Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
File: TVP4paBndE6P43yXwcxLiH7axyA.mft (raw, json)
Hash identifier: ms7n20lUCPDXYlvKhjvAww9qz05/jjvQC6PUk1dYHuc=
Subject key identifier: 76:7E:57:31:73:4A:EA:34:FD:91:6C:1D:31:AC:32:4D:4E:07:E0:F6
Authority key identifier: 4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
Certificate issuer: /CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Certificate serial: 0194BC3C3E64B53CED3026EDB9C6CD9BEDBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
Manifest number: 136A
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: TVP4paBndE6P43yXwcxLiH7axyA.crl (hash: pHDyjr2Y8UzADbJqzUiMEZfpIo5fSoUrLqWONrpIxro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3e:64:b5:3c:ed:30:26:ed:b9:c6:cd:9b:ed:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d53f8a5a067744e8fe37c97c1cc4b887edac720
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=767e5731734aea34fd916c1d31ac324d4e07e0f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c8:63:1d:d4:2e:65:7a:27:63:2f:0b:6f:6f:
4f:7b:f1:d0:61:02:45:41:20:27:4e:e6:3b:29:7c:
44:f8:3a:b6:27:65:1b:22:78:aa:b5:14:b4:00:69:
1b:85:1d:9c:f7:ad:64:aa:c5:41:9a:bc:79:05:66:
a0:05:15:25:25:44:9b:4d:02:b5:8e:89:e6:0b:60:
a3:0d:69:32:54:5d:f6:b8:01:7c:a8:2b:77:fe:22:
18:e7:23:be:7e:d0:5f:1c:46:c2:d5:93:20:7b:95:
25:10:28:76:4d:bd:9f:3c:cd:ab:b9:3d:a0:68:4e:
e8:cc:ac:6d:e9:c8:71:9e:b3:0e:37:a5:8e:b4:42:
fc:65:d6:4e:29:6f:f8:5a:af:ea:67:26:2a:22:fc:
1b:5e:ee:ee:c3:03:43:2d:da:c2:49:b6:ab:88:55:
ec:19:94:7a:6f:0c:21:71:99:7c:86:79:d1:12:fe:
d2:f6:83:ad:49:80:d7:48:b4:31:c8:ce:89:04:0f:
7c:10:e4:62:64:8d:d9:dd:4b:a2:50:c6:5b:ea:5d:
ab:b3:9a:48:fb:53:6e:a6:b7:c1:e6:5d:36:81:84:
74:68:73:68:9b:ca:84:23:13:08:47:85:2a:8d:8c:
01:7f:98:77:a0:01:07:78:d6:69:c3:9b:0a:94:48:
8f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:7E:57:31:73:4A:EA:34:FD:91:6C:1D:31:AC:32:4D:4E:07:E0:F6
X509v3 Authority Key Identifier:
keyid:4D:53:F8:A5:A0:67:74:4E:8F:E3:7C:97:C1:CC:4B:88:7E:DA:C7:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVP4paBndE6P43yXwcxLiH7axyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/7104d4-7414-49d2-9b84-8b1a093c8c5c/1/TVP4paBndE6P43yXwcxLiH7axyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:71:c2:c1:c6:62:36:92:4a:55:ed:90:3d:37:ed:a8:08:ce:
5e:79:be:18:6c:21:38:72:d2:86:16:57:64:63:fe:0d:20:cf:
c5:c9:cd:ed:44:c5:c5:bb:44:7c:d7:89:80:25:91:22:68:cf:
89:32:02:b3:71:1d:4d:4d:de:79:53:bb:a9:1a:eb:b9:85:dc:
4b:6c:90:36:c4:04:e9:eb:18:95:13:0f:3c:7c:9d:53:a7:74:
23:ff:2b:22:7a:23:fa:8d:bc:fd:9f:a3:ef:c4:1c:1d:da:78:
45:45:fa:dd:ec:42:6e:b5:66:86:b1:c0:68:cd:0f:ce:ff:ae:
2e:54:fc:25:b1:df:c4:a0:ad:4e:70:a1:58:35:ea:59:c9:f5:
1b:3d:a1:3d:c7:9e:63:75:8d:a4:a0:10:4e:4a:d5:b2:28:18:
04:d1:b0:05:01:71:0c:c6:96:67:64:40:25:29:eb:99:61:5d:
75:a1:0c:a7:6d:8a:e4:4f:ae:e9:88:8e:be:7c:76:fb:cd:ab:
d8:6f:bc:6a:41:75:80:b8:c8:ce:10:1b:a0:1d:ee:3d:c1:7b:
3e:3c:55:82:ff:90:13:c5:27:ce:8e:02:cb:f0:b9:b3:ab:fa:
c2:47:06:4d:88:9f:06:05:c5:b5:37:b8:ff:80:a0:77:87:03:
34:4a:5c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:50 2025 by rpki-client