Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/7b480b-b28d-419f-9d40-4306dd7a4a57/1/t65nb_xmI08z21I4eYq5efmGyC0.mft
File: t65nb_xmI08z21I4eYq5efmGyC0.mft (raw, json)
Hash identifier: FueajP1Xl/ktORdoBdO71s18D8gwWg08se882HZXgT0=
Subject key identifier: 93:6B:27:5B:DD:8A:D3:B6:D6:5B:39:4F:8B:8E:A0:8B:15:69:D8:16
Authority key identifier: B7:AE:67:6F:FC:66:23:4F:33:DB:52:38:79:8A:B9:79:F9:86:C8:2D
Certificate issuer: /CN=b7ae676ffc66234f33db5238798ab979f986c82d
Certificate serial: 0192D7144BC4AE93E0B22120341AB795343B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t65nb_xmI08z21I4eYq5efmGyC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/7b480b-b28d-419f-9d40-4306dd7a4a57/1/t65nb_xmI08z21I4eYq5efmGyC0.mft
Manifest number: 109D
Signing time: Tue 29 Oct 2024 07:01:24 +0000
Manifest this update: Tue 29 Oct 2024 07:01:24 +0000
Manifest next update: Wed 30 Oct 2024 07:01:24 +0000
Files and hashes: 1: 38aWt_jcvKGxj8mw7fpB9vQkhBc.roa (hash: MMJUVIoLk4Fofifp+m30qgon2ze+SIx/GAO9K891lUA=)
2: t65nb_xmI08z21I4eYq5efmGyC0.crl (hash: Iwl1cFa+8/+d6wjzhi1RRUyQZRsxZshvRmNndb2tAHc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d7:14:4b:c4:ae:93:e0:b2:21:20:34:1a:b7:95:34:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ae676ffc66234f33db5238798ab979f986c82d
Validity
Not Before: Oct 29 07:01:24 2024 GMT
Not After : Oct 30 07:01:24 2024 GMT
Subject: CN=936b275bdd8ad3b6d65b394f8b8ea08b1569d816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:2b:cb:56:47:54:a3:ae:d6:2a:14:4e:79:42:
e4:d3:d5:87:c4:c9:91:27:a9:b9:aa:6d:f0:5d:08:
30:a1:36:c3:43:65:e0:a2:96:03:83:41:02:8d:f7:
3f:1b:68:30:de:e0:5a:58:8f:d4:c4:8e:f3:f4:67:
12:cf:9c:7e:f6:ec:8a:65:91:a7:02:1b:ef:1f:e6:
7d:4d:bf:8c:f5:f6:6c:6d:b1:86:22:35:8f:17:0f:
75:3d:ea:82:2d:e0:0f:81:7d:31:36:47:4c:3e:a1:
1f:0f:8f:c4:35:e2:2f:4c:27:e3:11:64:a9:e6:87:
d4:42:ea:6e:3d:51:b4:17:ae:75:35:b4:5f:ba:0d:
de:c1:7b:dd:74:8a:a8:4e:a4:6e:7f:41:f4:76:d6:
b5:12:1e:19:09:e9:de:c1:81:9b:e1:f3:75:73:ab:
04:90:73:5c:6d:0d:9c:8f:ab:c2:01:e1:0c:3a:66:
e0:4f:f1:0d:2c:a1:9b:da:89:82:49:22:7d:3d:d8:
07:14:d7:10:b6:55:92:22:92:02:05:86:ff:27:40:
9f:39:d1:2a:44:b5:39:e1:fe:a6:44:6b:42:ba:df:
66:83:56:d5:b9:65:91:4f:ac:cf:61:32:dc:00:11:
1c:e9:2d:55:5e:dd:ed:d2:ea:ee:ba:7b:d8:6f:a6:
81:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:6B:27:5B:DD:8A:D3:B6:D6:5B:39:4F:8B:8E:A0:8B:15:69:D8:16
X509v3 Authority Key Identifier:
keyid:B7:AE:67:6F:FC:66:23:4F:33:DB:52:38:79:8A:B9:79:F9:86:C8:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t65nb_xmI08z21I4eYq5efmGyC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b480b-b28d-419f-9d40-4306dd7a4a57/1/t65nb_xmI08z21I4eYq5efmGyC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/7b480b-b28d-419f-9d40-4306dd7a4a57/1/t65nb_xmI08z21I4eYq5efmGyC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:78:a4:9f:ef:a7:8b:3a:4e:29:25:66:f3:59:0d:1b:fc:09:
a8:51:ea:f1:c0:85:82:a2:ef:9f:9e:93:87:10:e3:d7:a1:d7:
49:70:43:b9:d3:75:18:2e:bc:46:78:94:9e:5c:9b:28:9c:df:
8a:4e:64:88:17:63:df:74:30:8e:7d:eb:b4:5a:86:28:85:dd:
22:ea:4a:f5:2d:c8:d0:69:34:e3:6c:47:29:54:a0:6d:d5:18:
a8:1c:1f:47:8b:12:85:2f:2c:d5:19:7f:b1:70:24:16:cb:eb:
3a:52:2b:0b:be:d2:e2:b2:a1:90:0d:e7:8d:97:90:ba:dd:f1:
20:0d:e2:d1:82:98:6a:90:26:2d:1b:fd:83:91:ad:1c:c9:a0:
62:1a:b2:05:37:50:74:92:66:55:4a:9a:4c:f2:e5:e8:64:a0:
09:e6:04:7a:6d:54:60:9e:09:c2:65:a1:12:39:e6:8f:d3:53:
59:e0:6f:16:a0:39:c2:46:4e:83:c2:5c:1a:1e:a1:84:c5:5f:
a2:97:8c:0c:b3:d3:4b:68:7c:c5:30:60:04:1f:57:ac:45:81:
5e:f5:92:49:e3:7e:bc:ac:23:0c:3d:fc:13:9a:fa:07:81:0f:
50:57:ea:b9:ae:a6:bd:5b:e9:e1:68:0e:78:67:3e:33:f6:23:
af:70:a6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:17:19 2025 by rpki-client