Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/TgWhR5BmUWnAnlyUPv9dgl5sj_M.mft
File: TgWhR5BmUWnAnlyUPv9dgl5sj_M.mft (raw, json)
Hash identifier: tjM2JXt+6OK08X6tGMfgNGFYLBM9fITbXgSF0wYyEXQ=
Subject key identifier: DB:AF:3C:FD:80:67:95:17:E5:85:6F:08:6E:C3:DC:E8:A0:8F:FE:94
Authority key identifier: 4E:05:A1:47:90:66:51:69:C0:9E:5C:94:3E:FF:5D:82:5E:6C:8F:F3
Certificate issuer: /CN=4e05a14790665169c09e5c943eff5d825e6c8ff3
Certificate serial: 019510C79B86F0D8E147CD9750891D5BBEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgWhR5BmUWnAnlyUPv9dgl5sj_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/TgWhR5BmUWnAnlyUPv9dgl5sj_M.mft
Manifest number: 07C0
Signing time: Sun 16 Feb 2025 22:01:11 +0000
Manifest this update: Sun 16 Feb 2025 22:01:11 +0000
Manifest next update: Mon 17 Feb 2025 22:01:11 +0000
Files and hashes: 1: TgWhR5BmUWnAnlyUPv9dgl5sj_M.crl (hash: cb5BAHQciMntxXSelgvW6oOTmap7YA+BEhVFFbqyb5o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:10:c7:9b:86:f0:d8:e1:47:cd:97:50:89:1d:5b:be:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e05a14790665169c09e5c943eff5d825e6c8ff3
Validity
Not Before: Feb 16 22:01:11 2025 GMT
Not After : Feb 17 22:01:11 2025 GMT
Subject: CN=dbaf3cfd80679517e5856f086ec3dce8a08ffe94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:90:26:02:56:9c:e2:e0:e3:16:64:35:48:9f:
2e:ee:73:9d:61:d4:55:93:e5:3f:88:67:60:f3:47:
92:dc:aa:24:a2:ad:e1:ef:d6:c1:44:98:18:36:64:
7d:cf:64:cb:d1:6c:2d:d2:68:af:8f:8a:70:2e:32:
4a:c7:e9:8a:e8:45:d0:f7:a4:d6:ed:53:5d:dc:53:
a3:5e:65:d8:89:7d:fa:84:df:91:84:52:47:9f:a5:
2f:6b:f2:ca:15:be:4e:4e:5a:5a:88:d5:d9:b2:0c:
d6:20:11:74:ac:5f:5e:c1:9e:ef:44:e8:e9:5d:01:
e2:a7:f8:a8:70:21:27:a8:de:df:0d:6e:66:97:3c:
d3:f8:23:82:69:2b:8f:64:bb:2a:c2:8f:b3:fe:95:
d3:83:f6:78:ca:47:4e:7a:0f:c3:8c:64:c3:5a:ba:
b4:ce:7d:b8:06:1f:b1:4c:67:a1:cb:8b:aa:34:bf:
18:d6:c1:f5:67:bb:cc:f8:39:7b:c3:f5:23:04:0c:
1a:49:ed:fa:f2:22:85:53:48:03:7b:dc:ff:10:28:
bd:28:bb:d7:d7:28:55:f7:55:42:17:f6:db:16:da:
81:1a:ca:15:d5:77:3e:8b:a5:51:18:5b:00:46:36:
2f:f5:13:ea:2a:b2:c9:78:09:c3:e0:0f:f9:ee:bc:
63:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:AF:3C:FD:80:67:95:17:E5:85:6F:08:6E:C3:DC:E8:A0:8F:FE:94
X509v3 Authority Key Identifier:
keyid:4E:05:A1:47:90:66:51:69:C0:9E:5C:94:3E:FF:5D:82:5E:6C:8F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgWhR5BmUWnAnlyUPv9dgl5sj_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/TgWhR5BmUWnAnlyUPv9dgl5sj_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/TgWhR5BmUWnAnlyUPv9dgl5sj_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:61:22:ea:c7:ec:12:a2:07:4d:ed:ab:4d:f6:8e:ff:b7:14:
35:2f:9c:43:f0:0b:63:1c:e2:73:40:d1:e4:23:3f:6f:6f:e8:
54:7e:e0:2f:d0:28:54:28:52:88:8b:86:38:16:cf:de:c2:28:
f0:86:d3:fd:5e:19:3a:97:ce:30:63:17:e5:c2:54:83:f0:0b:
4d:99:c9:e7:f4:16:87:22:5a:6f:fc:e0:09:06:fe:e7:f1:ce:
b3:95:88:ee:a2:be:69:ef:86:e0:79:59:ec:cc:9a:ec:54:e5:
cf:91:d2:95:80:80:6b:29:4f:17:36:b1:f2:2b:6a:1c:d3:37:
a8:bb:16:cd:49:38:21:8b:c6:d7:ca:a3:52:67:09:e1:55:a7:
4d:38:94:0d:98:a8:bd:02:31:e5:a1:9b:e8:35:aa:c9:d8:50:
55:c5:6b:86:96:1b:fa:c1:ac:b4:44:70:12:1e:0c:71:ce:c0:
9d:22:57:3c:06:70:0c:81:ec:f4:d9:0a:61:5d:94:14:02:2d:
d2:50:85:7f:7d:a7:dd:84:38:cd:3e:7c:29:8e:16:9e:23:85:
f3:24:46:5f:39:ad:cb:97:cf:1b:81:90:72:2d:e4:cb:20:b1:
75:6c:b9:64:86:c9:1e:58:d2:64:09:5a:7c:17:93:fa:54:f1:
72:a6:be:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 08:31:58 2025 by rpki-client