Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
File: Ty87yZp5UD4JdXR36O9kPhGIbIs.mft (raw, json)
Hash identifier: p/mweEBrPlhutCDKk6IvBpwt473Fo3ZFjkFJgNyND08=
Subject key identifier: 5C:E0:06:17:3F:14:DE:88:EB:1A:D4:86:00:1A:A8:F7:55:21:05:A8
Authority key identifier: 4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
Certificate issuer: /CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Certificate serial: 0194BD85859DEF32C0EAAA06E57A14B93398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
Manifest number: 12DB
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: BsRapsb8l_5PZmhK-px6P5ft8IQ.roa (hash: 1fAnCm4EJ79w7i06j6XOQWbgBTnA5p0hJhM5t0Htbbo=)
2: Ty87yZp5UD4JdXR36O9kPhGIbIs.crl (hash: y9tNBTA993bWKe1NO2Ns5DGcDHo7pdwUA1Lr6QpNOf4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:85:9d:ef:32:c0:ea:aa:06:e5:7a:14:b9:33:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f2f3bc99a79503e09757477e8ef643e11886c8b
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=5ce006173f14de88eb1ad486001aa8f7552105a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7c:74:1a:c3:28:1d:d1:5d:c0:1c:62:59:2f:
89:22:43:f0:9d:c9:b8:28:63:73:fe:90:20:2b:97:
79:eb:c9:2d:a6:1a:69:3b:d8:e5:77:ed:0e:fc:b4:
da:c4:ff:ff:f7:49:06:74:5f:75:2b:6f:df:61:f8:
05:ec:13:17:a2:d7:33:b5:9f:86:d0:a7:d2:46:6c:
e5:ce:b1:2f:92:5c:81:49:bd:cb:0e:8e:09:02:f0:
0c:3f:f8:6d:53:8b:5a:8a:af:6d:37:bd:e1:12:35:
3d:4b:12:cb:40:e8:fb:83:a3:19:96:6e:24:43:d4:
f9:c8:af:10:e8:58:b3:d9:5d:0b:ea:58:a8:60:58:
5d:09:7c:10:aa:47:6d:2c:a9:75:df:7f:ae:0a:e4:
7f:aa:e4:38:8e:6a:ef:53:03:c6:0b:4d:3c:77:fb:
72:31:1c:23:1c:fe:dd:53:4f:e9:21:fe:f0:fd:3b:
32:38:4d:0c:e8:0b:ad:a8:9c:f4:76:a1:02:09:9f:
f8:5e:9b:be:78:46:ef:d9:93:4f:8b:55:2f:a1:f5:
e5:5f:34:2b:89:d7:21:1a:06:df:d7:33:25:80:f6:
8b:79:00:8b:88:8e:ee:2a:9a:9b:ff:9b:b7:81:f4:
9e:b6:4f:ff:f5:84:7d:9e:7f:c9:f6:d7:97:c4:63:
19:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:E0:06:17:3F:14:DE:88:EB:1A:D4:86:00:1A:A8:F7:55:21:05:A8
X509v3 Authority Key Identifier:
keyid:4F:2F:3B:C9:9A:79:50:3E:09:75:74:77:E8:EF:64:3E:11:88:6C:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ty87yZp5UD4JdXR36O9kPhGIbIs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/1e1ac6-fcd6-4ae8-ad77-51e4bba6bf5b/1/Ty87yZp5UD4JdXR36O9kPhGIbIs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:1b:8e:cb:88:00:0f:2f:2d:03:ce:5f:a3:74:9d:a9:71:98:
78:18:9f:e1:bc:15:72:71:28:12:ff:f3:50:b5:cb:84:8d:97:
72:37:0f:fa:e3:35:20:5f:cd:bd:45:34:4b:80:b7:aa:87:41:
3d:0d:6c:3d:bb:96:04:73:f0:9c:57:a0:9c:1a:3b:63:9f:88:
96:f0:6e:c5:ba:45:48:6b:88:14:73:f3:d7:7d:e5:ce:74:02:
d4:31:eb:26:f0:0f:64:ef:5e:8a:74:b6:88:5a:af:49:d4:a0:
b1:21:9f:c5:2f:46:36:4b:af:02:ee:74:e6:fe:92:5c:71:33:
0e:51:70:60:ae:fc:a9:cd:21:b6:7e:cb:ab:c2:32:f0:36:f2:
26:16:fe:be:fc:e9:e5:80:bf:57:61:5f:0f:86:ae:b9:b7:e7:
b0:9f:98:da:c3:97:fd:1e:04:87:07:bd:93:94:a0:3d:82:ff:
01:51:b8:c7:eb:3b:3a:55:94:ab:41:6f:f9:3d:9f:42:2f:c9:
10:ca:8e:fb:e7:83:70:52:bb:1c:63:91:5a:2e:d5:f3:47:f8:
11:02:c7:2c:99:09:7f:d1:51:8f:b4:9d:08:09:32:be:45:a0:
e9:22:d0:cb:93:fe:0d:bf:76:44:b1:77:40:b2:8b:74:80:c6:
0d:3b:a9:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:28 2025 by rpki-client