Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
File: tmdL-ORX4pV-7k9R-Le0TFfbmio.mft (raw, json)
Hash identifier: 5nBASk+sjcEGN5CLcGv2aS4ah8GaDZsYyCqORtuq5+8=
Subject key identifier: 42:D8:3E:8A:30:5B:88:E6:48:A2:73:33:23:8A:BD:5C:4C:51:F9:51
Authority key identifier: B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A
Certificate issuer: /CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
Certificate serial: 0194BD17B912AF08CDF2A6129CD641890BE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: tmdL-ORX4pV-7k9R-Le0TFfbmio.crl (hash: nXgLUlJuqArLR49dcs1Rk5Ur8lgs7qbD2iN4G/8J2ww=)
2: tyBiH_k1-T3tg2PjNihavpjVNFg.roa (hash: +MCpw/+jgYqZnXSoZlFEXezP/GiLWQcwVakj6OdX0hc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b9:12:af:08:cd:f2:a6:12:9c:d6:41:89:0b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6674bf8e457e2957eee4f51f8b7b44c57db9a2a
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=42d83e8a305b88e648a27333238abd5c4c51f951
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:68:c3:ef:51:2b:d6:e3:64:4a:bd:d1:f9:66:
ac:18:69:cc:5d:90:09:53:fc:50:bb:ee:54:51:e9:
78:30:22:a7:b7:ff:77:1b:8f:d2:1f:78:2e:7f:d0:
67:70:73:9a:46:0b:f4:89:a3:de:e9:e3:70:ad:2c:
2c:bd:eb:55:c2:bb:e5:33:fc:73:5b:a5:a4:b4:20:
e3:e8:3c:f6:aa:d3:b0:27:fe:65:a5:e7:7f:b4:3a:
2b:1c:a6:32:99:92:f9:a6:3f:de:33:0a:3d:11:1e:
f2:42:12:68:2e:13:ae:18:a3:e9:9e:ef:34:40:c3:
11:b5:be:47:cd:9c:b3:40:04:93:b5:d0:a3:97:4e:
4c:6c:e1:21:a8:e1:03:13:5a:54:b2:51:20:7a:11:
d2:a5:2e:05:a3:2f:fd:f6:5d:96:38:a5:b0:ea:44:
77:90:4f:fc:c3:6c:5a:c6:6f:8e:5f:7e:74:e3:8a:
80:39:df:a3:01:8e:28:be:1b:c3:ea:ed:ff:a7:e6:
56:9d:8d:00:98:d9:6e:1b:56:05:ea:59:70:08:57:
38:5e:23:da:40:99:1c:6a:4c:2d:35:bf:48:aa:07:
19:ee:00:28:58:97:a5:56:60:63:20:27:6e:ee:cb:
19:4a:ff:83:4d:33:0c:60:fe:94:50:c1:d4:aa:13:
e5:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D8:3E:8A:30:5B:88:E6:48:A2:73:33:23:8A:BD:5C:4C:51:F9:51
X509v3 Authority Key Identifier:
keyid:B6:67:4B:F8:E4:57:E2:95:7E:EE:4F:51:F8:B7:B4:4C:57:DB:9A:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmdL-ORX4pV-7k9R-Le0TFfbmio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/69331c-aea2-4237-8400-6221403db58b/1/tmdL-ORX4pV-7k9R-Le0TFfbmio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ce:96:f0:96:97:5d:24:09:e7:a2:3f:d1:7f:11:d0:20:df:
8f:b6:0a:72:83:09:ce:0c:e5:11:74:e3:cd:14:77:c6:89:46:
dd:78:75:46:20:10:c0:32:93:64:ea:63:40:b5:43:b3:e6:27:
c2:0f:70:c3:9b:71:fa:b1:6c:6a:57:c8:6d:95:a9:c0:5d:ac:
77:70:cb:9f:fe:6a:9b:5a:65:0b:f2:86:26:9f:02:64:db:53:
f9:36:4b:8d:80:14:56:d2:76:62:69:49:a0:f1:a7:a1:69:0e:
54:a6:db:9e:74:04:08:cd:8e:9b:c6:01:99:b2:8d:64:63:d7:
7e:57:ce:c2:ad:8e:96:39:a6:b1:aa:c1:0e:73:4e:b3:b0:b5:
7a:28:b2:4b:cf:22:c8:14:5d:1b:d5:03:0c:6e:d0:8b:2a:47:
f0:86:31:9d:f7:3d:84:37:a7:e1:13:56:b1:dc:ae:73:9d:0f:
8f:cb:67:ff:32:14:75:70:f1:88:a4:5d:b3:5a:5c:e9:a3:40:
27:00:69:7a:89:1b:f5:86:9a:80:a4:e5:3a:33:6f:62:83:ef:
61:b8:67:57:61:01:36:fa:2f:9d:39:15:d0:0d:85:af:d9:fd:
b9:22:4a:8c:79:93:38:15:93:79:19:f7:ac:a8:bc:b9:0b:76:
76:22:4d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:53 2025 by rpki-client