:55:ed:2c:af:76:d3:7f:99:23:c0:
23:a7:39:d6:12:42:98:50:92:be:b3:db:68:b0:74:
bd:16:c5:c7:96:06:37:0f:7f:7b:28:12:ce:39:bb:
b3:a3:c8:a6:93:c8:df:62:1b:74:4a:c2:da:75:02:
6f:df:12:ea:53:9c:82:24:92:b2:af:22:e5:fb:32:
c8:92:aa:53:52:6f:43:88:68:a6:07:1e:90:46:f2:
85:c1:6a:00:8e:f8:c7:48:c7:4b:dc:95:fd:11:c0:
c0:91:8c:76:50:05:96:af:22:7a:53:73:11:dd:e2:
1c:5c:9f:a4:7d:43:5a:10:d3:b1:a4:4e:f3:99:a3:
49:ee:c1:9a:8f:d3:7d:e2:32:23:3f:10:78:77:de:
12:c9:23:61:3d:f0:b0:21:84:53:c5:b5:60:ff:af:
ac:7f:6f:ad:52:bf:d0:be:d3:ce:ed:89:63:41:0e:
af:f5:8b:3a:88:4e:11:ee:7a:ca:e4:96:4b:75:86:
94:92:b8:9d:66:2a:4d:01:10:bd:7c:b6:77:98:c1:
e7:6f:7f:64:27:b9:df:89:87:32:79:ec:4e:64:3a:
01:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C9:D4:66:FF:9B:7B:21:25:0C:DA:D6:B3:D1:85:C5:91:71:DC:98
X509v3 Authority Key Identifier:
keyid:4F:35:73:CD:7D:56:1C:D3:7E:0F:33:1F:6C:A3:8D:E9:20:20:42:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzVzzX1WHNN-DzMfbKON6SAgQrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/ccf3a5-030d-4b54-8079-8a5f169a5ae7/1/TzVzzX1WHNN-DzMfbKON6SAgQrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:e2:48:20:27:71:0e:9b:39:e5:34:d2:89:77:30:a4:da:5f:
ea:73:1d:4d:e7:29:ff:22:5d:62:f6:4a:b5:1b:05:0a:a2:5a:
53:bb:5d:dc:74:8e:9c:f4:17:63:ac:62:3e:dc:fe:13:18:dc:
e6:d0:fd:5a:ac:c2:48:8e:e4:7c:0d:12:dd:24:cf:a0:c2:27:
70:81:5b:e8:2a:e3:d4:6a:af:86:53:1e:43:97:11:3c:27:87:
36:6b:bc:51:8b:77:a8:61:4b:57:c4:65:e9:e0:07:fb:5a:bb:
8c:a7:25:6f:19:3f:f7:9a:f2:ed:73:29:53:73:ba:f2:c8:f2:
54:c5:f0:33:a5:fd:7d:d9:64:f1:8e:64:df:8c:7e:aa:60:dc:
e0:89:3c:bd:90:ce:ee:24:30:fe:eb:95:aa:0c:34:d4:98:82:
fc:aa:60:47:de:f5:86:17:bc:4a:47:f7:22:37:99:a4:d2:e3:
0e:7b:69:dc:ec:70:b1:5f:27:23:37:c8:72:6e:49:11:5d:0b:
87:55:07:49:8d:29:88:c1:ac:e1:9a:ca:5e:22:84:bf:ef:78:
18:6a:b6:f0:62:b3:d5:1b:c8:4a:ab:9c:24:2c:a1:7a:9a:45:
0b:96:59:59:e2:8b:bb:65:6f:53:b4:7d:fd:14:ea:2c:f9:79:
64:e6:2c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:59 2025 by rpki-client