Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/72028a-c305-4edf-9570-45904e460f73/1/_TP0TgiYi67K_bXPKQvcjRjJ5Go.mft
File: _TP0TgiYi67K_bXPKQvcjRjJ5Go.mft (raw, json)
Hash identifier: q6scY1tapdiPMguiqf1ZiWecx43zrYJ+402DDWuDu3Q=
Subject key identifier: 79:3E:B1:FD:44:44:91:E1:FF:48:C9:4B:D3:61:3B:FE:D0:93:52:15
Authority key identifier: FD:33:F4:4E:08:98:8B:AE:CA:FD:B5:CF:29:0B:DC:8D:18:C9:E4:6A
Certificate issuer: /CN=fd33f44e08988baecafdb5cf290bdc8d18c9e46a
Certificate serial: 018ADE3DD343776BA748128D58FF6D9CA9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TP0TgiYi67K_bXPKQvcjRjJ5Go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/72028a-c305-4edf-9570-45904e460f73/1/_TP0TgiYi67K_bXPKQvcjRjJ5Go.mft
Manifest number: 0F0F
Signing time: Fri 29 Sep 2023 00:01:48 +0000
Manifest this update: Fri 29 Sep 2023 00:01:48 +0000
Manifest next update: Sat 30 Sep 2023 00:01:48 +0000
Files and hashes: 1: Rc3TtdCijOrXstn_sustec16WEo.roa (hash: I/2e0xGTuGm55lIcuJzwqTJw7U+y2XQ5QV9bTUwvV+o=)
2: _TP0TgiYi67K_bXPKQvcjRjJ5Go.crl (hash: 3CI2mkt2ytutOLpDTLEnUCSMcqX9fBjcF45IM8dFoX4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:de:3d:d3:43:77:6b:a7:48:12:8d:58:ff:6d:9c:a9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd33f44e08988baecafdb5cf290bdc8d18c9e46a
Validity
Not Before: Sep 29 00:01:48 2023 GMT
Not After : Sep 30 00:01:48 2023 GMT
Subject: CN=793eb1fd444491e1ff48c94bd3613bfed0935215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:69:76:56:59:24:7c:ad:d8:cf:66:82:9b:6f:
fe:95:21:41:62:ca:41:c3:0c:a4:38:6d:3d:16:08:
4d:da:5f:32:f3:86:e1:70:be:21:8a:5a:a4:ff:91:
17:64:ae:43:40:78:ce:70:fa:77:ee:57:85:ac:d3:
79:ed:e5:33:13:94:07:f2:17:07:09:39:e2:3b:8e:
0b:f2:72:67:cf:9e:93:39:1a:06:44:6a:03:5f:8a:
4c:bf:68:2c:45:bc:c3:48:25:10:e5:16:b1:ef:cd:
ab:a2:d6:df:0b:bb:5c:43:8e:f7:e3:83:f1:ba:19:
fc:59:7b:b7:ce:f7:59:dc:8f:28:f6:71:91:f3:33:
be:21:ee:3d:52:2c:91:83:bc:a5:01:68:9a:4a:69:
e2:7f:30:06:ae:6e:fd:14:1d:ec:37:57:3a:d0:ee:
28:70:2c:35:39:51:89:8e:b5:40:b8:03:eb:59:4c:
00:a1:86:e6:ed:28:9b:d0:7f:7f:41:b7:ea:d4:06:
56:b2:35:95:01:90:44:14:48:f5:6b:b5:49:4a:6d:
13:ec:cf:71:9b:3b:ce:b0:00:1b:d7:b5:24:92:47:
3e:86:c4:75:21:4f:dc:4e:95:ea:60:af:2b:e2:70:
ba:6a:bf:9a:81:ed:62:6c:51:4e:a6:47:37:2a:6b:
54:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3E:B1:FD:44:44:91:E1:FF:48:C9:4B:D3:61:3B:FE:D0:93:52:15
X509v3 Authority Key Identifier:
keyid:FD:33:F4:4E:08:98:8B:AE:CA:FD:B5:CF:29:0B:DC:8D:18:C9:E4:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TP0TgiYi67K_bXPKQvcjRjJ5Go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/72028a-c305-4edf-9570-45904e460f73/1/_TP0TgiYi67K_bXPKQvcjRjJ5Go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/72028a-c305-4edf-9570-45904e460f73/1/_TP0TgiYi67K_bXPKQvcjRjJ5Go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:02:c8:8f:a1:f5:99:ae:aa:2b:4a:94:dc:a0:78:08:e6:e4:
88:36:a4:b5:32:b7:1a:23:e2:b1:e0:45:09:4a:24:dc:c4:91:
2b:36:ec:05:f1:33:90:f1:dc:3e:b5:ef:bc:01:5d:61:36:ad:
e5:8f:45:cb:6e:4d:0b:9f:e2:b5:d6:a0:b2:4e:e0:77:14:05:
1e:13:4d:9f:91:2b:bd:59:66:8b:5b:d7:ff:9d:bf:56:b1:93:
5f:99:49:7e:5b:56:47:5d:1d:93:72:7c:7b:24:99:a0:c9:b4:
cf:b9:70:19:80:67:79:b5:02:a0:8f:a7:fb:ee:97:8c:b3:ae:
11:27:69:ff:ad:dd:eb:8a:9b:d3:2f:bc:19:7b:b7:2c:98:a3:
e6:25:a1:f6:92:e7:4d:c0:a8:33:53:9b:0b:b7:a1:a4:06:9d:
0c:a3:d6:76:da:f7:fa:2f:f0:15:e3:45:f3:cc:23:ec:08:6c:
dc:fd:55:a3:dc:b6:68:dc:6f:43:fd:a3:0c:3b:46:41:f4:e0:
e5:55:8a:f3:95:2c:5e:94:dd:c4:d8:18:8e:5e:35:59:37:71:
ea:9d:e0:d5:39:75:7f:55:4d:fc:5d:94:34:7c:f2:a8:53:f6:
a1:33:62:cd:98:74:07:a8:b0:74:51:14:24:6d:b3:7c:13:24:
09:5c:ed:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:02:36 2025 by rpki-client