Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
File: TD6do79ZOALMgz_l2UelJpb1jI0.mft (raw, json)
Hash identifier: KhSscQUaYvfewTVkzZRRwHjYXMZof0NjX2BfRuYvnsE=
Subject key identifier: F6:FE:8F:D5:12:42:4E:48:04:83:7B:15:44:D1:12:A9:A4:29:77:AB
Authority key identifier: 4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
Certificate issuer: /CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Certificate serial: 0194BC04A6DEDF004987EC387565736B6778
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
Manifest number: 136A
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: EWuOguv1P9Rw7Q-U1qAW9dBN2No.roa (hash: rN97euvDe5WCriK9EjJsNO5wn2cUGLmPhpQvNqo71q8=)
2: TD6do79ZOALMgz_l2UelJpb1jI0.crl (hash: WLl7umLWdivssR8LRn7v16RVmf40mF1PsoQSAWJQRbE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a6:de:df:00:49:87:ec:38:75:65:73:6b:67:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3e9da3bf593802cc833fe5d947a52696f58c8d
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=f6fe8fd512424e4804837b1544d112a9a42977ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a1:04:f1:31:fc:97:6b:d7:ad:d5:5b:d7:ac:
90:7a:f8:c4:d6:ca:00:72:04:aa:5c:69:d8:91:c0:
e8:0b:de:38:e3:6f:8e:a4:ba:b5:71:ac:d8:0d:41:
c1:eb:5c:d4:49:31:c7:70:8e:ce:f9:ac:c1:19:c8:
a0:93:48:48:cb:57:db:0f:18:be:7f:e9:3a:ef:c7:
34:b3:84:77:13:b8:0d:8a:27:e0:7d:09:27:05:f4:
66:2d:5c:ba:02:8a:61:4d:44:85:97:f0:c2:44:9c:
98:67:4c:da:36:e1:f8:4b:7d:59:94:5c:79:9a:e5:
9a:54:71:cc:97:73:5d:57:51:23:f2:98:fc:97:04:
cb:aa:05:2f:f7:c6:a9:03:e6:06:bb:89:d5:dc:2b:
f5:66:b0:09:34:91:ef:31:b3:ac:0e:f9:0f:58:d1:
11:46:08:fd:fa:e9:16:a6:f5:fb:b7:a1:3a:7f:a7:
c8:53:30:e3:d7:fc:2c:7a:cd:31:21:bf:6d:d6:97:
ec:c9:0f:43:f9:de:1e:2e:fb:92:64:4e:c5:1c:44:
53:11:aa:cd:5f:2c:2e:68:ea:96:9e:4d:d8:f1:81:
a7:9a:7d:af:d5:ed:a6:c6:0f:ae:30:34:93:21:f3:
4c:a1:ca:2c:40:30:af:6a:cc:43:5f:f3:33:ec:40:
c4:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:FE:8F:D5:12:42:4E:48:04:83:7B:15:44:D1:12:A9:A4:29:77:AB
X509v3 Authority Key Identifier:
keyid:4C:3E:9D:A3:BF:59:38:02:CC:83:3F:E5:D9:47:A5:26:96:F5:8C:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TD6do79ZOALMgz_l2UelJpb1jI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/b9a830-6992-49c6-8973-eacb4965fe38/1/TD6do79ZOALMgz_l2UelJpb1jI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:e4:0a:1e:0b:25:aa:2e:66:eb:53:5d:e0:0f:78:41:91:44:
dc:f5:ed:2c:75:65:d9:2d:58:07:ef:4f:2e:60:92:3a:2a:02:
9a:31:6d:e4:45:44:42:73:b4:55:c5:20:bc:9c:15:91:b1:ce:
cf:c3:9a:80:c0:e6:af:c6:ec:4c:d9:db:6d:65:ed:12:de:dc:
f7:2a:0b:1c:db:86:08:ff:d1:d0:99:69:32:12:69:85:ca:0d:
21:57:54:da:77:c1:19:6c:20:30:77:01:fa:08:bd:24:00:9a:
78:fd:79:19:ef:5f:d2:7e:00:c9:7f:50:a1:12:06:01:68:e4:
14:5d:5a:54:29:d9:76:23:11:8d:58:13:59:63:1c:85:00:e3:
88:ab:ee:23:8e:08:51:a1:1a:18:7f:1f:de:3d:c0:6e:4a:74:
9b:2e:f5:92:11:40:fa:1c:92:55:a6:33:74:d3:e4:04:65:13:
77:d3:e2:fd:f6:d0:9b:c9:7b:20:d2:d3:1a:27:23:ac:94:c9:
12:c7:7e:79:a7:8e:4d:bf:69:aa:e0:b5:58:1f:48:4f:80:38:
d3:c3:70:86:47:2a:3c:37:f9:e9:85:46:a8:04:0f:c8:74:6a:
13:b2:1e:ba:05:0e:0a:24:e2:f7:33:c2:05:8d:1f:a5:00:9c:
ab:28:9f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:37 2025 by rpki-client