Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
File: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft (raw, json)
Hash identifier: eMaKL1JmFjLPdJPI5+C2mYzr6LF6lUY7bLdG9x2REd4=
Subject key identifier: CD:58:E0:17:16:99:DA:A7:A5:98:0E:20:E2:24:39:32:47:4E:62:F8
Authority key identifier: B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33
Certificate issuer: /CN=b5d87fdc272ae058618786e741707557bf4e1a33
Certificate serial: 0194BD4EB26E53633B74090B0019C4A6E90B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
Manifest number: 01C6
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: qQy9nbutIB840i93Gc6Vw1Yt6lA.roa (hash: 65g5a8+QhFyUXfSxWzLsMCFvk+W/xMxKhOR8kW2aeMw=)
2: tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl (hash: YljXZ/9MkxNuQTH8PXQxXoyAibgTFPWLYqhsihDFzGM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b2:6e:53:63:3b:74:09:0b:00:19:c4:a6:e9:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5d87fdc272ae058618786e741707557bf4e1a33
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=cd58e0171699daa7a5980e20e2243932474e62f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c5:79:0f:58:76:fc:84:fe:e2:6f:38:e3:41:
59:30:0c:36:52:8b:4c:54:88:d3:3c:4c:fa:b8:97:
0a:9c:38:26:63:15:6a:ac:af:fc:a4:6c:89:d2:ad:
a4:c3:92:9d:86:05:77:ff:19:f0:fa:2f:f1:9c:92:
f3:ed:fe:f6:8c:1b:40:9e:e9:75:7c:7c:a6:05:f8:
44:33:6c:5a:7f:66:2c:a4:cb:eb:a2:c6:51:43:4a:
49:3c:d1:64:91:ca:a3:8c:9f:c9:4d:13:7e:f4:21:
03:2c:e1:63:7e:49:a7:fa:28:64:e4:3d:59:29:8b:
f9:73:9c:a6:38:fc:5f:30:96:48:eb:09:64:72:cb:
2b:79:9a:b9:95:cd:ad:a9:e9:19:2b:14:9d:c5:78:
14:4c:ef:60:2a:ca:71:47:7b:a5:fb:11:22:c8:ac:
f0:5a:18:20:67:4b:c4:2e:e6:db:75:3a:a8:d1:8d:
9c:20:20:e3:da:26:f0:fb:d2:ea:f9:71:3b:06:b5:
e7:a3:32:b2:96:1e:dc:f5:02:ae:8a:f6:33:0f:40:
54:2b:8d:3f:ff:1c:1d:60:4e:39:fd:24:d3:ae:48:
0b:59:6e:15:3a:9e:f4:03:be:4c:05:72:c3:5c:ca:
63:d7:0f:ae:7a:50:e7:68:42:5e:39:ab:ff:a7:9c:
57:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:58:E0:17:16:99:DA:A7:A5:98:0E:20:E2:24:39:32:47:4E:62:F8
X509v3 Authority Key Identifier:
keyid:B5:D8:7F:DC:27:2A:E0:58:61:87:86:E7:41:70:75:57:BF:4E:1A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/670b10-10eb-476f-84ef-156eda2b55b6/1/tdh_3Ccq4Fhhh4bnQXB1V79OGjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:55:25:76:b2:02:58:6e:31:f2:75:5d:60:d4:bb:95:aa:53:
3f:f0:78:f7:5f:0a:cd:73:9c:2a:ff:f0:26:38:54:e8:38:cd:
0a:02:13:cd:13:ff:10:95:a3:29:22:60:19:b6:6a:f8:c6:2b:
78:a0:5b:5a:37:1b:a9:d9:6d:ac:ab:eb:b2:f4:24:57:4e:88:
99:eb:5b:73:bd:b0:cf:70:f5:c5:ec:57:53:0b:e6:9d:4a:d2:
34:c3:a8:45:c1:66:cd:77:28:c2:d4:2c:fe:d9:b7:68:db:8f:
bd:78:f4:0f:61:fd:3a:fb:29:c0:dc:f8:a3:ec:b2:94:b7:d9:
f6:60:5a:04:a2:8d:d8:fe:5c:98:5c:7c:75:d2:2f:50:ed:7c:
6c:bb:35:9d:40:fb:94:2a:c5:65:40:43:d1:44:fe:9d:7a:43:
92:d8:b0:fe:2c:e6:00:ff:16:8e:5e:29:93:26:0c:ab:aa:92:
f0:9b:8f:da:20:c5:6d:3d:6f:a9:7b:c8:0b:62:f0:fc:93:41:
5a:f2:86:46:ec:7d:f1:bd:ba:15:be:35:ac:f4:3a:63:48:24:
f0:83:1c:f8:9e:3b:e2:ac:db:13:ff:00:a8:4d:cc:8f:58:3a:
08:94:8e:c0:18:1d:88:76:32:bc:03:cd:78:47:63:3c:d4:32:
8d:b0:9d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:04 2025 by rpki-client