Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
File: T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft (raw, json)
Hash identifier: 3/WUZDq+f66Q6yyuDsFe9SDorlHhw6bRYHi+xttPlP4=
Subject key identifier: 4C:41:5D:B7:FD:38:3E:04:18:55:4B:86:45:6F:CD:B3:5F:8D:46:D6
Authority key identifier: 4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
Certificate issuer: /CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Certificate serial: 0194BBCDF4920A4FF9D9A838259B8683E480
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl (hash: /L1qq4CE7/rEJzbCD2B8Q61JoBTdESp9Ri897WHpeMo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f4:92:0a:4f:f9:d9:a8:38:25:9b:86:83:e4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fe319d3f4ec9a760df774f01cfb71547e163f3c
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=4c415db7fd383e0418554b86456fcdb35f8d46d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3b:ec:73:f4:d9:f6:ec:28:bf:6a:a2:e7:ca:
19:bb:2c:d4:80:86:05:0a:37:73:b0:2b:fa:0e:76:
1d:b9:18:d8:a0:80:78:82:6a:45:94:f4:32:e8:06:
72:9c:99:46:84:e0:87:a5:b8:87:7d:7c:3f:9f:73:
bf:d1:8b:a4:6b:c4:04:73:dc:c8:fa:86:59:85:97:
42:a7:4f:87:26:81:7e:fa:5f:8a:cc:57:ee:5a:78:
63:5a:dd:47:9e:3a:9e:cc:cf:22:29:61:e8:d7:ec:
fb:7d:81:cb:a1:6c:fd:13:03:b1:47:07:10:59:01:
a9:bd:36:49:51:ec:ef:4d:28:80:b5:c9:ee:4e:01:
a9:3b:ca:c6:21:95:2d:40:c3:71:b1:62:df:23:d2:
d0:ed:01:ce:6c:f2:19:77:72:24:e7:80:50:14:31:
ef:3c:b5:d6:b5:ab:b9:87:36:44:73:59:5f:27:c2:
7c:bc:57:14:00:46:c2:f8:2e:21:f2:81:58:5b:bd:
14:fc:c7:6e:91:d7:a4:15:6c:81:83:74:a5:5f:96:
81:fa:e6:0c:6d:d3:07:39:08:80:2b:a8:50:21:6a:
0f:ff:bf:94:bb:ba:42:ea:85:84:86:71:c1:f3:46:
b1:cc:0e:0d:a0:6f:65:78:1f:4d:ca:5e:c8:b6:72:
3e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:41:5D:B7:FD:38:3E:04:18:55:4B:86:45:6F:CD:B3:5F:8D:46:D6
X509v3 Authority Key Identifier:
keyid:4F:E3:19:D3:F4:EC:9A:76:0D:F7:74:F0:1C:FB:71:54:7E:16:3F:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-MZ0_TsmnYN93TwHPtxVH4WPzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/21558b-6669-4fd7-847e-26d92c428ba2/1/T-MZ0_TsmnYN93TwHPtxVH4WPzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:5d:d8:fe:10:01:ed:21:51:23:ae:e2:c9:15:72:98:6d:d6:
af:74:42:d7:07:6f:ac:69:42:ab:00:ed:a8:de:66:4c:68:ab:
a6:31:d9:3f:71:85:e2:af:39:33:45:ba:b1:f7:7f:b2:d6:ac:
a9:04:5d:57:4e:1b:50:01:05:8b:56:5e:8d:12:a7:9c:f2:a0:
1b:3e:7e:7e:4c:03:c3:fe:0a:8a:65:2d:58:95:62:d0:60:bf:
94:7f:41:d8:cf:92:2c:dd:e3:ce:cb:88:11:72:76:97:e6:5a:
72:b8:ba:2c:a4:36:f6:42:73:9c:d5:0e:54:c6:e6:ae:cb:99:
6c:32:8a:29:f9:55:6a:5e:54:ce:bf:64:c7:11:b7:e1:ff:c9:
32:03:ea:1d:1b:ba:54:f6:2b:e9:ff:c2:38:22:72:42:54:d3:
3d:2f:b7:42:af:f9:80:92:99:1c:4d:27:34:75:3d:bf:bb:05:
e0:79:ae:ff:da:d4:76:14:fd:d5:c5:a6:ad:60:26:77:3b:51:
46:cf:37:25:44:76:7c:69:f4:3a:8c:9e:18:f8:79:ad:5a:63:
27:c5:7b:73:25:72:5f:ff:ad:f8:98:01:5b:5c:db:1f:ef:a1:
5c:dc:b6:bb:8b:b1:0b:85:d6:9c:f2:b1:9f:f8:87:9d:b2:48:
85:cb:df:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:36:20 2025 by rpki-client