Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
File: CEl1fj41qqtdV8UYYkOkNxc-TTY.mft (raw, json)
Hash identifier: ipTlOweZzuG3ITN1xLgVTIezeaWsa6C/xt4rXMSlcN8=
Subject key identifier: 57:42:77:C2:D9:A7:66:E4:0A:A9:FA:A7:4F:BA:90:AB:C0:65:25:FF
Authority key identifier: 08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
Certificate issuer: /CN=0849757e3e35aaab5d57c5186243a437173e4d36
Certificate serial: 0194BBCE18CDD400C7BEFD641CC79F6331BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
Manifest number: 1163
Signing time: Fri 31 Jan 2025 10:00:33 +0000
Manifest this update: Fri 31 Jan 2025 10:00:33 +0000
Manifest next update: Sat 01 Feb 2025 10:00:33 +0000
Files and hashes: 1: CEl1fj41qqtdV8UYYkOkNxc-TTY.crl (hash: OmEVM+I+JhwtLbXl9qPsmCgyfieDa8Y3CsVjBueisow=)
2: ughB2qwCJjXq23HnnasoQDdXgE8.roa (hash: LImj3hNpOasXYHWcbm9URdJgBeEySrqqax18nJO4GMo=)
3: v0jeM-EK5U0lFswlXgsyLuIVWWw.roa (hash: M3nsb4FrAgnB7zU3prkNFU+S+Vg3EPSnI0a1Dxv4l5Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:18:cd:d4:00:c7:be:fd:64:1c:c7:9f:63:31:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0849757e3e35aaab5d57c5186243a437173e4d36
Validity
Not Before: Jan 31 10:00:33 2025 GMT
Not After : Feb 1 10:00:33 2025 GMT
Subject: CN=574277c2d9a766e40aa9faa74fba90abc06525ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ee:98:7a:9f:9d:e1:3a:ff:e2:80:da:b4:cb:
b0:87:5c:0a:57:a5:cb:1e:e1:0a:0c:02:ea:2d:c3:
14:5d:d6:0f:5f:e9:dc:ab:33:4c:0e:e2:29:15:9c:
18:be:c7:e7:e9:bf:fc:63:1d:4b:16:ec:ef:ec:64:
54:79:0c:09:ba:bf:70:a1:5d:9d:94:56:34:68:a1:
dc:a4:68:a5:a9:7b:fe:3b:c9:63:51:f0:33:55:74:
f1:a5:bf:da:65:9e:40:07:3d:d6:24:bd:5e:d7:0f:
24:b7:b5:18:5a:7c:c6:85:3f:a8:14:8e:e4:80:59:
b6:d7:e9:fe:05:41:c8:aa:6a:7d:c5:3a:b7:1e:09:
c5:81:98:44:3c:a7:dd:04:b3:75:59:f1:6e:e1:b0:
89:df:83:b9:f4:bd:61:0f:c2:be:75:06:8a:a9:94:
19:c9:52:63:44:df:9d:99:68:4c:94:df:a5:77:e4:
3b:04:b0:7a:c1:52:81:a2:4d:d7:66:8a:b6:ae:77:
54:4d:8d:78:63:1d:9e:9f:f7:00:90:92:be:2c:b2:
89:3a:40:af:ef:57:9d:93:98:aa:f1:98:26:51:d9:
ed:31:05:ac:f1:3d:4f:e7:42:12:db:3b:95:88:97:
e3:3f:96:1e:27:23:8c:53:ec:19:03:62:06:ca:68:
5f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:42:77:C2:D9:A7:66:E4:0A:A9:FA:A7:4F:BA:90:AB:C0:65:25:FF
X509v3 Authority Key Identifier:
keyid:08:49:75:7E:3E:35:AA:AB:5D:57:C5:18:62:43:A4:37:17:3E:4D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CEl1fj41qqtdV8UYYkOkNxc-TTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/fb2401-e470-4c05-99b8-f8eecb425087/1/CEl1fj41qqtdV8UYYkOkNxc-TTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:07:bb:34:10:99:92:38:c6:40:13:f4:cd:92:8f:df:77:00:
01:7f:05:dc:40:66:d5:bc:3b:b7:39:6e:52:ac:69:2e:0e:fc:
e1:aa:19:b1:40:2e:c8:8b:67:b7:5f:c7:d2:1d:29:d8:d3:e0:
25:07:73:37:fe:40:72:60:0d:5b:ce:15:dd:83:46:f6:81:ca:
95:80:e9:e3:f1:22:7e:da:fa:98:22:c4:a6:58:6b:35:d1:6c:
2e:fb:b3:b4:df:66:11:76:a3:36:1b:41:dc:ac:c7:14:86:b6:
f9:e6:5a:97:ab:1d:a8:23:63:1a:da:04:cf:ac:6e:0a:94:66:
78:32:a4:9b:bc:78:d5:51:2b:b4:d4:84:ec:63:e9:89:9b:19:
a2:c5:e6:d4:90:81:c8:a7:1b:2e:8e:b9:47:69:75:b8:fa:e8:
c4:f7:64:ca:b0:1c:90:f3:86:e5:4d:87:07:97:0a:d9:15:ab:
d0:b5:e0:ba:64:73:36:74:22:a2:3f:ab:b7:d1:0c:d6:03:9b:
aa:88:d1:be:df:f5:81:59:11:75:12:43:aa:fe:4b:ba:0f:84:
5a:ca:6b:6a:4f:17:24:aa:1e:b2:2c:ea:8f:f7:f7:08:80:ef:
30:12:06:3d:7c:4f:f6:f2:fa:d3:a1:7c:dc:0b:e7:84:f0:df:
07:86:41:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:57:11 2025 by rpki-client