Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
File: _tdzOdk4vvCHWZKTwgGzufgiNiM.mft (raw, json)
Hash identifier: LFUvMQNUVgHkcs/2GOyDjXCR89T3nBmTJd02+smoKJc=
Subject key identifier: 4C:E5:D5:BC:73:4B:A0:F9:7E:74:65:83:4A:67:90:F6:38:13:D3:89
Authority key identifier: FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
Certificate issuer: /CN=fed77339d938bef087599293c201b3b9f8223623
Certificate serial: 0194BD17620CA8F1A44A699550B651AD63AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: JiqQ-b59vNl0MF5eVXzf0TfeO3c.roa (hash: OKAd29RpT9wnjVFO/8cLOZm/b/ev+jNX/rx5kLKiews=)
2: _tdzOdk4vvCHWZKTwgGzufgiNiM.crl (hash: LL2Q8A4KaazMJFldkKO9HaILDNSWW7oA9IlNrjUcugA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:62:0c:a8:f1:a4:4a:69:95:50:b6:51:ad:63:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fed77339d938bef087599293c201b3b9f8223623
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=4ce5d5bc734ba0f97e7465834a6790f63813d389
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:17:7d:78:c6:bf:ab:f3:68:3d:5d:46:22:b5:
45:e4:06:8e:df:42:15:42:af:9e:9d:e6:ab:a7:79:
60:99:c3:d1:d6:00:98:af:ef:47:b6:e4:f9:f3:ed:
e0:42:56:66:27:4c:62:46:40:bc:68:61:1c:3e:7d:
86:1f:3c:e4:b6:8f:00:f3:10:24:7a:a3:77:ea:a5:
52:7e:95:85:2d:78:f7:a0:68:7b:72:e3:f1:aa:24:
b8:62:5b:b9:6a:2e:3a:d9:69:e3:a1:7e:cb:ee:3f:
55:9a:36:8f:e0:98:9d:2a:30:40:5c:d1:98:a0:e1:
e8:24:05:38:8b:99:67:ec:ad:d9:d0:72:82:e2:bb:
2a:2a:91:eb:25:de:94:aa:43:30:32:42:cd:3c:39:
71:df:6d:7d:37:ce:5c:bf:df:9c:1b:ea:b8:fd:3c:
da:06:a8:55:3c:9c:92:e5:e9:bd:69:52:aa:5f:fc:
ca:c8:29:33:39:23:95:e8:d9:84:e9:92:b6:b6:99:
93:35:3d:90:1a:cf:ec:f2:40:b8:7b:61:fe:05:28:
dc:80:ca:9a:9d:86:87:fd:e1:68:af:76:d0:06:8d:
84:37:6d:1b:d0:00:c8:da:e3:c0:f3:d3:17:78:59:
02:5f:3a:a6:26:ca:95:9b:3a:1b:5b:42:84:99:2e:
e7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E5:D5:BC:73:4B:A0:F9:7E:74:65:83:4A:67:90:F6:38:13:D3:89
X509v3 Authority Key Identifier:
keyid:FE:D7:73:39:D9:38:BE:F0:87:59:92:93:C2:01:B3:B9:F8:22:36:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_tdzOdk4vvCHWZKTwgGzufgiNiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/bfb817-7e2d-4458-bab1-d1750020caf5/1/_tdzOdk4vvCHWZKTwgGzufgiNiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ec:b7:c6:4d:af:4e:af:6a:dd:2c:da:8d:60:95:03:b3:e9:
d0:46:08:d7:d6:72:a8:23:43:5f:96:1c:dc:43:81:7a:5d:99:
ef:02:e4:54:04:f9:1d:6d:eb:12:d5:5a:b8:f3:2f:e9:60:ed:
f4:62:e9:76:95:a4:68:ad:7c:e4:f8:39:cb:95:9d:25:43:97:
2c:c6:6e:66:64:a8:f2:76:bf:15:20:0e:1c:33:4a:8e:6e:85:
f5:f5:d0:0e:82:56:12:b4:03:85:b6:68:ad:c6:13:77:39:3d:
b9:cc:d4:4d:b2:ae:a1:fb:b2:9d:eb:62:16:02:40:81:17:ba:
a9:0d:bf:b6:63:a7:aa:d1:4f:65:87:86:54:85:10:62:38:18:
7d:fe:8d:d1:71:66:9c:e7:a8:24:e0:73:31:5e:de:85:4d:14:
3d:e4:88:36:96:b9:10:e5:ce:32:87:3e:84:cd:fd:8c:96:5b:
12:ce:40:0d:1a:51:b7:c9:dc:28:8a:bd:13:1a:77:1b:55:17:
ed:23:6c:5b:61:09:3f:7d:9a:30:de:53:7c:25:35:5f:92:a6:
fc:af:71:fd:a5:f0:b9:ae:b3:c4:ed:d2:18:af:cc:82:c7:c8:
4c:1a:c6:5a:ab:69:63:1a:ee:01:19:b7:41:8b:0e:8e:7f:8e:
19:e0:a8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:50 2025 by rpki-client