Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/38449c-aad8-405a-b7f7-6d9f384d2bc3/1/TvMzZvDPXk-oBO730eKSlO6lFIw.mft
File: TvMzZvDPXk-oBO730eKSlO6lFIw.mft (raw, json)
Hash identifier: 9E+i9eZSCojcgWmFsalCkWjiBRy7D4EIiG5b/nL0t1E=
Subject key identifier: 9B:20:64:33:F0:2F:A9:4C:F7:52:A4:09:83:07:B3:70:E9:96:24:6B
Authority key identifier: 4E:F3:33:66:F0:CF:5E:4F:A8:04:EE:F7:D1:E2:92:94:EE:A5:14:8C
Certificate issuer: /CN=4ef33366f0cf5e4fa804eef7d1e29294eea5148c
Certificate serial: 0194BD4E730C3E60374FC48099D2D096C2F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TvMzZvDPXk-oBO730eKSlO6lFIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/38449c-aad8-405a-b7f7-6d9f384d2bc3/1/TvMzZvDPXk-oBO730eKSlO6lFIw.mft
Manifest number: C4
Signing time: Fri 31 Jan 2025 17:00:22 +0000
Manifest this update: Fri 31 Jan 2025 17:00:22 +0000
Manifest next update: Sat 01 Feb 2025 17:00:22 +0000
Files and hashes: 1: TvMzZvDPXk-oBO730eKSlO6lFIw.crl (hash: dc8qvetjY2zA7NRhoVO9jza+OQv+yuolDGWtzmFPXZw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:73:0c:3e:60:37:4f:c4:80:99:d2:d0:96:c2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ef33366f0cf5e4fa804eef7d1e29294eea5148c
Validity
Not Before: Jan 31 17:00:22 2025 GMT
Not After : Feb 1 17:00:22 2025 GMT
Subject: CN=9b206433f02fa94cf752a4098307b370e996246b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8f:fe:8c:02:59:36:f3:a8:f0:45:55:c6:76:
74:0d:fb:20:b1:bb:49:88:cf:67:89:39:b8:67:aa:
e2:c4:3e:57:07:16:af:fd:6c:f5:dd:14:00:aa:c8:
c5:14:fb:65:86:1b:0b:29:d2:e7:09:02:68:e1:5a:
08:db:ab:9b:8f:5e:91:9d:b1:b8:96:46:70:81:b6:
e7:d4:cd:76:0d:c5:b9:af:1d:e3:51:b8:4c:5a:2c:
69:f9:dd:a0:84:d9:0e:ed:9b:51:e7:7f:a2:81:3c:
ff:97:85:47:d5:60:62:d2:90:90:96:71:24:be:bf:
9c:4a:9c:87:48:e4:db:a7:a2:60:10:47:67:38:92:
d8:8d:7c:b1:4c:f8:21:58:2b:92:12:bc:44:d1:eb:
64:91:f3:a4:96:79:48:ae:a8:af:8d:d3:e2:42:aa:
eb:d8:85:10:87:65:0b:e7:27:f3:fc:c4:e9:67:47:
12:47:f2:fd:c8:13:04:97:f8:ae:72:1c:90:19:7e:
fa:cf:0a:77:c7:78:c4:b9:25:85:31:da:6c:6f:59:
f2:1a:f7:b3:c6:e4:23:52:99:7d:d6:76:7d:26:74:
32:7a:a8:14:c0:2c:a4:8e:21:42:d0:4e:68:16:62:
48:49:3c:49:2b:c2:0e:0a:8a:2a:9a:dd:d0:5c:6b:
56:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:20:64:33:F0:2F:A9:4C:F7:52:A4:09:83:07:B3:70:E9:96:24:6B
X509v3 Authority Key Identifier:
keyid:4E:F3:33:66:F0:CF:5E:4F:A8:04:EE:F7:D1:E2:92:94:EE:A5:14:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvMzZvDPXk-oBO730eKSlO6lFIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/38449c-aad8-405a-b7f7-6d9f384d2bc3/1/TvMzZvDPXk-oBO730eKSlO6lFIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/38449c-aad8-405a-b7f7-6d9f384d2bc3/1/TvMzZvDPXk-oBO730eKSlO6lFIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:42:c9:14:97:34:7b:97:f0:1e:41:31:b2:c2:e9:39:78:13:
d5:e4:b2:02:ec:c2:d0:14:eb:13:c5:ad:29:ef:6f:56:0f:70:
5f:14:81:70:b9:e7:dc:d0:b6:86:09:6b:6b:bb:b6:e7:22:92:
6b:f2:7a:59:dc:c8:82:7b:01:c6:ec:09:5f:c8:84:b3:85:e5:
ff:5b:14:af:06:bc:c1:66:cf:26:bb:ae:32:c2:2a:06:18:06:
a8:dd:4b:45:54:65:af:45:75:3d:f9:43:10:21:28:f8:97:fe:
b4:0e:83:cd:24:6f:0b:f7:fd:7e:0d:7c:65:0d:4b:e7:ca:d8:
a4:ab:4e:8a:b0:60:45:6d:b3:b3:7f:32:04:a8:36:7f:07:41:
fe:2a:89:63:34:c6:f1:89:84:26:ff:24:81:1a:d4:da:fb:c6:
59:6c:69:b2:bc:e6:d9:e6:73:04:52:db:24:15:46:16:ff:3c:
91:ab:eb:a2:56:7d:de:16:f8:9f:cc:f0:a9:e6:75:3a:1c:42:
e3:8d:99:7e:15:4a:47:42:2b:83:c2:68:fb:dd:9c:51:b6:c0:
b9:32:28:3a:28:04:56:29:17:79:06:9f:5c:11:28:7d:17:9b:
cf:3d:43:1c:3b:7a:7b:8b:00:94:d2:ad:78:fb:97:dd:8e:81:
58:b8:c2:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:17:12 2025 by rpki-client