Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
File: Tc_QAaZn4WRatAxbvtifWScAT4U.mft (raw, json)
Hash identifier: U2u4B+AlCFO7LuIW+i/YnvoMnyYqEPKrYSLM5DrqtLA=
Subject key identifier: 7F:C6:A3:F3:79:07:DA:C7:97:E5:0F:D6:A0:12:27:81:57:61:8D:5C
Authority key identifier: 4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
Certificate issuer: /CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Certificate serial: 0194BC3C00966A9C66C69BACF3A9EC6FAA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
Manifest number: 0855
Signing time: Fri 31 Jan 2025 12:00:36 +0000
Manifest this update: Fri 31 Jan 2025 12:00:36 +0000
Manifest next update: Sat 01 Feb 2025 12:00:36 +0000
Files and hashes: 1: Tc_QAaZn4WRatAxbvtifWScAT4U.crl (hash: HXfApBrn9fFJ/m4RRzLR0fXefgqA2spkXy5FtkhE+9w=)
2: jdMFheDlAIgKvi6YF6C6Rm8zqwg.roa (hash: 0uopvNrGmCf9iLiAY1t8oTN34NZD3FhGP5c/aZny+2A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:00:96:6a:9c:66:c6:9b:ac:f3:a9:ec:6f:aa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dcfd001a667e1645ab40c5bbed89f5927004f85
Validity
Not Before: Jan 31 12:00:36 2025 GMT
Not After : Feb 1 12:00:36 2025 GMT
Subject: CN=7fc6a3f37907dac797e50fd6a012278157618d5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c5:52:ef:99:50:89:07:8c:75:ad:7e:5d:6c:
73:da:0a:da:23:56:f7:63:5b:56:5c:4d:d9:83:95:
2e:e6:49:b4:8c:48:1d:de:90:f7:ff:1f:fa:cf:ec:
79:29:43:11:9f:1a:80:24:1b:b2:2e:b9:59:4e:0c:
2a:ae:09:cf:89:32:7e:04:e3:99:6a:89:20:05:cc:
3e:a4:60:fe:64:f1:2c:4c:cc:43:a0:ba:6e:4b:72:
a4:0d:72:53:1e:23:d3:bb:3c:62:3d:c3:60:a5:5a:
43:0d:d5:15:c1:8d:1b:66:90:2f:b7:d3:fc:7c:c6:
1a:46:de:ae:f9:5c:5c:fc:5e:81:6b:32:cf:9a:93:
91:28:5e:c4:f2:6c:43:14:96:66:ed:16:2b:47:aa:
a5:a0:75:fe:29:32:7e:73:26:3d:69:2e:3b:0c:ad:
2f:92:df:2a:4e:cb:4b:d6:90:22:04:7c:1e:a1:2f:
fb:1d:b4:39:8a:48:00:15:2c:5e:9e:e5:9c:0b:04:
bb:05:de:81:8c:e3:12:07:fe:60:fc:47:36:74:37:
14:ab:73:5d:ab:90:5f:29:2c:cf:29:62:ad:04:3f:
aa:4d:01:f3:b0:91:77:7b:ac:9f:5c:29:04:75:9a:
58:2a:8f:c8:98:bd:b2:a8:38:a3:b2:fe:89:73:a7:
37:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C6:A3:F3:79:07:DA:C7:97:E5:0F:D6:A0:12:27:81:57:61:8D:5C
X509v3 Authority Key Identifier:
keyid:4D:CF:D0:01:A6:67:E1:64:5A:B4:0C:5B:BE:D8:9F:59:27:00:4F:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tc_QAaZn4WRatAxbvtifWScAT4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/5ba81e-e274-4ba3-954d-bdf94a3fb32d/1/Tc_QAaZn4WRatAxbvtifWScAT4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:c7:90:8d:f3:a6:68:3b:90:63:a8:06:25:a1:1e:79:51:a8:
0b:41:93:4e:98:99:ff:93:9f:28:33:14:08:4c:2a:94:69:fc:
ca:5b:f0:38:0e:7c:a2:28:37:8b:31:cf:a0:59:26:16:d2:f7:
22:ed:ce:99:42:71:81:3a:9c:b7:8e:5a:37:bd:62:f3:3d:3a:
b7:66:86:d1:df:6b:ec:fc:5f:42:39:06:43:e0:15:73:84:1b:
56:c0:f2:9a:c6:32:ef:5f:86:c5:e2:96:5f:03:12:72:f9:68:
d5:a7:00:6b:f5:92:73:a1:ae:07:b1:e8:03:8f:56:d1:53:f7:
f3:ec:ad:ba:b1:fa:c1:f6:4e:fc:4d:ef:1c:eb:84:1f:d1:19:
cc:33:60:56:5e:ea:ce:22:74:4a:e5:08:5c:01:5f:80:bc:a0:
ef:85:fb:6d:6a:c8:3e:ff:5a:6d:0b:54:0d:ba:2d:b7:73:a9:
9a:5a:f8:4a:cc:83:99:e7:e3:5c:76:6b:76:7f:65:7f:61:79:
28:56:2a:5f:d2:c4:11:3a:cb:c7:7c:5d:1c:1c:c4:87:aa:6f:
25:fc:ba:bf:a8:08:7b:af:0f:7f:9e:00:0d:e4:48:8a:1d:aa:
2d:09:ad:38:65:bc:c5:3a:7b:ff:aa:25:c9:b6:8f:7d:73:9d:
0c:31:dc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:19 2025 by rpki-client