Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
File: TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft (raw, json)
Hash identifier: cnIjrmtuQAQY43nLua2Ps9/1wY0e6kvt7D5hH77b5iA=
Subject key identifier: 06:D0:DD:D8:3D:15:E7:53:54:22:D6:30:6D:2C:3C:E1:44:54:B4:63
Authority key identifier: 4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
Certificate issuer: /CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Certificate serial: 0194BD8567FC6FA94A1E0E8FA19BE028BF4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: 5XqYz3igdHBUJOarhV6UCk20p4g.roa (hash: OiTQYPv4ItBCPhGaoL4ocDwYxXkvxpj8Eo+XMn3YAwI=)
2: BWzUAYzWxehGB0sc7Hoq3s64-5A.roa (hash: Y2Cmk2o0Bi2v58k/tp8mbuKNOVbGQJJqiMnQXIqfVfA=)
3: TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl (hash: /+uJhfBA2KvQohU7OCB17fq8zGjRRkt9Udas99keou0=)
4: uJBF8l1YNTX1rQwpWIP4iAOZYes.roa (hash: W5zW790ApNcbjg521YyvqbQ8pFLrwOkcD0CU1yoVHdc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:67:fc:6f:a9:4a:1e:0e:8f:a1:9b:e0:28:bf:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c988b93ab7a2999a3255eeae4e18ab23b2e0f3e
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=06d0ddd83d15e7535422d6306d2c3ce14454b463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:7a:18:cf:bd:3a:b4:f8:82:df:11:7a:c1:
41:e4:ea:5c:f2:52:15:7a:76:93:1b:56:61:31:3b:
c4:1b:58:a3:87:f1:91:a9:3e:ba:21:a6:88:b6:64:
13:e3:0a:04:36:90:10:4f:78:e1:29:09:2e:e3:52:
ac:81:50:17:fd:0b:f1:0c:c5:03:ff:d5:f3:6f:14:
c3:5a:20:51:60:52:34:14:29:62:2b:7b:32:80:da:
08:31:91:3f:0f:c0:c9:2a:c9:41:43:2e:2b:01:ae:
9c:a5:57:f8:f6:73:b1:f9:5c:ce:26:51:c3:ec:28:
0c:43:62:cf:56:31:f6:7e:73:86:39:8f:86:b0:d2:
48:fe:2e:99:a9:13:b7:6c:9c:0b:14:7e:83:fd:0f:
8d:e6:5d:d2:c0:75:f9:99:98:21:6a:9d:61:e5:46:
9e:a1:e8:4a:3a:4c:ec:30:2b:c3:a6:48:0c:89:a3:
cf:db:ef:7c:61:f3:1f:0b:19:25:4b:00:43:b4:04:
4f:fe:d2:fa:d7:f5:12:72:5b:c7:59:da:fb:0f:79:
06:57:e4:9b:9b:d3:8b:42:fb:83:30:6f:ba:b5:5e:
38:5c:6d:5c:99:e0:21:d3:57:29:96:6a:98:f3:9f:
f7:f5:ff:a8:f3:05:b5:5b:80:c9:ae:6e:0e:6b:a9:
e0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:D0:DD:D8:3D:15:E7:53:54:22:D6:30:6D:2C:3C:E1:44:54:B4:63
X509v3 Authority Key Identifier:
keyid:4C:98:8B:93:AB:7A:29:99:A3:25:5E:EA:E4:E1:8A:B2:3B:2E:0F:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJiLk6t6KZmjJV7q5OGKsjsuDz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4c1f59-0c12-4153-a15c-715f9cd63086/1/TJiLk6t6KZmjJV7q5OGKsjsuDz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:05:c3:34:43:75:f7:e6:91:46:7b:86:5b:8d:3c:9b:e7:09:
d9:51:45:ed:2a:98:01:70:ad:33:ca:56:23:5f:96:bc:16:d4:
17:df:49:22:0f:fc:04:e8:8e:f6:e4:c7:eb:9d:da:e6:36:d0:
64:f3:03:cf:df:f9:0a:19:37:07:4c:2e:9a:a3:c2:a0:57:38:
de:51:08:53:30:0d:e6:42:9f:89:ed:77:88:32:a4:1d:d8:85:
6e:e8:73:5a:7a:cf:6c:94:b1:fe:03:c7:d1:60:40:5f:65:d4:
db:0b:20:97:cd:ff:c8:1d:2e:aa:a7:19:18:c5:c1:52:6d:44:
dc:bf:31:0b:2f:49:df:0b:1f:84:a6:07:f4:46:32:4e:65:45:
ef:1e:12:6d:f5:56:dd:ab:b5:a6:8b:bf:99:fe:6e:07:48:1f:
09:b6:cf:87:8a:bf:87:c0:1b:88:0c:40:ee:d5:56:41:90:b8:
f4:0b:2e:c2:0a:9d:a9:08:f1:f8:f4:ae:e8:9b:b8:47:ca:b5:
c7:e1:ee:08:60:a0:15:c4:c5:2f:3e:35:da:66:c1:f3:c2:91:
f9:54:4e:cb:93:73:83:10:ed:23:63:c5:35:4a:be:5f:89:93:
64:ad:23:2c:ef:bb:5c:f7:c4:1e:76:90:0c:a7:c5:66:65:32:
9b:8a:f7:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:37 2025 by rpki-client