Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File: Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier: epKOlcni5hFao648NET6/0KEYuXge4qrlGy7KmGWnrA=
Subject key identifier: 3E:8E:B5:E1:F7:35:C3:5D:2A:56:72:3D:5C:72:D8:43:07:F4:02:D8
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer: /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial: 0194BC72B89BE1A03DA2953EBE2BE55CA2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 13:00:22 +0000
Manifest this update: Fri 31 Jan 2025 13:00:22 +0000
Manifest next update: Sat 01 Feb 2025 13:00:22 +0000
Files and hashes: 1: Pca7kXTlNjwuWN_AB5LtxE2ZDeM.roa (hash: Akg6x/rEJSguP5W8rh7uM4jAx65nBcfWuXfFgKDQBlY=)
2: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: 3M4s8FB9WXl+P+WidOR/oLy8W7rd+UXbdHE7Xzzazn0=)
3: o6HBbNZybM1pciBKfo5UVkJuRLw.roa (hash: rmfHjVx3VwSeRbFJh3vlHLLWzQKd4J8HNXED4xlCmoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b8:9b:e1:a0:3d:a2:95:3e:be:2b:e5:5c:a2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Validity
Not Before: Jan 31 13:00:22 2025 GMT
Not After : Feb 1 13:00:22 2025 GMT
Subject: CN=3e8eb5e1f735c35d2a56723d5c72d84307f402d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:94:11:04:95:64:cd:d3:c9:69:8a:9b:e7:9f:
ab:6f:db:1c:88:e1:2a:c9:3f:46:dc:13:bc:5a:eb:
01:41:c4:1f:0c:d7:39:e5:17:15:50:b7:35:04:33:
1d:32:e2:a4:0b:78:bb:a3:4a:30:e3:69:8b:a3:29:
b9:d9:27:8f:4c:7e:e9:d0:a4:65:60:13:f4:7e:c3:
63:c9:e9:d6:82:ba:c6:6f:51:f5:2e:82:c8:87:a1:
41:7d:92:1b:43:60:85:c3:b5:9e:bc:16:75:4f:f9:
a7:97:8f:fe:22:29:07:d8:30:f7:9f:dc:28:0a:26:
87:ab:b5:1d:4e:ab:f8:f4:da:2c:ec:5f:db:bc:99:
60:f7:c5:1c:d3:db:62:01:7e:12:b7:6d:f7:66:5f:
66:dc:c2:ec:0d:6c:3b:7a:27:ce:83:33:7b:5d:41:
c0:29:b4:95:07:60:20:5c:a6:39:09:07:36:fe:04:
62:54:a8:c8:e3:56:d2:45:0d:9c:e5:9a:18:d2:db:
54:97:47:26:67:70:46:e5:c1:85:e3:4b:97:c4:51:
f0:df:79:8d:f0:52:0e:3d:ac:83:cf:a1:78:6d:67:
39:bf:7a:1f:8d:4e:aa:7e:b5:f7:a8:0e:29:16:60:
c1:f9:76:e4:75:92:e6:79:2d:cb:cd:b3:ab:06:b6:
4a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:8E:B5:E1:F7:35:C3:5D:2A:56:72:3D:5C:72:D8:43:07:F4:02:D8
X509v3 Authority Key Identifier:
keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:12:fc:eb:16:07:65:f8:25:6b:30:90:5b:56:de:10:4d:f8:
59:31:7a:c3:ae:98:b0:b6:01:96:33:3f:1b:d7:a4:fd:49:fb:
e3:70:b0:79:12:32:3d:67:cb:c0:54:d1:4c:6b:4b:f3:ca:e4:
6d:3b:ce:cd:3c:dc:62:26:f6:df:5a:2a:82:fc:7c:57:a9:b2:
60:95:0c:87:c3:b6:ed:39:11:ff:cb:28:35:7a:03:28:77:9e:
58:ca:c0:84:35:42:eb:c3:bd:dc:fb:98:d0:2f:ac:e4:8f:7d:
b0:ae:18:c9:7d:c6:a1:de:51:ef:13:6d:bf:9e:53:93:70:59:
94:ef:03:ae:ff:04:d4:e9:74:ff:1e:68:40:40:b6:dd:94:95:
c9:63:1e:c1:b4:60:e9:89:7c:c2:e9:73:9e:a0:b3:37:3f:c0:
a9:07:58:92:c1:c7:51:b6:3e:23:bb:09:58:04:c8:42:86:40:
d6:eb:48:72:ac:6c:d3:ef:cd:36:9e:80:18:ee:cb:4c:6d:28:
08:99:d5:97:aa:99:cc:f5:4d:01:27:66:1d:ba:17:ab:41:d5:
0f:13:47:15:e6:11:a3:4d:bb:e2:54:72:cc:be:bd:e5:11:a1:
ca:83:14:1e:2a:c0:ad:5f:8e:f0:3f:7e:c9:e0:41:3f:6f:b4:
4a:07:ca:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 13:10:54 2025 by rpki-client