Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft
File: TkMMADsADTVe0WnlXYzPOTg34go.mft (raw, json)
Hash identifier: 6qY1HQftBFtt9oX+cAZlLgzhonZtOd6qaMZop9KRC3Q=
Subject key identifier: 27:5C:A6:67:E6:D8:A9:4D:DC:88:FC:CC:58:AC:24:FF:CC:71:E4:EC
Authority key identifier: 4E:43:0C:00:3B:00:0D:35:5E:D1:69:E5:5D:8C:CF:39:38:37:E2:0A
Certificate issuer: /CN=4e430c003b000d355ed169e55d8ccf393837e20a
Certificate serial: 0194BC3C15E15449FE0405A570F21B4D410A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft
Manifest number: 0BAE
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: TkMMADsADTVe0WnlXYzPOTg34go.crl (hash: g6ylKjw755sPRCbVb0xB6vf8pV0ldxV2Jfrtz08xxlY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:15:e1:54:49:fe:04:05:a5:70:f2:1b:4d:41:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e430c003b000d355ed169e55d8ccf393837e20a
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=275ca667e6d8a94ddc88fccc58ac24ffcc71e4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:79:c1:7c:22:a9:24:8d:8b:c9:5b:19:ca:f9:
7a:01:0d:80:b3:cf:0a:ba:48:1d:de:0e:df:f8:51:
72:f6:e7:d2:73:ed:3c:c8:33:70:36:7e:7d:fa:4a:
8f:2c:4c:52:5c:4b:92:fd:e6:fa:9b:c0:0c:48:b3:
3f:d4:f3:8d:73:05:fc:59:c8:85:8d:17:b1:73:e5:
dd:34:9f:8b:36:a7:d6:8a:f2:6a:7c:22:cf:58:da:
40:2e:af:c8:a7:db:a6:86:48:6d:75:12:de:4d:7a:
c8:3d:ab:1f:92:55:39:02:40:84:d3:f5:97:5f:df:
f7:e8:33:ab:04:7f:27:c0:0b:39:e5:f8:57:5c:cc:
ad:81:bc:35:ab:a1:c2:a7:72:12:ad:5c:c0:06:9b:
1f:9a:06:69:26:7e:64:c4:16:5c:bc:4b:9d:3b:53:
0e:e1:2a:eb:9c:66:cb:b0:b2:2c:51:e3:e3:c6:45:
9c:df:c6:a2:d0:27:c3:c5:c7:31:57:3f:07:ae:32:
ee:a0:b8:0c:c9:77:6e:4e:dc:8f:34:4d:d0:b7:32:
f8:f1:40:d2:c7:c4:d1:c5:e8:c0:62:8e:50:bf:25:
7b:15:80:ca:53:82:96:e9:e7:d5:05:c8:a9:08:33:
8f:ab:a9:be:5d:64:5e:e6:4f:e0:d0:5a:50:e0:dc:
6d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:5C:A6:67:E6:D8:A9:4D:DC:88:FC:CC:58:AC:24:FF:CC:71:E4:EC
X509v3 Authority Key Identifier:
keyid:4E:43:0C:00:3B:00:0D:35:5E:D1:69:E5:5D:8C:CF:39:38:37:E2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkMMADsADTVe0WnlXYzPOTg34go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/82225d-040a-4d9b-a33b-88d8234a6d3e/1/TkMMADsADTVe0WnlXYzPOTg34go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3e:61:be:b6:45:53:87:50:49:22:96:b1:0a:b4:5d:71:e1:
8c:1c:f2:94:23:ff:5e:c7:b0:06:db:cc:69:f9:35:af:ac:41:
68:34:0b:71:6c:d8:82:a7:0a:9a:f7:2c:d5:0a:b9:82:2c:13:
c3:05:e6:6a:c4:df:b4:2c:bc:a3:45:39:92:1f:ae:e9:8a:59:
dd:37:93:67:63:53:dc:47:61:b4:96:f6:6a:df:9a:f2:6e:c8:
df:c6:c3:1a:10:85:c5:9e:b2:73:9b:df:54:ac:97:35:2d:6c:
6d:18:5a:61:22:70:e8:9c:54:da:be:ae:a1:52:68:b9:55:1e:
4a:87:d2:78:67:33:cd:c0:3c:d3:3d:b2:5e:17:f4:b8:23:be:
88:29:23:42:ff:1c:a2:a0:7c:58:58:be:2a:e5:72:74:91:3b:
22:73:44:fb:ac:49:eb:1e:2a:f4:89:8d:83:10:79:1a:ab:8d:
a9:ca:0c:33:4e:bc:51:fc:c9:70:8c:3f:a8:2d:7a:1d:c8:43:
77:c3:1a:61:d6:2b:2a:6f:df:15:01:8d:da:2a:37:9a:bc:50:
79:06:6a:5d:ab:d5:29:47:d2:6f:c5:6f:8a:75:fe:6d:56:86:
37:12:55:6c:84:ad:ea:c9:33:e2:28:57:84:20:f9:20:e0:31:
19:8e:f8:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:15:58 2025 by rpki-client