Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/286086-6787-49b0-a4e0-09d447a45656/1/tzlzvE9Xz-_t4eyWFgvObOpCsXk.mft
File: tzlzvE9Xz-_t4eyWFgvObOpCsXk.mft (raw, json)
Hash identifier: 1sJN3ZdLvK+gHQverHI9jj3yBeSk01BnWiqXHrNaD8w=
Subject key identifier: 8B:2C:22:3F:CD:8E:03:F6:08:47:39:33:53:7D:DA:D0:8E:FC:1A:BE
Authority key identifier: B7:39:73:BC:4F:57:CF:EF:ED:E1:EC:96:16:0B:CE:6C:EA:42:B1:79
Certificate issuer: /CN=b73973bc4f57cfefede1ec96160bce6cea42b179
Certificate serial: 019370ED6BD0DF3AE9C150668B889C03F049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzlzvE9Xz-_t4eyWFgvObOpCsXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/286086-6787-49b0-a4e0-09d447a45656/1/tzlzvE9Xz-_t4eyWFgvObOpCsXk.mft
Manifest number: 137E
Signing time: Thu 28 Nov 2024 04:00:28 +0000
Manifest this update: Thu 28 Nov 2024 04:00:28 +0000
Manifest next update: Fri 29 Nov 2024 04:00:28 +0000
Files and hashes: 1: CrHdYOOAtBBYNy65kLRlVfwRRJ0.roa (hash: KHuntttauyezNK7JBSSyU/0IyOPcGTzztNHsuxXu2mY=)
2: tzlzvE9Xz-_t4eyWFgvObOpCsXk.crl (hash: qjWCDD00Kwec3wCmM790x1fKSy3/YbGU2dLKXT6VjAQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:70:ed:6b:d0:df:3a:e9:c1:50:66:8b:88:9c:03:f0:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b73973bc4f57cfefede1ec96160bce6cea42b179
Validity
Not Before: Nov 28 04:00:28 2024 GMT
Not After : Nov 29 04:00:28 2024 GMT
Subject: CN=8b2c223fcd8e03f608473933537ddad08efc1abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:25:64:7c:8d:0a:94:f1:fb:07:55:69:f8:f8:
c1:c8:1d:c5:d4:4f:4d:95:49:7d:c5:95:d5:70:8e:
68:b2:19:3d:4a:c1:c1:ad:7e:a9:1c:44:92:0e:ac:
70:8d:53:72:6a:5b:09:f0:88:65:4f:c7:cf:cb:42:
75:a5:06:d6:9e:b2:c0:0b:58:a0:03:ae:05:22:94:
fa:9a:ea:80:0f:84:92:98:50:9d:a0:3d:fe:9d:40:
ab:1a:c1:3c:1c:ff:0c:26:70:cd:7d:89:53:4f:34:
8f:e0:6f:7b:5b:21:eb:cb:c2:9e:7a:32:d2:50:34:
0f:b2:ed:e5:e8:a4:4e:43:1e:5a:8f:87:52:81:e2:
70:9c:45:8e:e9:88:0c:1a:09:37:12:d3:9f:15:38:
f5:64:26:c8:71:eb:3d:07:53:cf:91:a0:43:a7:e3:
7a:34:3c:32:f3:d2:9b:b7:c0:99:8b:31:1b:90:c5:
42:4a:77:a7:33:a0:06:88:b4:21:94:5c:50:3c:50:
13:c0:ba:33:92:f6:f5:ab:88:59:b8:3d:a9:9d:ba:
cc:36:11:cc:f0:d0:f1:fe:4c:1f:93:95:2e:73:93:
af:fe:b6:8a:b7:9c:ba:de:db:0c:d1:69:ba:a0:f2:
de:f7:9a:7a:85:14:0f:1f:81:7a:6d:1b:d6:c0:5b:
c4:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:2C:22:3F:CD:8E:03:F6:08:47:39:33:53:7D:DA:D0:8E:FC:1A:BE
X509v3 Authority Key Identifier:
keyid:B7:39:73:BC:4F:57:CF:EF:ED:E1:EC:96:16:0B:CE:6C:EA:42:B1:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzlzvE9Xz-_t4eyWFgvObOpCsXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/286086-6787-49b0-a4e0-09d447a45656/1/tzlzvE9Xz-_t4eyWFgvObOpCsXk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/286086-6787-49b0-a4e0-09d447a45656/1/tzlzvE9Xz-_t4eyWFgvObOpCsXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:2e:74:31:c2:52:2c:3d:80:c3:8a:9b:91:15:b2:2e:ee:af:
e5:b7:f3:91:39:3e:9a:5a:76:b3:a9:34:4c:18:5f:a9:c4:62:
a2:e8:7a:c9:c8:51:23:b7:9a:89:b8:9a:46:05:10:a0:d1:07:
05:dd:13:36:21:26:d6:57:d4:69:5e:cd:0a:7e:1b:2b:b2:79:
1e:75:30:e2:5a:65:e4:0e:dd:a0:46:e3:8e:f0:95:a9:4a:49:
db:5c:cf:81:f8:a2:24:29:84:b5:7a:71:e1:d8:6a:e3:2e:27:
8d:0c:bc:77:a7:df:fa:0f:bd:31:23:f8:a9:1f:04:d0:ca:a2:
f4:6f:b9:69:ae:9a:c0:20:0d:4c:70:8a:90:94:4c:35:9f:a8:
43:22:b1:a6:0b:92:d3:ae:92:c1:ea:4f:bd:ae:39:50:7b:29:
62:88:12:9f:18:50:db:10:25:11:a1:50:10:6e:75:a4:05:f0:
19:d5:5b:b3:46:cf:21:a5:6b:a8:2c:c8:4e:4e:fb:37:11:07:
16:13:3c:42:a0:6c:0b:fc:90:9c:70:04:bf:fd:62:87:9d:19:
fa:79:cd:79:03:be:d6:e7:17:57:9a:af:af:dd:33:9d:54:e2:
27:b0:2f:96:a4:bf:ac:b2:b0:94:30:53:df:1e:d6:f3:f3:ef:
42:77:a2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:46:28 2025 by rpki-client