Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
File: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft (raw, json)
Hash identifier: N81kKgvc6jCELsg8q9SgecAFNUTFfJPMPggnXjf8oRk=
Subject key identifier: 78:76:F3:5D:D2:18:59:F1:1B:86:8E:2E:86:F0:F5:30:18:F7:FE:B4
Authority key identifier: 4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
Certificate issuer: /CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Certificate serial: 0194BC72F9FC2C280C262FBAE0D5430D909A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 13:00:39 +0000
Manifest this update: Fri 31 Jan 2025 13:00:39 +0000
Manifest next update: Sat 01 Feb 2025 13:00:39 +0000
Files and hashes: 1: TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl (hash: VM1ddfFrDl+fwxH8Vp3WC4CA0kDbIc449NBtzevUpq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:f9:fc:2c:28:0c:26:2f:ba:e0:d5:43:0d:90:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8c0ca9c21fa19dc05932befd9060b160edc5c1
Validity
Not Before: Jan 31 13:00:39 2025 GMT
Not After : Feb 1 13:00:39 2025 GMT
Subject: CN=7876f35dd21859f11b868e2e86f0f53018f7feb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b9:a2:d1:ab:a1:c6:ff:7a:05:23:4f:52:ff:
a6:76:4a:4a:59:83:43:28:4e:37:ed:cc:39:a9:5a:
6b:ba:af:66:6b:3b:13:a3:f0:44:f3:6e:d5:a0:35:
1e:bb:d8:52:ff:44:59:21:58:eb:32:58:fd:8b:e0:
d7:04:39:ee:32:47:e3:3a:70:48:95:d0:ad:ee:14:
22:97:9e:e1:11:77:85:c9:6d:a1:e2:8e:16:13:ae:
46:19:a0:25:94:1d:e5:e3:f3:6f:5e:86:e7:82:2b:
66:f3:ad:ed:5a:36:de:ea:42:9f:ac:61:fd:ee:6e:
d7:8b:24:67:87:ff:9f:9f:88:d5:59:31:98:fb:53:
c8:ac:27:d5:34:c0:32:69:16:bc:4c:a9:a2:7f:0a:
88:ee:56:d7:95:da:da:58:17:39:d1:32:20:cc:f2:
76:c2:e7:fc:53:df:a5:83:9f:de:3f:53:53:99:83:
60:3f:48:32:d7:e6:0e:c0:a4:22:be:57:b4:f7:f0:
1e:9b:d8:e0:05:65:52:1f:39:73:b1:85:82:6b:2f:
5a:a0:99:fc:ed:37:38:f3:bb:39:2c:34:00:8b:de:
0d:de:b3:fd:03:bb:45:36:17:df:16:77:f1:66:95:
da:22:26:a6:b2:d3:e8:14:5f:9b:74:4e:16:38:95:
30:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:76:F3:5D:D2:18:59:F1:1B:86:8E:2E:86:F0:F5:30:18:F7:FE:B4
X509v3 Authority Key Identifier:
keyid:4D:8C:0C:A9:C2:1F:A1:9D:C0:59:32:BE:FD:90:60:B1:60:ED:C5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/790099-2f90-43bc-bf0d-6d5496cb1a42/1/TYwMqcIfoZ3AWTK-_ZBgsWDtxcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:6f:9e:f3:df:ef:5f:a3:1f:70:35:aa:2f:2b:90:90:87:8d:
ef:01:9e:70:a8:12:59:0f:2f:8a:2d:7f:6d:89:c2:7e:fd:b9:
e7:ea:a7:24:92:35:55:06:33:80:77:56:88:9f:e1:2f:58:21:
03:a1:0c:60:98:36:12:2f:94:ac:3c:73:9f:8e:e0:d7:63:5c:
89:0b:1a:f0:66:77:f7:7f:dc:45:9e:c7:51:3c:2b:08:53:75:
bf:d7:9d:73:70:b2:9e:45:70:7a:16:9e:73:64:29:0b:9d:2c:
cb:56:75:13:29:5a:b8:d3:39:ea:89:e6:f9:59:b0:68:a7:97:
9c:4f:8f:22:39:fd:98:a0:fe:6e:e3:b7:0b:25:51:14:fb:b6:
96:bb:57:e0:5e:23:8a:af:5b:71:d3:d2:ae:27:e0:82:fc:6b:
40:94:5b:62:09:53:6a:20:7b:59:7a:50:e5:87:f7:c1:49:b8:
9f:c7:81:ab:a3:07:a9:de:94:7a:50:97:7f:6b:8a:43:ca:6e:
35:28:11:be:06:9d:aa:75:63:6e:fe:5d:1c:b2:fc:b9:16:82:
ad:65:8a:b4:1a:1c:79:af:86:d8:79:42:46:b5:a1:7a:cb:0a:
17:06:bb:19:eb:db:ae:fd:4f:0c:a0:cb:59:22:2b:a5:49:2a:
51:7a:d3:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:46 2025 by rpki-client