Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
File: TT2CE15FkxVfpq1vt_7LAfE4GLI.mft (raw, json)
Hash identifier: fAz9+c5u4iA8AhWwBJjUVz96jPgILT5HQztQJ8XBJvk=
Subject key identifier: DE:59:A1:C8:FB:C4:A1:36:49:5A:23:90:F5:51:D1:60:F1:88:6B:80
Authority key identifier: 4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2
Certificate issuer: /CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2
Certificate serial: 0195E1908AF517B7B435E641B887075742C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
Manifest number: 0933
Signing time: Sat 29 Mar 2025 11:01:41 +0000
Manifest this update: Sat 29 Mar 2025 11:01:41 +0000
Manifest next update: Sun 30 Mar 2025 11:01:41 +0000
Files and hashes: 1: TT2CE15FkxVfpq1vt_7LAfE4GLI.crl (hash: 8orilGCVrTAFJ5G9LQrOn4MrCBySjn1yX2GPdTzKR1U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:90:8a:f5:17:b7:b4:35:e6:41:b8:87:07:57:42:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3d82135e4593155fa6ad6fb7fecb01f13818b2
Validity
Not Before: Mar 29 11:01:41 2025 GMT
Not After : Mar 30 11:01:41 2025 GMT
Subject: CN=de59a1c8fbc4a136495a2390f551d160f1886b80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:16:16:bf:6d:b6:f0:18:90:65:a3:41:95:dd:
d3:f2:65:0d:36:08:9e:5d:31:f4:07:ad:4f:c4:0d:
69:c8:38:0f:1b:cb:17:d7:62:1b:1c:96:ce:1e:4e:
9c:a6:87:05:e2:32:70:bf:f4:cb:ac:7d:90:42:37:
ef:55:1d:55:e6:36:25:30:71:be:8d:81:3e:5d:18:
02:77:66:1c:a6:6b:5c:a6:91:97:1d:c6:a1:b4:a8:
df:0c:90:4c:61:b2:9b:80:f8:7a:29:81:83:f4:9f:
a5:c8:14:d3:70:8f:ac:71:59:54:4f:ec:79:5c:6c:
23:5e:9c:83:08:1b:51:2b:d2:89:43:c4:ed:b3:0d:
25:83:47:03:53:94:98:8a:68:ec:9f:89:02:26:1b:
ef:dd:8b:cf:b6:69:53:b0:98:f7:05:b4:e9:ac:29:
5a:c3:6c:d9:ce:5f:85:eb:a9:62:63:a0:e5:cf:43:
23:82:8d:36:4c:6d:3f:4f:be:38:25:4d:af:2d:9a:
35:b4:55:e9:82:04:90:7a:bc:4b:f7:f2:d8:ff:11:
b9:d7:38:cf:c9:97:4c:a8:a7:eb:34:bf:93:77:2b:
f8:48:56:d2:ad:30:2a:cb:2c:5f:42:89:79:61:b8:
5d:3d:f9:e0:1f:7c:52:d9:ea:a2:4a:87:15:48:99:
d2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:59:A1:C8:FB:C4:A1:36:49:5A:23:90:F5:51:D1:60:F1:88:6B:80
X509v3 Authority Key Identifier:
keyid:4D:3D:82:13:5E:45:93:15:5F:A6:AD:6F:B7:FE:CB:01:F1:38:18:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT2CE15FkxVfpq1vt_7LAfE4GLI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/58bb93-f6a2-4898-bfd8-05d8756f092e/1/TT2CE15FkxVfpq1vt_7LAfE4GLI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0a:b0:19:f3:ed:b1:14:08:a5:88:a0:63:24:c0:e0:57:09:
89:a4:97:bd:6d:dc:c6:92:ab:db:48:3d:4b:57:96:4e:b6:f6:
3f:1b:2e:f9:eb:4c:cb:dd:fc:f9:03:b3:8a:90:ad:46:23:36:
4d:86:33:4d:df:60:84:af:c2:29:97:c1:3f:b8:dc:24:3d:2a:
ca:84:f1:1b:e7:81:86:44:c6:a4:81:de:3c:68:6a:02:cb:5f:
c5:1e:60:70:87:a3:c1:90:75:2a:9a:ed:57:31:63:9d:a1:57:
84:18:4b:89:ca:aa:d9:af:2a:46:39:31:89:60:d1:c6:9e:68:
f0:c2:c8:1f:05:fb:c2:4b:1c:ad:77:f2:fe:a6:bb:04:13:53:
dc:b5:d4:8d:0e:02:60:34:42:9d:55:00:08:dd:7c:8f:c5:27:
4d:98:f4:00:7a:68:b7:6f:d5:54:c5:cb:2d:15:13:c2:d2:97:
e7:f6:37:48:ef:69:1b:81:a7:cc:ae:37:27:ff:f5:9d:a4:8e:
9e:f6:10:0e:32:46:41:ad:2a:48:f2:11:a3:73:3c:ca:e1:b5:
c3:ff:48:aa:4d:d5:37:fd:76:62:64:cc:96:5f:c5:23:d8:67:
0d:d5:7f:e2:05:01:55:27:2f:d6:b5:b5:01:8d:c3:d0:78:07:
7c:32:98:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 06:53:35 2025 by rpki-client