Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
File: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft (raw, json)
Hash identifier: EZ9G8ld62gq+QHpYY3V/ob7OvgVgDacu7OePiPCG1ek=
Subject key identifier: 02:99:F1:3F:76:30:B3:B2:0F:F2:15:6F:5D:1E:40:A3:D6:F5:4B:CA
Authority key identifier: 4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
Certificate issuer: /CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Certificate serial: 0194BC3CA2AA0031EAE6B652557FDFD016AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
Manifest number: 0E24
Signing time: Fri 31 Jan 2025 12:01:17 +0000
Manifest this update: Fri 31 Jan 2025 12:01:17 +0000
Manifest next update: Sat 01 Feb 2025 12:01:17 +0000
Files and hashes: 1: GJVV3SoEfsa0pgtLtiw7hYQqnlY.roa (hash: X3L+IE/tHK5/79Ef7HYRs6p2vD8nOugSbhs0gMsz8zU=)
2: TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl (hash: FDidrQugl2Z0WQppOCazfpl0o/cSaSg/8EBxNlamd7U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a2:aa:00:31:ea:e6:b6:52:55:7f:df:d0:16:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3f428fd9834cd5ec9bb160f8b6dcf446ef5d93
Validity
Not Before: Jan 31 12:01:17 2025 GMT
Not After : Feb 1 12:01:17 2025 GMT
Subject: CN=0299f13f7630b3b20ff2156f5d1e40a3d6f54bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ee:b9:bf:77:87:1c:68:b5:5a:8c:22:39:92:
93:7d:de:cd:f4:d2:0a:71:fb:58:3b:6b:79:64:94:
35:15:36:bf:b8:ce:06:e8:9d:ef:af:1a:47:65:6b:
91:d4:1b:9c:0c:53:e7:80:cd:0e:db:7c:52:72:c6:
87:6b:87:d1:77:16:4f:13:2e:7c:23:d5:36:10:06:
f8:d9:11:07:dd:ce:22:e4:95:76:34:d6:97:38:a0:
fb:26:3e:94:21:2c:b7:bc:23:92:7f:c1:b5:c7:9e:
1d:6a:5a:b3:de:ee:d2:64:df:61:66:fa:a7:58:ee:
20:a0:43:c7:fe:ec:29:34:d8:23:0b:a6:c8:93:48:
20:6c:f4:f1:93:1d:d6:06:7f:24:99:64:d1:43:93:
26:05:ac:f9:56:29:f1:f7:76:0e:0b:90:92:24:2b:
e2:cb:bf:5f:e5:b1:0b:5c:1b:65:b9:87:30:05:29:
78:d2:95:3d:5e:0a:fe:b5:9f:3e:cf:ce:67:ee:40:
2d:10:f0:2e:46:7e:21:d8:68:ac:de:85:49:2f:64:
15:12:fd:7a:75:26:b8:55:b8:20:bf:bf:18:ca:1a:
d9:a0:31:62:40:5f:46:13:f9:0c:88:eb:fb:62:71:
dc:08:61:56:d7:d4:87:ad:a5:bd:dc:b9:81:95:9c:
ed:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:99:F1:3F:76:30:B3:B2:0F:F2:15:6F:5D:1E:40:A3:D6:F5:4B:CA
X509v3 Authority Key Identifier:
keyid:4C:3F:42:8F:D9:83:4C:D5:EC:9B:B1:60:F8:B6:DC:F4:46:EF:5D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/92be6a-92c5-4537-ac32-139536952896/1/TD9Cj9mDTNXsm7Fg-Lbc9EbvXZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:2d:3f:f3:30:83:bb:b9:a0:5b:05:ae:b1:4f:8e:ba:a2:3a:
1a:20:27:41:14:b5:e9:d3:d4:9e:f9:6a:95:11:ec:89:48:7e:
9f:ec:c4:98:03:45:33:da:6a:83:6a:5c:ec:f4:bf:8d:c7:75:
eb:79:85:d7:95:99:df:d2:04:50:f4:4d:c3:58:8a:c8:4d:a6:
46:56:1a:1f:08:ce:45:b7:46:0b:b0:ed:4c:8a:98:31:3c:0f:
32:04:1c:a5:47:38:a9:c6:e2:7b:96:8f:c7:69:fd:a1:06:81:
be:f3:bf:e5:ac:5b:29:18:49:52:35:78:0b:85:a9:e9:44:05:
59:90:0f:76:25:19:87:59:ff:81:78:8e:6f:3d:11:3d:b6:59:
18:bc:95:74:62:f7:fa:f0:4f:64:c7:94:57:0d:fb:42:d8:a5:
e4:e2:a1:7c:b1:e1:e6:1c:c1:8a:1a:cd:da:0a:b1:c4:a0:00:
ae:25:56:d1:fc:99:bb:d7:81:8f:14:1c:89:41:bc:de:b8:7b:
d2:9c:d2:27:f8:00:d2:36:21:12:b8:74:f5:70:a7:f6:5c:6c:
f5:25:bb:2a:79:88:8b:f8:81:19:52:f4:6d:87:cc:90:5a:31:
4f:9e:6d:cb:3c:30:a7:b2:0c:53:3e:bc:b4:fb:cf:19:8e:bf:
52:84:1d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:42:45 2025 by rpki-client