Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
File: tcr-HjrqL22RHtEHoIqv7peaT1E.mft (raw, json)
Hash identifier: K/L5gYhcoI8fF0N6z/xmDzL0/M8IdMBJB13lFZGld/A=
Subject key identifier: 85:60:9F:0F:B1:30:D4:46:B0:EC:52:62:E8:D0:9A:42:C9:8C:6A:F0
Authority key identifier: B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
Certificate issuer: /CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Certificate serial: 0194BC3C37AADEEC7CC58A5C75C00E1B0B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
Manifest number: 0772
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: RbtpOQvxKOhivyATsaFRApG8DvI.roa (hash: rcUrQ9qXVTCmRSSGNqyeO7AKgTyqtF4rizry0Ad9las=)
2: S6bzH3vR-9_Z8W37FxbGY_bsSRI.roa (hash: mXMMwIa+4CrlkQM+hSljAaJyd1k858ZniaKc/09JBeY=)
3: a0RRgx7_17MRQY0QEGYvnSPepZU.roa (hash: YVzxS9jFVMbMgJf+c2GFQwY/wSVZdg9tW30Q3WHGzsg=)
4: tcr-HjrqL22RHtEHoIqv7peaT1E.crl (hash: G+9J+UDyRX7ZalPQrKcywoYpQ89eUr+kWSMq3bo1LUk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:37:aa:de:ec:7c:c5:8a:5c:75:c0:0e:1b:0b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5cafe1e3aea2f6d911ed107a08aafee979a4f51
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=85609f0fb130d446b0ec5262e8d09a42c98c6af0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:18:69:07:11:37:a2:87:9c:3c:65:56:d1:d2:
71:52:e6:3a:64:d9:1e:ce:ce:0e:eb:35:f2:8e:f5:
9e:aa:79:ed:96:35:4d:d7:75:6c:04:a0:8e:1b:c6:
fe:a6:1e:fd:b5:43:49:e2:30:80:1b:01:21:5d:23:
2a:ca:d9:02:87:4a:1f:ac:7b:5a:e3:11:f6:78:09:
dc:90:77:8e:26:7e:03:ff:27:e6:1b:c1:19:34:25:
f2:24:bc:f6:2d:e9:b4:da:90:b4:46:fd:b8:ec:ce:
74:ac:25:97:cc:df:f0:66:58:d1:b3:70:1a:37:84:
0f:a1:e6:45:eb:09:05:e7:86:e6:e1:a9:de:ff:91:
67:45:a5:2d:81:30:0b:77:d6:3a:54:ec:f6:7d:b0:
40:9a:61:ae:04:99:4b:9c:a8:d9:6a:99:93:5e:07:
9d:45:b7:36:ea:4e:35:df:65:68:27:12:69:c8:08:
f2:69:57:52:b5:b3:1a:1d:75:db:c1:6f:09:fe:e1:
e0:e9:ea:c8:da:f8:49:44:49:32:9a:2b:85:ec:03:
a0:01:84:e2:9a:26:00:d3:72:e2:83:be:ee:99:77:
37:80:c7:34:af:d0:5f:c1:c1:d8:fb:4a:5c:29:f4:
14:88:81:d8:de:88:43:55:29:d4:1e:44:5f:b1:08:
9a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:60:9F:0F:B1:30:D4:46:B0:EC:52:62:E8:D0:9A:42:C9:8C:6A:F0
X509v3 Authority Key Identifier:
keyid:B5:CA:FE:1E:3A:EA:2F:6D:91:1E:D1:07:A0:8A:AF:EE:97:9A:4F:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcr-HjrqL22RHtEHoIqv7peaT1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/77f99c-35cb-47a6-bac3-caba81c9a152/1/tcr-HjrqL22RHtEHoIqv7peaT1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:59:a4:2a:61:bd:d5:58:54:61:b5:80:2b:3f:ef:99:b2:36:
7d:3e:91:7e:e2:78:f0:5b:3f:04:da:37:83:08:30:04:bc:4f:
0d:6d:65:8a:08:5e:6a:9a:c3:6c:53:d7:5d:24:f4:c7:c6:92:
3b:90:63:b9:de:25:33:23:6e:ce:c7:28:12:52:c8:21:bd:6a:
b3:47:de:b4:59:6f:9a:42:46:c1:6e:66:bd:2f:75:40:e4:4f:
d6:f4:5e:47:57:c5:64:87:95:c7:93:24:17:69:52:7a:16:65:
55:54:c4:ae:c0:87:76:ce:ed:f6:5f:c4:57:9f:f1:7b:e5:c7:
16:f7:61:19:be:6b:98:0e:1b:55:2e:63:da:07:b1:ab:f1:0a:
9f:cf:10:4a:3f:69:39:03:73:3b:cd:56:70:ca:7f:c8:03:3a:
09:b5:24:bf:d9:1e:a9:26:89:f1:de:51:8e:f1:b2:3e:9b:58:
c6:3e:0b:94:ab:7d:17:8d:97:da:6c:93:de:7a:3f:6f:58:8d:
b9:c9:6d:63:a9:db:6c:8c:b4:b5:cc:1b:e8:a0:78:e2:fd:92:
c3:40:7b:ed:47:d4:80:78:7f:dc:fe:ca:3d:f6:0a:90:8a:2b:
c2:d9:07:f9:4d:07:7b:b6:bb:05:4b:e9:39:0b:b6:15:df:f9:
a7:12:58:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:11 2025 by rpki-client