Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/tn3W9bzpj3vDFpsdufoOW5zvLrs.mft
File: tn3W9bzpj3vDFpsdufoOW5zvLrs.mft (raw, json)
Hash identifier: IZWK8fv05l/JpeTXtygjbK6+rZylwFzDHdD5zzZQi3M=
Subject key identifier: 2C:79:CE:E8:8D:4F:B5:58:0A:7F:CD:AA:29:A0:83:C3:48:F9:30:5D
Authority key identifier: B6:7D:D6:F5:BC:E9:8F:7B:C3:16:9B:1D:B9:FA:0E:5B:9C:EF:2E:BB
Certificate issuer: /CN=b67dd6f5bce98f7bc3169b1db9fa0e5b9cef2ebb
Certificate serial: 01870E6844292E74E940F1C2C8F63CF0E232
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn3W9bzpj3vDFpsdufoOW5zvLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/tn3W9bzpj3vDFpsdufoOW5zvLrs.mft
Manifest number: 0678
Signing time: Thu 23 Mar 2023 12:18:46 +0000
Manifest this update: Thu 23 Mar 2023 12:18:46 +0000
Manifest next update: Fri 24 Mar 2023 12:18:46 +0000
Files and hashes: 1: N59OXK3pO1oy0Md41q4iZkkyzUo.roa (hash: dQBJVeq3PVoZsanDI+GH8BrDfLpxLIZONEJ7jivYK40=)
2: tn3W9bzpj3vDFpsdufoOW5zvLrs.crl (hash: woxzhgjczQhtUoR9LVTz9vfISi/82YuzcG4zYhzjMZo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0e:68:44:29:2e:74:e9:40:f1:c2:c8:f6:3c:f0:e2:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67dd6f5bce98f7bc3169b1db9fa0e5b9cef2ebb
Validity
Not Before: Mar 23 12:18:46 2023 GMT
Not After : Mar 24 12:18:46 2023 GMT
Subject: CN=2c79cee88d4fb5580a7fcdaa29a083c348f9305d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c9:c1:31:2c:2b:1d:eb:d6:5e:1d:8e:82:ba:
64:5a:9b:e8:b3:6a:92:9c:f8:2c:f1:da:e5:61:91:
98:03:7d:f3:83:37:d6:06:db:c3:16:20:bd:43:52:
b2:60:70:6a:e1:b8:a0:2f:f2:a5:3a:e2:0b:03:9e:
cf:b7:d4:ee:da:96:a9:92:5f:fc:b7:5e:9a:13:b0:
39:59:4d:8b:62:e2:2c:78:f6:1d:1f:0f:f5:11:86:
ba:57:e5:63:0e:ed:bf:fc:2b:98:70:1b:1f:b1:5d:
42:91:c1:43:da:15:27:c6:03:43:fa:ac:dd:42:08:
dd:30:f6:ce:f0:06:5f:f4:19:a6:fe:5c:f1:59:59:
06:9d:7a:50:ec:18:39:60:29:d5:46:d5:fb:50:d5:
1d:56:fb:d9:b2:21:06:49:d4:40:90:4c:29:6b:90:
58:8d:ed:f4:ee:52:4d:fd:89:01:10:b2:9f:37:4c:
b4:7f:d9:19:12:67:3e:f9:a7:0b:f6:ed:5f:c5:5a:
d0:89:2d:04:ef:c2:aa:42:ea:a2:bb:fb:c0:f5:3e:
9a:69:e3:af:d1:dd:fc:e1:62:e6:92:14:43:ed:dc:
df:ad:68:f6:3d:c5:de:96:b7:a3:eb:2d:5c:72:7f:
6c:e8:5b:62:4e:ea:d9:65:50:27:70:34:b7:17:4a:
97:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:79:CE:E8:8D:4F:B5:58:0A:7F:CD:AA:29:A0:83:C3:48:F9:30:5D
X509v3 Authority Key Identifier:
keyid:B6:7D:D6:F5:BC:E9:8F:7B:C3:16:9B:1D:B9:FA:0E:5B:9C:EF:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn3W9bzpj3vDFpsdufoOW5zvLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/tn3W9bzpj3vDFpsdufoOW5zvLrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/943585-c124-4bac-888a-3e59cf1aec44/1/tn3W9bzpj3vDFpsdufoOW5zvLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:82:f8:3c:4a:d2:94:4d:6e:04:ca:3d:79:db:95:b4:8e:25:
b6:17:ff:57:44:d0:b2:e6:fa:eb:44:1d:c3:0b:a2:83:62:66:
53:c4:65:c2:96:d9:2f:ef:2f:a4:b1:61:a3:22:24:6c:59:ef:
e4:55:70:25:bf:51:b3:14:34:37:5d:cd:47:7f:95:4e:71:0e:
1e:51:2d:9e:ba:50:2c:ac:8e:9c:52:a2:e1:1f:50:e7:03:23:
d5:b2:4a:1c:c7:fb:44:8d:4a:37:ca:5c:47:33:21:9a:da:c0:
f7:5a:ee:87:3d:93:76:fb:69:77:88:13:d1:6a:74:8b:48:42:
7f:66:0d:2a:35:10:94:c6:b8:7f:e0:3e:f9:c2:32:eb:68:9b:
6b:5d:50:97:a5:8d:91:04:d7:9e:82:1f:a6:3b:19:5f:81:fa:
ee:37:72:66:12:99:e4:b5:89:b2:30:a5:9b:aa:69:65:85:a8:
9c:60:41:a8:38:d7:a6:e8:50:74:10:e4:a2:ae:11:ab:5b:3b:
f7:b5:13:8b:34:8f:53:33:61:af:50:00:ed:d8:52:b0:4c:79:
d6:aa:dd:6b:6d:c7:b1:81:d9:a3:85:f4:e6:ee:12:27:8a:af:
82:e8:ca:fd:fe:df:b8:4a:07:c8:62:6e:08:51:b1:e6:a6:89:
08:ab:dd:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:13 2025 by rpki-client