Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f12b7f-6a53-4b1e-9087-1b64b5b37b0c/1/tTJWdaWUgSTDoVu8XlLM41g8kOI.mft
File: tTJWdaWUgSTDoVu8XlLM41g8kOI.mft (raw, json)
Hash identifier: UQGw4Hivs+nrZrHI1c5fsYYKK+9RvF2bUQBGbqD9iVo=
Subject key identifier: 7B:AB:D7:72:EB:03:91:AD:8A:47:97:2F:89:BD:E4:75:CB:E9:C4:4F
Authority key identifier: B5:32:56:75:A5:94:81:24:C3:A1:5B:BC:5E:52:CC:E3:58:3C:90:E2
Certificate issuer: /CN=b5325675a5948124c3a15bbc5e52cce3583c90e2
Certificate serial: 0186931B4E1EEC66D35849A1726F42D6D6D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTJWdaWUgSTDoVu8XlLM41g8kOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f12b7f-6a53-4b1e-9087-1b64b5b37b0c/1/tTJWdaWUgSTDoVu8XlLM41g8kOI.mft
Manifest number: 01
Signing time: Mon 27 Feb 2023 13:41:25 +0000
Manifest this update: Mon 27 Feb 2023 13:41:25 +0000
Manifest next update: Tue 28 Feb 2023 13:41:25 +0000
Files and hashes: 1: tTJWdaWUgSTDoVu8XlLM41g8kOI.crl (hash: 3oSv4Gt0WwcoWgHs3A55mYRhBeQBpTsAjn4UIcz9Zxk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:93:1b:4e:1e:ec:66:d3:58:49:a1:72:6f:42:d6:d6:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5325675a5948124c3a15bbc5e52cce3583c90e2
Validity
Not Before: Feb 27 13:41:25 2023 GMT
Not After : Feb 28 13:41:25 2023 GMT
Subject: CN=7babd772eb0391ad8a47972f89bde475cbe9c44f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cd:f4:32:d0:f9:bc:d2:58:04:29:8c:09:56:
56:38:9f:7d:73:08:f5:2e:db:e2:1f:4e:f4:5b:ac:
ee:37:1c:b5:42:01:10:6a:4c:7b:a2:08:ed:83:4c:
c1:2d:fc:a7:91:9a:8f:27:d0:d9:30:cb:7f:ee:c7:
6f:9a:3e:c9:42:37:89:24:f6:05:71:53:6e:11:cd:
9a:40:a5:a8:55:56:af:9c:54:ab:db:54:c5:fe:a3:
88:37:f0:6c:78:8a:cb:23:72:88:db:a0:f6:b8:72:
94:17:72:8c:99:fe:f7:6d:9b:d0:7d:4b:9b:98:0a:
fa:48:3c:01:bf:81:e1:12:fe:24:d5:bb:78:0d:a9:
53:e2:0c:23:77:7d:8d:d2:e8:58:1e:5f:4f:65:d5:
93:62:5f:f0:ec:3f:1e:89:8b:f1:a8:15:c7:de:01:
c7:5e:06:fc:05:2e:bc:8b:f8:69:73:1f:27:76:20:
0d:0c:0b:e4:93:6a:cb:55:92:ef:e2:48:38:04:17:
69:1d:82:4c:01:80:4d:d1:c1:ef:23:e1:7d:d9:38:
59:ed:73:a0:16:96:1b:5b:ed:12:3c:93:a0:41:67:
d5:3a:6d:e0:c2:fc:bd:60:0e:9a:47:c1:bf:ed:01:
e6:5c:f4:f0:4c:15:68:a7:61:37:b7:6f:6d:c9:5f:
f0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AB:D7:72:EB:03:91:AD:8A:47:97:2F:89:BD:E4:75:CB:E9:C4:4F
X509v3 Authority Key Identifier:
keyid:B5:32:56:75:A5:94:81:24:C3:A1:5B:BC:5E:52:CC:E3:58:3C:90:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTJWdaWUgSTDoVu8XlLM41g8kOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f12b7f-6a53-4b1e-9087-1b64b5b37b0c/1/tTJWdaWUgSTDoVu8XlLM41g8kOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f12b7f-6a53-4b1e-9087-1b64b5b37b0c/1/tTJWdaWUgSTDoVu8XlLM41g8kOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:dc:67:ae:39:88:43:de:ab:96:8b:2d:44:9c:72:f0:3a:e6:
4a:91:e0:fd:60:68:4d:95:a1:84:ab:aa:1d:98:db:38:c7:91:
31:57:ca:34:45:2c:4b:8b:9c:3f:e0:2e:48:99:7d:48:f6:ec:
d1:eb:d3:05:75:b4:ab:28:cc:11:4e:bb:02:8c:99:9a:7d:1d:
16:59:45:c1:0f:4d:01:13:c2:b5:2e:83:0e:c4:36:0a:c0:a9:
9a:23:cc:1a:2e:57:95:63:f6:d7:1d:eb:b4:55:0d:95:c8:52:
cb:e0:36:cd:07:41:a0:94:4c:0c:38:73:f3:95:4a:76:96:b7:
4c:90:b2:fb:8e:0e:9c:a8:c7:c6:09:5f:1e:ee:f4:e1:44:e8:
f3:37:fe:f7:7f:ec:c1:56:6d:bd:b1:da:f5:61:0e:82:c3:96:
63:5b:5b:65:a1:9c:86:b2:75:c6:f5:6c:5f:88:15:66:50:13:
3a:93:37:a9:7e:32:80:22:e7:08:e5:0a:69:2a:a0:55:c7:f8:
81:ad:f2:1f:bc:02:91:bf:79:ad:88:62:57:31:ca:b9:48:1f:
27:83:9e:9f:a2:ac:0b:19:4f:a8:80:d5:80:7f:c5:b2:ed:f8:
48:fa:da:cb:83:33:3e:83:38:cb:3c:ca:eb:9f:f2:cd:33:e9:
6b:b9:41:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 00:32:21 2025 by rpki-client