Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/859374-7672-49cc-a852-1620c3759991/1/tdtzI5cVvIixALOGOKX4MMQkmRc.mft
File: tdtzI5cVvIixALOGOKX4MMQkmRc.mft (raw, json)
Hash identifier: np/vVu35bvupasIkMXmym5ardpImY5xBXB1Ba/OWZvE=
Subject key identifier: 71:59:B1:38:54:40:CB:80:29:DF:2F:2B:4B:00:53:72:71:B8:F9:70
Authority key identifier: B5:DB:73:23:97:15:BC:88:B1:00:B3:86:38:A5:F8:30:C4:24:99:17
Certificate issuer: /CN=b5db73239715bc88b100b38638a5f830c4249917
Certificate serial: 07E60B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tdtzI5cVvIixALOGOKX4MMQkmRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/859374-7672-49cc-a852-1620c3759991/1/tdtzI5cVvIixALOGOKX4MMQkmRc.mft
Manifest number: 0875
Signing time: Tue 01 Mar 2022 06:06:58 +0000
Manifest this update: Tue 01 Mar 2022 06:06:58 +0000
Manifest next update: Wed 02 Mar 2022 06:06:58 +0000
Files and hashes: 1: tdtzI5cVvIixALOGOKX4MMQkmRc.crl (hash: 2HDSIW85ZCYVk2y5NA0K4q+knFOo+IXW9UCoHhFNoMA=)
2: zdwjcsJcPV7ZFXphlWm_xdUJmeY.roa (hash: 0lCYJWwbEUITf3s0Woc6RR6GWBBJQAKSWed0oxaRKNI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 132516759 (0x7e60b97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5db73239715bc88b100b38638a5f830c4249917
Validity
Not Before: Mar 1 06:06:58 2022 GMT
Not After : Mar 2 06:06:58 2022 GMT
Subject: CN=7159b1385440cb8029df2f2b4b00537271b8f970
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e2:1f:4b:27:d6:f4:40:70:71:52:bb:01:54:
0b:88:4a:55:88:e1:2e:b0:4c:80:c7:80:93:b1:01:
47:ef:63:69:5a:08:25:68:52:e7:87:b2:c6:09:93:
2a:62:be:87:62:16:fb:d1:33:e1:40:67:9f:b6:c9:
2a:84:70:60:04:f7:e7:1e:ad:85:03:07:79:3b:4d:
65:9b:70:fc:2f:3d:65:c9:ab:5d:da:cc:f9:09:1a:
c9:53:d9:35:27:24:68:2e:04:5b:a0:6d:d3:fb:dc:
54:59:d0:92:d2:35:56:7e:b9:77:33:51:11:7e:d3:
37:ba:31:49:33:4f:0c:ae:10:67:71:3c:cc:d0:a9:
30:20:11:56:88:19:dc:d4:36:eb:f5:6b:20:f1:1c:
a3:89:af:bd:f3:69:4a:3f:ca:c3:de:57:a6:e4:0d:
14:82:cf:6d:2b:8b:33:20:32:81:42:2d:22:aa:e2:
09:ac:f0:bb:a3:eb:cb:d7:34:89:ae:6e:20:b3:ce:
57:54:2b:77:3b:fa:95:4b:90:48:c5:99:0f:31:cf:
37:10:4f:00:9f:4c:86:5a:65:88:94:e7:a9:d4:79:
d2:bd:24:52:fa:a9:68:36:b2:dc:ee:c0:80:19:21:
8a:78:e0:fe:9e:55:2f:e5:9f:09:32:2d:b1:fe:e4:
cf:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:59:B1:38:54:40:CB:80:29:DF:2F:2B:4B:00:53:72:71:B8:F9:70
X509v3 Authority Key Identifier:
keyid:B5:DB:73:23:97:15:BC:88:B1:00:B3:86:38:A5:F8:30:C4:24:99:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tdtzI5cVvIixALOGOKX4MMQkmRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/859374-7672-49cc-a852-1620c3759991/1/tdtzI5cVvIixALOGOKX4MMQkmRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/859374-7672-49cc-a852-1620c3759991/1/tdtzI5cVvIixALOGOKX4MMQkmRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:64:2b:94:af:88:a1:24:11:52:8c:26:85:74:d8:1a:37:3c:
4f:3f:bf:b0:11:41:96:32:fc:a2:07:1e:47:3d:49:73:21:47:
6c:8e:20:f8:04:f5:41:f0:4d:6d:06:11:00:ee:f0:88:61:46:
6f:54:d6:76:3e:72:84:88:ba:74:f6:93:34:86:db:54:63:7a:
d9:85:b2:48:f5:57:7e:32:e9:be:07:00:5f:c1:40:7f:30:95:
bc:f8:95:a9:76:0a:db:cc:f6:0d:45:cb:16:06:c3:6c:6e:b8:
78:fb:03:42:f1:32:06:fe:bc:13:b6:34:49:85:15:da:ff:49:
9b:d8:9b:cb:e0:0f:0b:a9:1c:2d:3f:3e:a7:3e:9f:db:c8:2e:
06:ef:5a:6c:d2:22:ce:c4:ad:2b:f2:af:ea:da:14:88:f4:fe:
a8:e2:68:23:43:a4:e7:5f:2f:8b:7a:71:7d:04:a2:0f:9f:89:
2a:85:fb:0c:0d:a0:ef:23:9c:a7:49:7e:ce:b5:f5:c9:38:41:
e9:b4:6e:02:3d:74:46:55:56:86:10:fc:88:c1:e3:90:5a:3b:
dc:a5:f2:85:cf:c9:d0:b4:8e:e5:d0:f7:b3:95:da:5e:0e:41:
66:08:36:f0:9b:e8:1d:62:bb:bd:70:81:23:3a:8e:02:89:6e:
21:a3:48:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:54 2025 by rpki-client