Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
File: tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft (raw, json)
Hash identifier: 7nopkqgrB0/JxZj2y2dikoTgkDGDON819uso+1ec0RA=
Subject key identifier: 73:79:AD:BA:2D:75:5F:14:AE:24:EB:C4:84:65:CA:6C:2A:70:24:D4
Authority key identifier: B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB
Certificate issuer: /CN=b539831835c87c7501f6c37cb48e60a795a394bb
Certificate serial: 0194BBCE4C6ED8BAC4CFBD0DF7240EF527E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 10:00:46 +0000
Manifest this update: Fri 31 Jan 2025 10:00:46 +0000
Manifest next update: Sat 01 Feb 2025 10:00:46 +0000
Files and hashes: 1: tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl (hash: IV6Zur5UiPE8VOUf22OclxMF3vnLpRhdrHXdhp8tdoc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:4c:6e:d8:ba:c4:cf:bd:0d:f7:24:0e:f5:27:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b539831835c87c7501f6c37cb48e60a795a394bb
Validity
Not Before: Jan 31 10:00:46 2025 GMT
Not After : Feb 1 10:00:46 2025 GMT
Subject: CN=7379adba2d755f14ae24ebc48465ca6c2a7024d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:75:2b:fe:22:bf:81:b7:73:d1:45:e3:24:
7d:9a:45:d3:e8:a2:34:eb:29:98:1d:73:08:66:4b:
62:7e:fc:0f:ca:e9:b7:9e:08:71:10:5c:00:da:07:
18:2c:30:5f:c4:3c:63:6b:d5:78:00:6f:6c:99:91:
f0:a1:61:0e:4f:9e:c9:33:bb:5f:54:41:29:96:20:
80:6f:e7:4d:3f:13:06:7c:1a:53:b3:17:9a:c9:6a:
4d:e8:41:57:7c:3a:40:9d:57:c2:c7:7a:48:e1:26:
3a:59:78:58:8a:93:03:68:29:2d:71:55:1d:14:87:
74:95:00:f7:26:eb:3e:07:af:e7:7a:1a:d1:d7:a0:
3e:8d:42:c3:50:67:93:e5:a0:5a:ff:69:59:60:fd:
d2:ac:59:78:9a:0d:d2:92:13:e4:d0:06:e9:9c:60:
9a:49:1d:bc:a2:bd:5a:45:24:ac:cd:9d:96:dd:51:
f5:f3:8a:d7:b2:29:d0:5c:f6:06:6e:6d:4d:4f:02:
b7:36:2a:2b:12:34:4c:4f:ae:73:5e:be:bc:99:e4:
3f:8c:fd:6c:af:72:83:a8:b2:47:3e:51:29:20:79:
c6:72:48:0f:2b:f9:85:61:d9:b6:80:aa:0d:8d:5e:
ac:2f:a5:d0:23:6c:04:8b:ed:02:36:4a:fb:2e:2c:
b4:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:79:AD:BA:2D:75:5F:14:AE:24:EB:C4:84:65:CA:6C:2A:70:24:D4
X509v3 Authority Key Identifier:
keyid:B5:39:83:18:35:C8:7C:75:01:F6:C3:7C:B4:8E:60:A7:95:A3:94:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTmDGDXIfHUB9sN8tI5gp5WjlLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e703c8-465f-47a5-952c-495e188701b6/1/tTmDGDXIfHUB9sN8tI5gp5WjlLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:ad:c6:70:8a:79:e9:44:39:4d:1a:ed:11:25:ca:90:ce:18:
36:ec:8d:fc:89:79:99:7e:42:66:e8:ac:c0:bb:52:b6:db:2c:
50:c7:e2:56:b0:f7:d6:70:9a:21:71:1d:27:6a:35:13:62:93:
dd:f1:0b:35:c4:77:64:0f:c7:0a:04:53:b3:9e:2f:31:d5:2b:
53:b0:ef:9f:e8:75:3f:cd:39:aa:da:56:61:71:0a:61:ca:f4:
4e:1e:f1:43:7f:59:d0:bf:a3:01:93:21:c0:70:10:04:7c:b5:
37:c2:4b:62:0e:75:63:3e:a2:9b:4b:0c:e8:73:fe:f1:69:e4:
76:22:1a:f5:33:90:c3:18:be:2b:08:98:27:6c:0c:06:9c:70:
19:de:f1:8f:a0:fa:fa:53:ce:bb:74:18:18:da:70:67:a6:7c:
30:c6:ac:b8:41:7a:09:88:77:35:af:bf:ee:7b:9a:28:15:8f:
e4:26:71:c8:dc:1c:2d:f3:ef:6b:d7:91:f8:01:ad:89:b3:33:
30:4b:70:5b:62:aa:b9:93:1c:60:78:98:9e:fd:4b:55:7c:44:
d2:6b:b9:48:1c:c8:1f:a3:1c:02:3f:9f:cd:2c:08:93:d0:7d:
9c:ac:fa:23:26:c9:aa:5d:8b:0d:dd:4f:96:93:34:87:3b:13:
76:95:d8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:34:43 2025 by rpki-client