Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
File: T2FIll96_-tYYJYV5q1OPuqM68o.mft (raw, json)
Hash identifier: wZd831eYLGVe9fvFFIsjwaAFjwqQowGunVVh6UnJCIk=
Subject key identifier: 23:DD:24:E6:F2:B7:26:BF:C4:77:19:74:A6:0D:27:2E:F6:27:11:82
Authority key identifier: 4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
Certificate issuer: /CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Certificate serial: 0194BCA9A8C4B7D5209363502AF645EC927D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
Manifest number: 0389
Signing time: Fri 31 Jan 2025 14:00:22 +0000
Manifest this update: Fri 31 Jan 2025 14:00:22 +0000
Manifest next update: Sat 01 Feb 2025 14:00:22 +0000
Files and hashes: 1: T2FIll96_-tYYJYV5q1OPuqM68o.crl (hash: yEt785WkZN4YpGpcxOQ1BtF0KSll71pR6V4WqphRyC4=)
2: aeScWSEVmNc0EYb-mhHt5BZ1Oe0.roa (hash: fc/BLsPdy7txjMA7q9xzQpymVU7f1xNFpkeDtKxEBLk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:a8:c4:b7:d5:20:93:63:50:2a:f6:45:ec:92:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f6148965f7affeb58609615e6ad4e3eea8cebca
Validity
Not Before: Jan 31 14:00:22 2025 GMT
Not After : Feb 1 14:00:22 2025 GMT
Subject: CN=23dd24e6f2b726bfc4771974a60d272ef6271182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1b:43:85:0c:96:6a:cc:38:d3:8a:86:68:4f:
1f:c6:07:90:ff:f9:93:0c:5b:4a:39:69:a7:c5:9f:
80:1d:00:31:86:66:4e:76:83:3d:30:fb:12:3b:63:
0c:0f:4e:7e:5b:92:e5:35:b7:95:a4:a3:84:7f:ca:
1f:6c:99:ad:d5:00:2f:db:a7:fb:44:7a:4c:0d:9d:
ab:5d:88:a9:37:61:d3:8f:d2:f0:98:9f:f5:a0:4c:
a6:bd:e4:71:6d:8e:79:64:7c:a1:50:a5:08:8a:91:
af:ab:f0:ea:3e:f5:a7:45:55:c8:fc:7f:87:f2:a5:
10:e2:65:c9:94:e4:b2:b2:b0:2d:46:33:8c:1d:63:
43:01:48:e1:1f:a1:d1:b7:2b:9b:24:fc:e1:9c:71:
4f:8b:84:35:4a:18:0d:e3:25:f6:f2:3c:2c:48:32:
5d:48:3b:5b:39:29:93:ad:4d:bd:24:59:a3:cd:3d:
d2:8f:f9:8e:4a:eb:9c:b3:52:95:9d:4d:da:d1:ba:
ad:87:8b:9c:fd:1f:be:1e:91:90:8d:21:cc:2b:16:
9a:85:45:e0:67:f6:1f:15:1b:4d:66:b9:37:d3:b6:
da:3d:53:6d:51:6e:6f:1d:40:28:68:aa:a8:5d:1e:
63:23:39:f9:f0:07:77:97:9b:63:79:5d:01:41:e7:
aa:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DD:24:E6:F2:B7:26:BF:C4:77:19:74:A6:0D:27:2E:F6:27:11:82
X509v3 Authority Key Identifier:
keyid:4F:61:48:96:5F:7A:FF:EB:58:60:96:15:E6:AD:4E:3E:EA:8C:EB:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T2FIll96_-tYYJYV5q1OPuqM68o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/a135b2-791e-41da-afd7-da1c4175802b/1/T2FIll96_-tYYJYV5q1OPuqM68o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:10:07:65:12:e8:e7:d8:66:77:18:8e:07:30:3b:c5:a3:ed:
02:e9:a8:b7:fb:d6:bf:86:1d:1a:5e:b1:14:ea:7e:91:76:97:
1d:ad:02:bf:59:78:a8:58:f1:bb:c0:fc:2e:99:8d:ed:c0:f1:
a6:89:1b:bb:d1:5b:67:4b:ed:48:a4:03:8e:8b:78:15:28:61:
71:af:88:f6:79:af:39:0d:43:d1:73:d8:75:25:72:f0:e4:35:
d6:c5:d4:bf:dd:a7:74:5c:23:1d:fc:3d:07:45:88:84:a9:fc:
0c:cf:68:42:47:45:8f:49:c6:d3:e8:6c:02:b0:94:ec:ac:e4:
b2:77:8e:ee:4a:2f:2b:6e:b7:63:bc:43:a4:00:1a:78:19:5b:
64:2d:54:a2:be:60:63:f9:46:ea:50:c0:ee:ca:a9:8c:5a:e9:
7b:21:1c:60:d2:bd:d8:2c:12:eb:08:27:e5:ad:2d:b4:32:49:
9d:86:a3:83:e0:bd:26:f5:9f:ed:8b:3c:07:02:33:cd:65:ba:
68:1d:90:fb:77:42:0a:ac:58:b9:5b:43:0d:50:93:27:8f:69:
21:43:17:7a:93:5f:2b:5e:26:f7:b2:3c:06:3d:ce:e3:97:57:
fc:29:a5:89:a9:df:49:89:8b:55:0e:ed:9c:05:4d:20:77:c0:
62:f3:16:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:36:20 2025 by rpki-client