Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
File: TKE73qVPdrioVxKv22FRhrM4OME.mft (raw, json)
Hash identifier: ShGcYtBjkVIsc2Wl73kqdkja5F2Zce0ChmYt0hienf0=
Subject key identifier: 7A:DD:33:05:45:AA:28:51:E4:DF:92:6D:52:A6:F6:55:95:57:E0:19
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 0194BD17DF01ACF1630CD3D25EFAB75C45C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: 8axKv1QeNdYLl5PRbdXwvujzyH4.roa (hash: P16odh3n69wKkHb8t7qySEeaYC3/LuUW9W8sAY8jUTo=)
2: TKE73qVPdrioVxKv22FRhrM4OME.crl (hash: mSuqszz5pULaxVAqQ8Uc5C+3pwCWQAtPVbtcEEk8nis=)
3: WNroR83uzcjISqXHww42f1zYgLY.roa (hash: ZAQula8xqSNg9/XEOBi+pmskOiJ5Nh7rkmicK30wwYU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:df:01:ac:f1:63:0c:d3:d2:5e:fa:b7:5c:45:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=7add330545aa2851e4df926d52a6f6559557e019
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:52:20:cc:03:4a:bb:e8:40:ff:f3:c4:40:d9:
0b:71:3c:08:79:17:5d:b8:22:a5:44:4f:2b:a8:8a:
b0:cb:71:3b:21:b4:45:9d:d2:91:de:1d:6c:f6:11:
7e:e2:b2:cd:d3:32:1a:6c:34:4c:1c:f6:93:4a:11:
ac:a3:1d:71:b6:1d:1b:6b:44:c9:4d:83:cf:e0:f9:
3a:1e:80:44:6d:51:55:8b:24:ea:02:df:fb:20:25:
c5:08:79:3d:2e:8d:7e:59:98:75:51:e5:08:e5:06:
78:81:5c:28:c5:3d:7d:2a:a6:8b:59:54:5c:8d:9a:
14:cb:73:a2:ef:6d:2d:69:f8:03:20:68:ba:ac:db:
e7:1a:7a:f2:fe:2d:14:54:cb:6a:60:87:74:5f:aa:
f2:5f:ba:72:35:37:13:3a:33:73:8a:5a:f0:31:ea:
1e:45:e4:78:19:c7:31:5c:b3:e1:b4:3e:84:b1:20:
10:c1:42:13:61:d0:98:a3:81:7f:b3:e7:f4:71:76:
be:c9:c7:cb:57:9d:42:07:f1:76:5d:18:e5:38:69:
ba:50:9f:05:93:3d:4d:d3:87:0f:b6:23:b7:5a:e8:
02:e3:2b:a4:a4:22:2b:ad:e4:fd:dd:6e:63:d1:58:
50:4c:c9:0a:d4:0f:a2:a2:f0:3b:e2:e1:47:74:3a:
16:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DD:33:05:45:AA:28:51:E4:DF:92:6D:52:A6:F6:55:95:57:E0:19
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:b2:f6:4a:02:8b:08:5c:32:41:39:60:b1:65:d1:13:3b:16:
d0:27:ee:8e:e3:d6:be:e1:3c:8b:f1:cc:9b:62:a4:e1:83:92:
95:10:8b:19:4d:ed:2e:4c:4a:0c:94:5e:9d:d6:21:0b:d9:d5:
30:1b:ca:d1:8b:00:a6:e8:21:17:b8:b7:03:1b:51:49:f1:47:
82:e2:f7:85:0b:d9:8b:6a:cc:14:86:3e:26:74:80:7a:87:bf:
08:f7:48:ef:0c:75:ac:04:a0:34:32:71:12:57:b4:2d:28:d9:
4d:08:12:62:58:3f:67:cc:d6:05:f2:5d:fc:c8:88:df:c1:44:
76:b2:1f:fd:f6:3f:69:53:a9:85:b1:37:fd:df:01:c6:26:af:
df:c2:fa:de:ad:cd:ca:f1:f2:ab:04:5b:2b:ef:e3:b5:c6:d3:
f6:07:f1:39:3b:9c:f5:f8:f5:66:33:23:f0:b1:9c:9d:8b:b4:
93:55:f8:6a:80:88:72:39:45:12:94:db:b8:79:8b:38:8b:cd:
60:37:d8:2b:31:38:66:d7:22:11:1f:cc:6a:09:e8:7e:ef:b0:
0b:1d:88:e0:27:73:33:a5:40:13:10:e1:cd:27:92:ab:58:c6:
31:b4:1e:a4:12:2c:16:8b:ca:86:b8:b6:e9:5f:20:11:1b:4b:
4e:04:b1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:00 2025 by rpki-client