Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
File: Tw532cb_aNymjwXfj0Z17nvcsLw.mft (raw, json)
Hash identifier: LLLF7QUOcKVnZvLaksz0QhAv9B6XW2h8kj4tCL+qAUQ=
Subject key identifier: 94:99:9E:92:BE:7E:93:C9:2F:A8:04:85:40:F6:43:AC:92:C4:3C:CC
Authority key identifier: 4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
Certificate issuer: /CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Certificate serial: 0195E00F47B74B8F5DB37123098ADBE4CAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
Manifest number: 14C9
Signing time: Sat 29 Mar 2025 04:00:52 +0000
Manifest this update: Sat 29 Mar 2025 04:00:52 +0000
Manifest next update: Sun 30 Mar 2025 04:00:52 +0000
Files and hashes: 1: Pca7kXTlNjwuWN_AB5LtxE2ZDeM.roa (hash: Akg6x/rEJSguP5W8rh7uM4jAx65nBcfWuXfFgKDQBlY=)
2: Tw532cb_aNymjwXfj0Z17nvcsLw.crl (hash: YBJ188jkLwn1k7XXVUrcsS2SnnZ7+i9cic+bPxCgR3Q=)
3: o6HBbNZybM1pciBKfo5UVkJuRLw.roa (hash: rmfHjVx3VwSeRbFJh3vlHLLWzQKd4J8HNXED4xlCmoE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:0f:47:b7:4b:8f:5d:b3:71:23:09:8a:db:e4:ca:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0e77d9c6ff68dca68f05df8f4675ee7bdcb0bc
Validity
Not Before: Mar 29 04:00:52 2025 GMT
Not After : Mar 30 04:00:52 2025 GMT
Subject: CN=94999e92be7e93c92fa8048540f643ac92c43ccc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:ff:35:db:47:f8:e5:58:b2:fc:1d:63:d1:
20:67:0f:c2:2d:36:78:90:58:4c:cf:76:02:1f:bc:
9a:1f:3e:4b:17:d0:f0:76:9d:2b:6d:a6:19:62:c1:
03:4d:7b:6e:12:a0:fe:8a:9e:7f:ec:ee:b0:f4:74:
a1:fa:d8:37:93:9d:b8:18:23:a0:28:0f:bc:bf:f8:
2c:71:30:8f:f2:26:c2:f0:80:20:98:8f:b3:8f:c2:
c8:4e:47:ae:53:ca:fa:7a:4d:cf:a2:c0:bc:15:fc:
72:9f:e9:48:c8:ee:79:71:7f:65:4a:02:14:ec:63:
b0:b7:fd:11:f6:ed:14:e0:5e:b6:66:5d:83:02:dd:
4e:f9:51:81:35:92:ed:0c:fb:a3:53:4c:5a:4e:e5:
93:d5:d2:20:8c:70:b0:4e:94:f8:ef:5e:c8:af:1b:
af:5d:4f:c7:11:02:bf:22:eb:15:4b:b4:99:28:e5:
33:f3:32:31:c5:bb:b3:62:b0:00:90:76:29:8a:82:
1e:5e:ee:51:94:39:8a:1e:71:6e:cb:9f:20:46:6e:
fa:2a:5e:26:99:5d:64:eb:b2:fc:42:7a:88:e9:29:
2e:ce:5f:79:f8:1e:64:cd:03:3c:c9:66:9f:8a:0f:
f8:d0:c3:c1:3e:f5:1b:eb:15:40:d7:ec:1e:99:f4:
9b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:99:9E:92:BE:7E:93:C9:2F:A8:04:85:40:F6:43:AC:92:C4:3C:CC
X509v3 Authority Key Identifier:
keyid:4F:0E:77:D9:C6:FF:68:DC:A6:8F:05:DF:8F:46:75:EE:7B:DC:B0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tw532cb_aNymjwXfj0Z17nvcsLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/3dc222-1206-4922-8890-455b19f766cc/1/Tw532cb_aNymjwXfj0Z17nvcsLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:42:9d:ce:22:87:ab:16:97:76:1e:c2:b8:58:c9:06:ed:8f:
0a:02:09:c7:4e:d4:c2:b7:79:d6:5d:45:91:4e:8a:9e:27:21:
81:a6:1d:91:0a:4e:4a:6b:74:21:de:b0:9e:e7:25:b9:a3:e4:
5a:55:12:2b:51:0d:c2:e9:14:87:0c:11:f6:2d:4d:68:fe:17:
ab:4d:e2:41:26:b3:36:0f:e9:59:d2:54:e4:4a:4e:27:71:28:
96:27:83:57:cd:e6:4d:af:49:6b:b6:3a:74:5b:0e:f3:c6:40:
d5:b4:67:dc:9e:91:0c:95:45:04:dc:b5:e0:41:4d:88:92:ca:
d5:a7:f5:3d:5b:81:7b:4a:2b:a3:ac:1c:95:83:4b:d6:96:3c:
7e:93:95:7b:77:82:31:35:e5:25:45:b5:0e:2a:b8:40:dd:86:
ab:c1:31:53:3e:a4:44:0c:ef:48:96:8f:b2:d8:58:01:0c:e7:
b1:e5:2a:26:a4:e2:8a:62:61:fe:f8:9f:7c:d7:4f:95:62:9a:
d1:be:b2:1d:32:e8:64:e4:43:d8:0a:cf:13:6f:ce:25:89:20:
1f:dd:99:cd:6f:c6:07:a3:b1:ce:87:01:63:e9:7f:78:82:ef:
bf:13:a2:6b:93:88:2a:49:27:4d:d4:ac:07:44:a9:b7:00:69:
38:37:15:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:10:30 2025 by rpki-client