Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.mft
File: ThDafpumSZaP9RoB5aLULyK35N0.mft (raw, json)
Hash identifier: qS3Kqhrj8tQnqL0h+jvtN9m4yxh08BbGPrQqU/T+xbw=
Subject key identifier: 0F:E6:D8:BC:15:53:CE:E3:76:5F:FC:21:1D:0C:19:A6:D8:42:C7:3E
Authority key identifier: 4E:10:DA:7E:9B:A6:49:96:8F:F5:1A:01:E5:A2:D4:2F:22:B7:E4:DD
Certificate issuer: /CN=4e10da7e9ba649968ff51a01e5a2d42f22b7e4dd
Certificate serial: 0194BBCE489B45E083A8D25F9CEBF203AC72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ThDafpumSZaP9RoB5aLULyK35N0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.mft
Manifest number: 06CF
Signing time: Fri 31 Jan 2025 10:00:45 +0000
Manifest this update: Fri 31 Jan 2025 10:00:45 +0000
Manifest next update: Sat 01 Feb 2025 10:00:45 +0000
Files and hashes: 1: ThDafpumSZaP9RoB5aLULyK35N0.crl (hash: z86HOqXnhr/Wr2oUrINb5UHx/3y5bHWC1KVlEgrZgm4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:48:9b:45:e0:83:a8:d2:5f:9c:eb:f2:03:ac:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e10da7e9ba649968ff51a01e5a2d42f22b7e4dd
Validity
Not Before: Jan 31 10:00:45 2025 GMT
Not After : Feb 1 10:00:45 2025 GMT
Subject: CN=0fe6d8bc1553cee3765ffc211d0c19a6d842c73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:96:c2:68:9b:7a:72:39:4b:52:88:10:57:a1:
ea:45:04:77:a1:e7:6e:d6:2b:9f:8e:3c:75:cb:07:
26:47:02:52:38:b6:23:29:e0:c7:f3:b5:7a:5a:4e:
9d:d3:57:0a:74:b1:a7:73:79:dc:94:d9:75:53:93:
77:da:9e:da:91:7d:4c:7c:86:9a:b5:a6:2b:35:e6:
13:dd:96:9e:6c:75:8e:38:5d:80:ba:58:19:1f:e0:
09:66:a0:d2:ca:fb:c0:a4:e8:d1:5f:73:76:71:8e:
c0:b0:2f:4e:c2:33:ea:9a:2c:14:d7:f9:85:07:32:
9f:16:5d:d1:15:51:fe:41:08:a8:d3:d0:36:cb:44:
17:a3:d1:95:ed:db:71:99:fb:d7:b0:5e:3a:9b:1e:
06:5c:e1:51:19:f6:cb:f0:6f:8b:bd:46:67:89:fe:
c7:33:6b:4e:03:18:86:10:cd:22:b7:16:1b:33:2d:
9f:f6:99:9c:69:db:6d:3c:06:b4:87:eb:02:ac:bf:
1d:6b:f0:fd:53:82:a6:f6:71:af:d4:b3:10:c9:c4:
12:39:04:86:b0:d6:f2:3e:a8:2b:36:cf:26:36:50:
04:03:f6:53:fb:1e:99:14:4e:ea:33:8c:ae:d4:a1:
9c:24:ef:21:f1:ac:d3:b5:c6:f2:98:55:6a:3c:9e:
ba:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:E6:D8:BC:15:53:CE:E3:76:5F:FC:21:1D:0C:19:A6:D8:42:C7:3E
X509v3 Authority Key Identifier:
keyid:4E:10:DA:7E:9B:A6:49:96:8F:F5:1A:01:E5:A2:D4:2F:22:B7:E4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ThDafpumSZaP9RoB5aLULyK35N0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e35132-4b64-42e7-b778-32cd6668be86/1/ThDafpumSZaP9RoB5aLULyK35N0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:36:36:0c:ad:ec:cb:cd:cb:12:84:0a:7a:14:8b:0d:7e:1d:
27:de:13:6c:19:51:05:b1:b4:9f:ee:b8:72:ee:46:6e:3a:32:
8c:4d:2a:75:34:44:67:19:e7:26:42:05:6e:4f:2a:81:fb:14:
06:c6:e3:de:35:75:a1:54:53:f2:6f:08:ab:ad:9f:af:80:4e:
95:52:98:c8:3d:da:9d:2c:c0:41:fe:5d:f7:e2:67:52:ea:f6:
2c:58:42:a3:3f:7d:24:21:48:31:70:ec:08:bd:1a:11:6e:72:
7b:bd:f5:ec:8d:fc:fe:72:f6:d7:3a:14:17:44:30:17:9f:56:
06:9d:e5:0c:32:2b:05:39:09:6c:aa:f6:80:f5:51:98:d7:f2:
ad:c6:52:7a:be:57:ca:96:ef:11:20:f1:cf:93:50:73:e6:86:
2c:14:fc:b4:c1:b0:f5:ab:13:af:75:4c:df:3f:19:e0:0e:26:
56:e4:1e:5d:55:f1:6c:40:81:34:c5:7e:1e:6e:5c:4c:7b:4c:
11:02:eb:a8:17:f3:3c:f6:f7:d3:c0:12:ea:d8:9d:69:82:25:
8c:58:4c:a8:e7:70:00:e7:04:6a:76:99:44:39:79:9f:21:42:
bf:df:04:65:05:95:77:72:ad:50:10:fb:3b:49:2d:1e:f6:41:
6e:23:51:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:14:45 2025 by rpki-client