Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fd121d-c8d3-4e19-bde3-d3abe8a3dd9e/1/TOwDFN2ZHaOg1mE5OmBqMXxsvI0.mft
File: TOwDFN2ZHaOg1mE5OmBqMXxsvI0.mft (raw, json)
Hash identifier: UvRTP0igpMjASLkfI/YoNzFylk0+BQwolWcpTJ3MF3w=
Subject key identifier: 69:95:87:66:9F:AA:18:C5:CA:EB:3B:46:7D:D6:29:E1:57:D6:3E:3F
Authority key identifier: 4C:EC:03:14:DD:99:1D:A3:A0:D6:61:39:3A:60:6A:31:7C:6C:BC:8D
Certificate issuer: /CN=4cec0314dd991da3a0d661393a606a317c6cbc8d
Certificate serial: 0194BCA9B49A4008DE533E3D54B7A2A79786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOwDFN2ZHaOg1mE5OmBqMXxsvI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fd121d-c8d3-4e19-bde3-d3abe8a3dd9e/1/TOwDFN2ZHaOg1mE5OmBqMXxsvI0.mft
Manifest number: 090D
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: TOwDFN2ZHaOg1mE5OmBqMXxsvI0.crl (hash: DHvqCOTBb+PQaAsJKRhNYOO3utQZIOy0MMjmHsjUJH4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b4:9a:40:08:de:53:3e:3d:54:b7:a2:a7:97:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cec0314dd991da3a0d661393a606a317c6cbc8d
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=699587669faa18c5caeb3b467dd629e157d63e3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8a:46:d9:61:6e:42:1e:3e:0f:52:d0:3c:40:
05:7d:c5:29:63:1b:f9:79:a2:04:c8:16:f1:74:31:
62:49:e0:e2:3e:59:91:92:7e:db:9a:0d:21:d7:65:
8d:e5:d7:87:9a:62:c5:83:59:57:c9:70:87:79:ee:
ad:c3:b6:19:ab:a0:4e:a2:f3:c9:d7:ee:5c:0a:fe:
03:6a:8d:6f:41:04:e1:b7:15:d1:75:5a:ab:85:f1:
8b:f9:9b:59:46:5a:30:a7:d7:ae:33:b8:d8:fc:4c:
f5:fd:73:5c:e3:72:57:98:10:38:26:f9:39:ed:44:
4f:b8:8c:bb:9c:53:9f:04:67:33:bf:de:70:9e:8a:
f2:75:ab:8c:f1:99:1c:55:23:ff:70:dc:0e:a7:bc:
50:89:00:ea:70:06:28:05:cb:06:cf:4b:bd:1e:54:
54:39:ec:17:d1:2a:7e:bf:c1:14:06:b7:2d:bf:8d:
74:ec:a7:f1:92:ba:45:44:ee:83:94:90:4b:47:88:
a5:e7:31:a0:50:f0:09:73:f6:3e:dd:33:f1:d9:fd:
c6:0a:3d:ad:e9:9a:3e:c4:1d:c7:12:84:98:d0:df:
29:40:09:60:d0:55:b8:5e:b1:9e:05:ed:e2:44:4b:
dd:e8:21:b0:5a:82:90:ee:c5:82:c2:4d:0d:87:c4:
ae:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:95:87:66:9F:AA:18:C5:CA:EB:3B:46:7D:D6:29:E1:57:D6:3E:3F
X509v3 Authority Key Identifier:
keyid:4C:EC:03:14:DD:99:1D:A3:A0:D6:61:39:3A:60:6A:31:7C:6C:BC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOwDFN2ZHaOg1mE5OmBqMXxsvI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd121d-c8d3-4e19-bde3-d3abe8a3dd9e/1/TOwDFN2ZHaOg1mE5OmBqMXxsvI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fd121d-c8d3-4e19-bde3-d3abe8a3dd9e/1/TOwDFN2ZHaOg1mE5OmBqMXxsvI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:6c:b8:16:5c:e7:08:65:38:84:85:bf:5a:83:1b:14:4a:7c:
e6:cb:0e:f3:d7:b2:0e:6a:dc:21:de:87:85:06:d4:a2:b9:10:
89:d8:fd:dc:da:11:3d:ed:34:51:82:cc:c0:b8:6d:6b:7b:fe:
71:10:7b:89:8b:1a:35:88:c4:d5:3f:cc:1d:9b:c2:f0:1c:05:
ab:8b:a4:37:05:1c:34:79:57:f3:dc:ff:d6:a6:dd:a6:10:f3:
cc:59:42:9e:5b:e0:36:79:65:1c:93:5e:69:ab:00:c9:2c:d6:
31:cf:99:5e:95:8f:de:0f:54:8b:4b:1b:34:c8:62:bc:23:22:
a1:ac:2c:05:51:27:e8:06:50:4f:8e:1a:06:a6:d1:5b:7b:c3:
05:71:73:4a:75:52:c9:47:71:70:d1:42:e0:6e:c3:48:28:7e:
16:a1:a7:61:fb:9b:47:7b:7b:46:9e:15:8a:f7:e3:e1:17:f7:
a7:57:5b:49:24:79:20:66:a3:10:8b:4f:00:fb:bd:6b:a7:07:
a6:ee:5d:cd:6a:42:84:db:8d:68:b8:b3:a3:f3:ff:1c:68:65:
48:3d:7d:72:d9:8a:80:4d:70:73:67:e4:5c:44:5e:57:8a:58:
32:97:07:29:54:bc:00:6c:6e:90:fa:ea:4c:93:50:ab:13:17:
da:e9:2a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:40 2025 by rpki-client