Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
File: TEDHERwpFqX1ra8eUFCpQMJrI3g.mft (raw, json)
Hash identifier: 5k03qoVoKB80sRnPdiPaG+oijcZZ+MPVx35G5C5T/BI=
Subject key identifier: 75:25:84:F9:F6:EB:8C:36:23:E7:30:C9:B5:F9:63:CC:A0:BA:C4:EC
Authority key identifier: 4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
Certificate issuer: /CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Certificate serial: 0194BC0508ACD58BFA3D23F82ECF823DB665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 11:00:33 +0000
Manifest this update: Fri 31 Jan 2025 11:00:33 +0000
Manifest next update: Sat 01 Feb 2025 11:00:33 +0000
Files and hashes: 1: TEDHERwpFqX1ra8eUFCpQMJrI3g.crl (hash: Aspr7oFAKU0f0hOyrGZDaWYhEgwXN/gFz5oga6bxHNs=)
2: j2IAXuDDxL9R5htveS2h7u2YZbk.roa (hash: znjWCCItAdjYTrrA4TwcAum8T33INI1kjoCAB+b3jbk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:08:ac:d5:8b:fa:3d:23:f8:2e:cf:82:3d:b6:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c40c7111c2916a5f5adaf1e5050a940c26b2378
Validity
Not Before: Jan 31 11:00:33 2025 GMT
Not After : Feb 1 11:00:33 2025 GMT
Subject: CN=752584f9f6eb8c3623e730c9b5f963cca0bac4ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:37:fe:4b:95:c9:6a:e3:18:00:af:1c:5f:88:
7e:66:23:65:9c:29:98:c9:97:91:d2:6f:98:94:aa:
e5:52:2a:24:9d:2d:f5:9b:56:d7:9e:c3:3a:a4:6b:
d6:00:5d:8a:0d:b8:4d:70:1b:4e:0a:8b:40:fd:a4:
93:7c:ad:b0:17:17:42:15:ed:da:ce:a4:b5:8c:c0:
cf:1c:b5:88:6f:35:ec:ec:eb:42:70:e2:ae:1d:9b:
ca:51:cc:0e:78:f9:8d:50:87:30:30:75:13:d7:5d:
b2:08:cc:4e:d2:4b:79:2d:5b:0d:2f:63:4d:90:62:
e6:2a:3d:e0:ea:ce:6a:c0:e0:5e:3c:15:fd:06:77:
2c:1e:fa:d6:1f:5a:75:ea:e3:73:8a:a1:cd:ac:aa:
8d:3f:b8:02:f5:d0:3a:ca:67:2a:d3:69:99:35:44:
8a:ec:03:b9:43:bc:b7:85:ef:07:4a:bc:27:0f:1c:
af:81:08:a6:d9:0a:50:2b:6a:3a:33:ca:ff:62:a5:
0a:9c:ab:28:43:c6:c6:68:5b:4c:2a:3a:50:86:21:
50:4a:d2:6f:dc:62:3c:0b:2e:b0:ad:3d:5a:ca:22:
b9:4f:86:54:3a:ad:e8:b8:03:7e:56:ba:32:54:88:
1e:3d:57:37:22:48:05:df:3f:80:52:6c:0d:04:ec:
fd:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:25:84:F9:F6:EB:8C:36:23:E7:30:C9:B5:F9:63:CC:A0:BA:C4:EC
X509v3 Authority Key Identifier:
keyid:4C:40:C7:11:1C:29:16:A5:F5:AD:AF:1E:50:50:A9:40:C2:6B:23:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEDHERwpFqX1ra8eUFCpQMJrI3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/ad4e87-5b28-42d7-9748-4ab498b596a3/1/TEDHERwpFqX1ra8eUFCpQMJrI3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:46:0e:d7:0b:8b:46:3e:64:3d:92:09:63:f8:28:fe:5a:d2:
bc:22:c8:96:9f:c3:95:34:fe:6a:ae:f7:06:e2:d0:2a:a8:3b:
f9:50:fd:8f:dd:ab:82:a8:b3:7f:9a:8a:07:44:1e:ac:59:98:
ca:8b:bf:ca:2e:c9:a5:96:52:06:7c:6b:6b:fd:33:0a:b8:9a:
6e:d4:67:26:ed:82:e1:43:bd:14:22:30:41:9e:77:f9:9e:d2:
73:03:fd:00:09:ec:df:d8:f3:48:83:01:2c:e8:c9:54:12:82:
f5:1d:ad:36:4e:f4:4d:f4:c6:2f:da:a9:6b:07:e3:a9:b1:ea:
71:e9:72:bb:8e:21:56:e7:07:ab:9c:42:7f:c2:95:a5:1a:c1:
40:e2:da:be:2e:58:be:c8:fe:c1:14:13:3a:42:8e:c7:c6:33:
1c:a8:69:a2:94:4a:8c:9d:09:30:0a:16:8b:3d:af:66:da:58:
ab:eb:2d:79:99:c2:af:ea:a4:74:61:93:b7:cc:42:d1:84:72:
0f:34:c5:8f:e2:a8:e5:1f:c5:de:b9:31:11:49:ba:ad:98:1c:
c3:85:a4:39:c5:3b:01:a7:03:fd:99:dc:4c:1e:62:a4:c9:63:
7e:ff:ac:a9:a7:41:ff:66:36:8a:02:9e:1e:df:fb:77:8a:6d:
c3:8d:77:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:09 2025 by rpki-client