Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
File: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft (raw, json)
Hash identifier: tsYMvPU7McsrvXDQsF10ovB6rshFHq9ok9ykbVoofOc=
Subject key identifier: B0:B4:FF:58:BA:80:28:19:F0:69:61:B7:86:7A:27:8F:05:85:55:7E
Authority key identifier: 4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
Certificate issuer: /CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Certificate serial: 0194BBCECAB19DBE0B42C48EDB7CF934B80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
Manifest number: 0AB7
Signing time: Fri 31 Jan 2025 10:01:19 +0000
Manifest this update: Fri 31 Jan 2025 10:01:19 +0000
Manifest next update: Sat 01 Feb 2025 10:01:19 +0000
Files and hashes: 1: E7on5Vfvg98I2xAlaMeiutbcdZQ.roa (hash: 52cCubbGQVWlaOLXukS3Zd4+5KnclvBfBahudlSwT/s=)
2: TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl (hash: HqPpwKiou2nAruYwDLKowXeq1iAzU9gsqtk0/4bV/ag=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ca:b1:9d:be:0b:42:c4:8e:db:7c:f9:34:b8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0a19d48c3547c2adb9f8effdeac6ad9e4f9d19
Validity
Not Before: Jan 31 10:01:19 2025 GMT
Not After : Feb 1 10:01:19 2025 GMT
Subject: CN=b0b4ff58ba802819f06961b7867a278f0585557e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:f9:ab:d5:53:04:c2:8e:73:0e:bd:3d:b7:07:
e8:45:38:f7:fe:ef:b9:45:ee:b1:7c:68:f5:f6:d1:
91:4f:86:5f:c8:aa:21:c1:5c:43:bf:4b:b2:be:c6:
3b:af:db:12:ac:2f:58:7f:83:a8:45:07:73:ce:88:
24:55:b3:b9:60:ff:7c:a2:a4:3a:e8:81:66:68:cf:
fa:69:9a:9e:54:78:8f:35:73:05:82:80:f6:69:b3:
7d:46:8b:b7:37:24:a5:29:75:bc:45:e4:fb:57:4a:
14:34:a9:ab:7d:b2:ac:36:5e:20:27:22:af:58:4b:
c1:da:c5:af:41:0a:7a:f2:14:b9:24:f0:be:f1:0d:
a4:00:b5:6d:6f:a2:64:a6:be:2a:7b:66:76:73:79:
f2:6c:54:91:23:56:90:74:97:ce:57:db:80:3e:db:
e3:2d:9d:e9:17:f8:07:6b:98:98:50:f2:44:27:c6:
fc:13:ae:9f:60:e6:20:3d:f7:a6:e8:b8:52:d0:59:
63:8e:29:af:ec:80:c5:66:59:3c:a0:8d:f2:71:f7:
7e:fd:53:e8:30:7f:4a:e1:70:ed:14:62:1e:45:29:
cd:23:b0:14:0d:18:f7:3d:98:22:bd:93:26:03:ca:
d3:7d:da:39:d6:d6:a0:1f:ff:c0:a1:fa:af:6c:fd:
aa:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B4:FF:58:BA:80:28:19:F0:69:61:B7:86:7A:27:8F:05:85:55:7E
X509v3 Authority Key Identifier:
keyid:4E:0A:19:D4:8C:35:47:C2:AD:B9:F8:EF:FD:EA:C6:AD:9E:4F:9D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/cb3e6b-a444-49dd-9f64-17c12273c54a/1/TgoZ1Iw1R8Ktufjv_erGrZ5PnRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:70:7f:d7:c5:9b:83:67:70:9a:5a:78:41:ad:a0:e8:8c:0d:
e8:98:a3:40:ec:15:b5:8a:d5:8f:15:ff:8c:20:ce:7a:87:bd:
ec:a4:8a:d5:1d:81:03:34:c2:2c:b3:1f:40:bb:14:65:d7:5d:
b9:38:15:bf:8e:ed:c6:9f:8e:f8:5c:73:bd:15:5a:9e:a7:3f:
6d:e0:54:92:c4:5b:85:ef:4a:f7:a9:07:16:a8:f5:cc:f6:2b:
75:0b:b8:b9:88:52:c6:40:79:d1:6e:bc:01:df:8c:da:7c:43:
d7:f6:e4:bb:95:75:dd:26:5d:f0:ee:10:3e:a6:f7:1f:ad:13:
ec:9d:80:23:e7:cd:c5:4a:57:04:01:99:57:42:e6:f1:0b:1d:
d9:07:30:08:64:21:76:19:e9:b5:bd:43:5c:36:25:87:01:b3:
60:2b:2e:ad:5d:f7:cd:f0:66:87:d7:ec:4a:3a:8b:3d:7e:17:
5b:35:ad:af:0c:0b:e6:e7:99:5f:12:c1:0a:07:83:63:33:2a:
0f:27:fa:d9:4a:cf:50:83:c1:a1:c4:65:a5:18:af:35:56:b2:
c8:57:01:20:81:4d:66:2d:ec:8f:22:0f:ce:e6:1e:be:62:cc:
ce:ec:3b:31:83:1f:8b:cb:f5:04:b8:dd:aa:4c:9a:fd:82:6d:
8e:aa:a8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:34 2025 by rpki-client