Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
File: TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft (raw, json)
Hash identifier: P2u10J4FVSQryFZvwD8tCaJAzlQojh9geqVmuGd+NgY=
Subject key identifier: B6:32:29:14:67:08:97:24:18:8A:49:F1:83:38:48:16:CE:EB:94:0F
Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
Certificate issuer: /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Certificate serial: 0194BC72BF461196CCF1553C73CD1A87B9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: 9dHpkAlOL0XgkLxchS4Qy2sMNCs.roa (hash: g9vMbBt1/drUDiVGZvjhkatTyph0Mun8c4A/qeNjgzE=)
2: TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl (hash: UXaYra3fZO9E9iuDFtWx1alrSMelWHzRih04ZZV9G2E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:bf:46:11:96:cc:f1:55:3c:73:cd:1a:87:b9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=b632291467089724188a49f183384816ceeb940f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:7f:98:08:7e:55:34:68:24:a9:0d:0f:c0:09:
12:9f:64:5a:13:a8:a0:0d:1e:b7:e3:3c:e9:e3:01:
d6:22:96:fc:18:84:bb:78:c0:9d:6d:a7:6c:b8:5e:
59:dc:e5:e8:07:0b:d6:32:3e:2f:ef:71:b6:0a:64:
c6:bb:fe:f5:68:aa:91:a5:51:f7:ff:ed:6b:8e:70:
fa:67:49:73:1f:d7:e1:b5:6c:9d:56:50:db:f8:8f:
5c:64:98:38:38:fe:75:60:75:3c:f4:ce:e4:d2:8c:
64:2e:13:61:66:07:26:05:3e:4a:bf:02:40:0b:e3:
2c:c8:d9:c1:71:9c:ca:53:ea:41:13:2d:70:0e:36:
64:d1:04:3b:83:3a:db:90:6f:ff:2c:1e:dd:22:3f:
36:5e:65:99:bf:30:23:ff:10:96:f9:35:3c:94:54:
b1:8b:e3:2c:e5:8f:72:fe:3d:26:0a:5e:a3:51:d2:
eb:d2:15:28:dd:0e:3f:d1:57:1e:a7:e7:4c:01:54:
41:85:0b:c8:22:49:89:11:c5:2d:55:72:5f:40:ea:
1f:cc:c1:70:1e:23:f2:79:0b:ac:f5:aa:eb:1d:a8:
05:b8:d1:bc:23:37:e3:55:cd:3c:42:1b:12:54:61:
d6:36:66:c7:8b:11:cd:52:eb:c2:34:22:6e:b5:b3:
db:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:32:29:14:67:08:97:24:18:8A:49:F1:83:38:48:16:CE:EB:94:0F
X509v3 Authority Key Identifier:
keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:30:53:6a:3a:c6:26:1e:0c:7c:3e:51:24:9f:94:9c:36:bc:
ef:a0:1c:07:1b:db:14:f9:46:4e:86:a4:c9:79:e6:70:f7:64:
fc:7d:b2:3c:7a:19:65:07:05:7d:07:74:9b:8a:6b:e6:80:19:
58:59:ac:2d:a6:19:2d:af:6b:14:86:57:2e:1a:59:40:90:1f:
24:ac:47:10:75:96:79:b7:4f:52:a7:05:4c:1a:1b:64:db:61:
5d:c5:74:dd:93:af:91:59:f3:e7:7d:35:27:dd:1c:f3:7f:df:
6e:7b:e7:1c:00:5e:99:31:95:bd:24:75:41:e3:ce:4f:61:0d:
62:aa:ff:fa:aa:f3:71:f2:8e:66:c6:fb:78:99:25:65:3a:34:
d6:1b:0e:35:7c:cf:f1:24:ef:2b:b7:8b:92:ea:68:73:22:d6:
24:2f:6d:77:ce:e0:d1:31:73:cd:ad:07:0e:da:31:07:00:98:
b4:09:bb:fa:43:ee:b6:82:81:7a:c1:54:23:93:68:d6:c5:4a:
5a:9f:7a:8b:34:dd:3f:f8:5b:03:b3:2f:66:57:30:f9:c0:48:
0f:00:fc:12:9e:38:9a:57:45:2e:f5:63:3d:30:12:3a:3f:a2:
48:ce:7c:10:29:34:f2:37:e1:87:6b:4f:27:27:50:8c:53:ed:
be:a4:a6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:56 2025 by rpki-client