Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
File: TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft (raw, json)
Hash identifier: CLgK+i2opBV7+SdvUQcc3vseXboorcgYyOXu+iP86jg=
Subject key identifier: BF:54:BE:C6:06:62:53:4A:04:D8:7A:E1:BB:88:D1:87:CB:95:04:8A
Authority key identifier: 4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
Certificate issuer: /CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Certificate serial: 0194BD180C7BE8490F6DFCD90D81A5245FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:57 +0000
Manifest this update: Fri 31 Jan 2025 16:00:57 +0000
Manifest next update: Sat 01 Feb 2025 16:00:57 +0000
Files and hashes: 1: TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl (hash: YgfyTbRpj0HnIlgKMX0va/HW9y1vBXnK6WHJySH1Btg=)
2: kvulLtgS7l9j5cL5cr_z1UEgt1M.roa (hash: lwycUBIUeNB/fogCEgMYVAepQLASER5k8Ye40EXBAoI=)
3: oU2gT1IurOl4JOtTxHQKMy5VlJc.roa (hash: 7D6CZeXsxLmbsc8Q3WlliKMlAUVGAKnvDjUAjAi4e0g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:18:0c:7b:e8:49:0f:6d:fc:d9:0d:81:a5:24:5f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccbc5e045eaa5f762a9146244c19248b62ba976
Validity
Not Before: Jan 31 16:00:57 2025 GMT
Not After : Feb 1 16:00:57 2025 GMT
Subject: CN=bf54bec60662534a04d87ae1bb88d187cb95048a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e3:c9:18:46:97:ac:16:c1:d8:ac:9e:7f:d6:
d5:73:d3:8f:62:3a:72:e6:bf:57:78:88:af:d0:a8:
28:37:bb:f9:3f:ea:c0:f1:87:d8:29:a4:bf:88:13:
55:a1:70:97:a7:31:ba:a4:6a:b2:66:69:27:f1:23:
e7:34:2b:5e:74:40:73:cf:eb:61:0d:9a:d1:c1:97:
68:49:30:18:a8:8f:89:8d:43:9b:a8:73:4f:6f:5b:
b1:f2:91:cb:1a:7f:ee:d9:30:be:54:6b:cd:fb:37:
78:47:3b:14:2d:e5:35:23:6c:0b:20:f6:eb:aa:2c:
71:2c:da:21:cc:71:e8:5d:8c:67:d0:14:9d:2a:21:
76:a1:28:03:a7:b0:be:84:2d:9e:c2:30:85:9e:e9:
db:dc:16:7f:21:53:c0:1d:5d:c0:25:16:e8:65:21:
91:96:b6:34:17:48:6d:53:d1:f8:38:6b:04:4b:4c:
3e:a0:22:8f:df:8c:b6:4e:70:ca:75:73:80:24:ef:
92:66:55:bb:22:6c:e9:7c:1c:37:46:10:7e:84:f0:
18:ee:9e:57:93:d9:ce:cf:4f:93:85:2b:0d:dc:fe:
95:99:34:8d:13:6f:7f:db:41:b9:81:da:8d:e0:44:
06:19:9c:d5:b2:3c:fb:a8:42:b8:01:b1:8e:6b:11:
9f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:54:BE:C6:06:62:53:4A:04:D8:7A:E1:BB:88:D1:87:CB:95:04:8A
X509v3 Authority Key Identifier:
keyid:4C:CB:C5:E0:45:EA:A5:F7:62:A9:14:62:44:C1:92:48:B6:2B:A9:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMvF4EXqpfdiqRRiRMGSSLYrqXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/bf66dd-6237-48de-aed7-a7c59ddcf76b/1/TMvF4EXqpfdiqRRiRMGSSLYrqXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:69:21:e9:79:77:f5:c1:5d:fc:07:07:13:df:8f:e2:39:a0:
ef:97:86:7d:88:4e:ff:ec:9a:80:69:82:d6:65:9e:d8:ef:88:
05:63:ec:70:27:31:09:b6:a5:4a:e0:d8:d2:f0:bd:c1:7c:b9:
dc:99:b3:51:3d:d2:6c:f6:59:70:1b:3d:81:d4:66:ed:a9:eb:
9a:c8:b5:f1:b2:e0:aa:71:a1:17:6e:67:9d:c2:52:3f:88:56:
39:53:ea:99:c5:a8:7a:f5:13:c6:47:53:c2:44:b7:b7:4d:18:
2d:3a:bb:08:7d:79:cf:ed:a5:dc:a0:3f:59:89:37:25:20:43:
e5:51:7d:69:bc:6e:02:83:57:2c:40:02:54:bb:f7:71:3a:27:
30:95:ee:65:52:9b:fb:f9:a2:52:bf:07:a7:2a:42:7b:23:8c:
b7:c6:d1:61:8a:57:84:bc:c1:e0:55:a8:2d:e6:23:7b:a3:56:
07:be:21:ab:1d:e6:04:a5:b6:e7:aa:19:f6:dc:ea:5d:4f:a2:
c8:e8:a6:03:f2:57:3e:31:db:4f:d4:79:81:d1:3c:75:41:eb:
65:86:43:4c:d1:1c:bf:96:76:55:a0:f3:f1:a6:e7:2c:ad:44:
d0:ad:00:a0:1f:c4:bc:a1:5a:e5:39:b4:18:53:64:ac:10:4b:
01:89:c6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:36:37 2025 by rpki-client