Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
File: TIl_GjSX674nueLw1vPq4rvmiyc.mft (raw, json)
Hash identifier: 8JkEsQJino2vqnzcyFAszZFMvX7dkYPyhu94HpIb9eY=
Subject key identifier: DE:51:78:8B:9A:7F:5C:9E:CA:21:93:26:C3:F4:4E:9F:D3:8A:81:A1
Authority key identifier: 4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
Certificate issuer: /CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Certificate serial: 0194BBCDFF5980E8D3D3ADBDD9287027C3B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
Manifest number: 0885
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: 4J7Io1jEwgS2RhtnGjopliZ5_no.roa (hash: QO5aB2FmunA0lEdEAxyr6sEsO8466VD4EugW4s0Q6Rw=)
2: TIl_GjSX674nueLw1vPq4rvmiyc.crl (hash: twRxockILlTVbbc79cBHyfFz1kOAf4dby94GQ1W3b/U=)
3: ge3kV53d3-LqnCvvkoEAivLZ1y8.roa (hash: SauMWlDrg7IfvsdJxQ9Eu8dcWvkF6O4OvV9rmn3sxVs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ff:59:80:e8:d3:d3:ad:bd:d9:28:70:27:c3:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c897f1a3497ebbe27b9e2f0d6f3eae2bbe68b27
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=de51788b9a7f5c9eca219326c3f44e9fd38a81a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:c9:06:41:5e:4c:56:41:e1:2f:f1:f4:9d:
dc:24:5d:87:fc:3d:f7:18:bb:e9:88:63:65:e2:4d:
e2:cb:8c:4f:81:90:8d:5e:3d:63:71:87:f5:c1:aa:
34:4e:0f:4b:07:37:a0:36:2c:08:19:f6:da:61:c0:
cc:d0:71:db:b3:68:c7:a1:e5:de:ca:dd:bd:98:c8:
74:6b:10:c8:dd:57:43:b3:66:aa:67:f3:d1:be:3d:
36:89:56:ad:e8:c1:5a:c4:b6:14:6e:f8:13:8a:fa:
4e:e1:cc:28:ea:a5:e5:1a:68:47:79:7a:af:0c:c0:
cf:85:d4:d9:b5:f4:47:af:39:08:73:a6:50:19:60:
5f:07:75:f9:be:ba:f2:83:63:11:9c:af:90:c9:75:
3f:a2:30:1c:bb:ad:13:ea:e0:13:d8:06:5c:eb:c5:
3d:c3:ae:0c:ff:69:21:89:c2:17:f3:d9:dc:f2:3d:
c6:0d:dd:89:dc:b8:4d:1a:50:46:4a:9a:45:66:f6:
5e:f7:de:41:88:ed:3f:d3:83:21:9c:b2:0a:79:e1:
43:b1:25:d0:ae:3d:85:93:51:f1:1f:26:46:2c:0c:
ac:06:de:a7:4f:98:f6:9d:79:59:a7:ff:86:8e:57:
98:35:a7:b4:50:ae:48:6c:d7:7f:30:6a:f9:66:91:
17:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:51:78:8B:9A:7F:5C:9E:CA:21:93:26:C3:F4:4E:9F:D3:8A:81:A1
X509v3 Authority Key Identifier:
keyid:4C:89:7F:1A:34:97:EB:BE:27:B9:E2:F0:D6:F3:EA:E2:BB:E6:8B:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIl_GjSX674nueLw1vPq4rvmiyc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/38e975-1f4f-4114-bfa1-a79da1a85513/1/TIl_GjSX674nueLw1vPq4rvmiyc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:70:6c:b4:b7:80:4b:55:9a:1d:ff:22:f2:6d:b8:08:85:5f:
7e:c5:34:54:51:8c:73:ed:b3:9d:83:d1:34:ff:26:4a:9d:72:
88:06:a1:b2:78:13:25:49:43:15:33:cb:50:a7:a6:f8:8c:95:
cf:54:98:07:2f:d1:f1:ca:17:81:31:84:49:19:20:e0:12:18:
53:5c:62:24:bb:ad:cc:65:9f:cf:ff:5a:01:be:53:4a:9f:cc:
17:56:94:23:45:0e:fc:b4:e0:d9:9d:b4:1c:31:7b:af:13:02:
22:2d:a1:9f:7c:a6:03:87:4f:45:59:40:bd:f4:eb:3f:fe:0c:
de:4f:0e:8a:c7:b1:0c:14:f3:de:d5:68:e7:4a:b9:39:1e:41:
93:67:59:18:bb:f9:c8:00:4e:d4:36:72:8c:41:b7:29:84:d5:
bf:33:48:9a:ed:79:2a:c1:a3:df:db:64:92:6c:55:28:88:99:
0c:49:22:e2:a8:6c:73:c3:29:8a:06:cd:58:e7:ee:3c:2f:2a:
83:ae:6c:75:f0:99:59:a1:59:06:f4:a7:fc:86:77:e7:e1:09:
c4:10:bf:4c:8a:6f:01:5f:b9:07:13:99:84:53:e3:bc:ba:c8:
b9:7c:76:40:a4:a0:c0:e7:7e:2d:62:db:08:b2:a7:4a:83:fc:
c0:d3:1c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:17 2025 by rpki-client