Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
File: Tu8gTX6G_4FiSmGBKG521DOHa8c.mft (raw, json)
Hash identifier: e/TSTNTN/SgGjVvd7d3lLtyKXPrYKHopTmPZo1JRPz8=
Subject key identifier: 66:86:AF:79:C6:DC:90:85:DC:CE:E0:1F:C6:D1:68:28:FB:E9:EF:0D
Authority key identifier: 4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
Certificate issuer: /CN=4eef204d7e86ff81624a6181286e76d433876bc7
Certificate serial: 0194BBCF059F9AE0AB1D44CFE80942B776B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
Manifest number: 132A
Signing time: Fri 31 Jan 2025 10:01:34 +0000
Manifest this update: Fri 31 Jan 2025 10:01:34 +0000
Manifest next update: Sat 01 Feb 2025 10:01:34 +0000
Files and hashes: 1: Tu8gTX6G_4FiSmGBKG521DOHa8c.crl (hash: 1CV0MTfrw90pwsVekekX4eVU0vxT/B8ihCMrUqVT5xU=)
2: shBm13sVD-3FD9e1R6_cr96dhfU.roa (hash: n/xarPDtIVC1p+Buc2MZvYZnuxYBvdgfF2U0DRag658=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cf:05:9f:9a:e0:ab:1d:44:cf:e8:09:42:b7:76:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef204d7e86ff81624a6181286e76d433876bc7
Validity
Not Before: Jan 31 10:01:34 2025 GMT
Not After : Feb 1 10:01:34 2025 GMT
Subject: CN=6686af79c6dc9085dccee01fc6d16828fbe9ef0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:44:41:0e:20:95:c4:74:91:6a:a5:c4:62:7e:
89:21:b1:62:08:be:79:21:cf:dd:64:3a:32:03:27:
3b:8a:7f:07:e3:26:bf:fc:80:7f:eb:46:d7:ef:0b:
12:e5:47:40:22:70:c0:69:4c:ef:6c:39:63:58:b9:
05:73:59:d9:a4:30:1f:8a:85:e7:a0:91:56:63:2f:
f0:3e:f6:cf:06:59:1e:65:4f:69:6b:19:ab:83:bc:
78:39:ee:1e:c4:f3:84:7b:b1:ab:6c:b3:31:46:ce:
0a:4a:88:09:f3:8c:80:1a:2a:9a:cc:75:a4:e4:ef:
66:ef:96:6e:7a:ea:2e:4b:28:4d:61:93:1d:6f:12:
20:f6:28:43:d5:08:b8:b2:41:81:b1:aa:d4:90:97:
9f:65:8b:05:d8:92:10:b7:3b:71:56:a2:bd:a2:d7:
d3:e3:40:9b:dc:77:7f:c5:e7:d5:a3:d5:48:5c:54:
c1:7e:b4:54:3b:ac:ca:63:06:c3:87:82:a7:99:b8:
1f:2d:2f:31:ca:e3:b2:29:3c:7e:75:ca:09:5e:56:
31:65:aa:f3:c9:11:93:03:15:da:af:30:b4:bd:c4:
44:43:3e:44:3c:97:5f:1f:e6:a2:fa:65:64:73:6b:
a1:d0:a8:df:fd:ec:cc:91:0c:5c:af:a9:c1:29:22:
16:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:86:AF:79:C6:DC:90:85:DC:CE:E0:1F:C6:D1:68:28:FB:E9:EF:0D
X509v3 Authority Key Identifier:
keyid:4E:EF:20:4D:7E:86:FF:81:62:4A:61:81:28:6E:76:D4:33:87:6B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu8gTX6G_4FiSmGBKG521DOHa8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/69322d-ad71-4877-a470-9ad9099de1d3/1/Tu8gTX6G_4FiSmGBKG521DOHa8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:37:30:71:d8:59:af:a1:82:01:61:dc:a6:15:57:0a:49:0c:
6e:b1:95:f1:0a:ab:83:dd:64:52:5d:a5:66:be:7b:73:6b:f9:
86:2b:b4:4c:21:0b:20:f4:80:17:09:86:8c:49:58:35:7a:6f:
80:c5:7a:2e:45:dd:fd:1d:5d:5d:80:dd:bb:eb:a0:4e:6e:53:
60:2c:a1:ff:9e:c7:46:5d:29:e2:34:16:b5:8c:ad:4f:b4:5c:
27:ad:c7:3c:ba:c3:de:40:0e:51:11:48:3c:eb:76:3a:03:54:
96:0b:bd:0e:48:5e:c2:45:bc:34:84:44:67:96:de:67:67:1c:
e4:44:a4:69:51:22:b9:4c:b9:f0:53:3d:37:a1:a1:18:74:12:
8f:13:ef:92:76:6f:2d:3e:c6:e9:d5:a8:cd:66:7b:1f:f4:d0:
e5:51:59:a2:66:a2:89:74:31:08:eb:94:88:bc:fc:47:84:bf:
40:da:9c:c9:9e:b3:a8:2e:9c:5b:0c:b2:64:ec:39:85:d1:f5:
2a:97:74:e1:91:e1:e8:3c:d3:3d:6d:c4:1a:b2:e9:60:20:c8:
d7:88:bb:94:d5:9f:4f:a9:60:57:7a:65:c8:63:64:41:7a:a3:
4c:93:df:44:1c:7f:b9:ce:5c:5e:9c:63:5e:ca:96:44:eb:85:
cf:85:1a:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:46 2025 by rpki-client