Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
File: TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft (raw, json)
Hash identifier: 4/ndkvE3gBA6fXeSy3PFNkywXHsQ/wiblfoUI6BIqrM=
Subject key identifier: 94:E2:10:3A:BA:9D:AE:30:8B:6F:D8:C8:14:FA:24:B6:E7:0A:2B:4A
Authority key identifier: 4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
Certificate issuer: /CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Certificate serial: 0194BD1780DDAF1BB1D50389B41C0670DFFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
Manifest number: 1116
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: R8OfYueHd1P1AWWtdGiixwllIMs.roa (hash: ZKzgreBUlCJXbuPQDDLtfbqfZaf5YaZJohzFfYmemPA=)
2: TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl (hash: qoOsL/HaKuJ0H9c9MUoebOZCFwNR9PRY8YCTsvwrvBk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:80:dd:af:1b:b1:d5:03:89:b4:1c:06:70:df:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd71f5a0050f8ae6444c638769ba375fddbce19
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=94e2103aba9dae308b6fd8c814fa24b6e70a2b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:47:5c:cc:69:54:35:73:fe:f5:09:5c:d8:7f:
98:44:36:f6:6b:3f:d7:6a:6b:da:58:cf:8b:9a:7f:
96:e2:df:86:bd:32:13:7e:61:12:31:9e:18:7c:3a:
a0:84:0d:8d:05:5f:c8:ec:68:0e:7b:1c:6e:77:da:
03:ff:bf:78:90:5d:e0:10:da:67:24:eb:22:ca:f7:
66:6f:b4:f0:d3:75:54:64:84:7b:39:fb:d8:41:9e:
84:c2:5a:04:ec:52:06:37:36:dd:7a:98:5e:7b:89:
c4:88:d0:8b:cc:98:0c:4b:4a:e4:49:eb:1e:4e:68:
6e:68:54:a5:26:39:96:4b:d6:ac:7a:12:bc:9e:19:
1c:27:af:20:cc:8b:d6:d0:d7:53:af:ad:82:ef:27:
03:43:51:6e:0b:94:0a:51:f1:ff:f7:af:48:a6:1f:
4a:99:0b:8d:74:13:bd:b6:48:94:34:b5:c1:ab:04:
55:a8:7c:89:65:85:d6:3a:f9:90:7a:48:fe:1d:73:
fe:70:53:d6:b2:d4:db:d5:df:7f:f3:02:08:a5:0f:
69:53:7f:a4:db:77:a7:e0:dd:f7:ea:54:7d:6f:87:
ce:3c:6a:8c:40:cb:df:45:53:0b:49:41:9a:d1:19:
79:0f:9a:71:d9:43:9e:38:1b:76:b6:08:58:a8:e7:
b9:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:E2:10:3A:BA:9D:AE:30:8B:6F:D8:C8:14:FA:24:B6:E7:0A:2B:4A
X509v3 Authority Key Identifier:
keyid:4C:D7:1F:5A:00:50:F8:AE:64:44:C6:38:76:9B:A3:75:FD:DB:CE:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcfWgBQ-K5kRMY4dpujdf3bzhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/278398-7339-44b2-b0b0-73a01ae5de8f/1/TNcfWgBQ-K5kRMY4dpujdf3bzhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:3d:7a:12:51:b5:e4:af:15:26:6e:d0:12:43:e1:71:82:4e:
59:8c:79:07:56:b1:02:16:2e:c9:f5:60:c9:f8:3d:c0:3b:06:
9d:3f:d5:eb:36:fe:97:a5:ad:db:7b:64:96:c4:5a:04:c9:ab:
2e:07:57:35:9a:1d:31:82:2b:92:84:9e:af:93:f4:90:62:44:
54:b4:7d:7b:27:51:ed:47:64:c4:c3:da:c7:59:af:bf:b7:75:
d1:56:5d:a1:00:ff:26:f2:3c:19:37:b6:47:b9:d8:62:fb:43:
6d:63:75:68:a0:11:71:47:5c:b7:8c:55:be:c6:41:78:80:65:
ff:a8:81:5a:86:ab:8a:c2:35:a8:11:30:94:a4:7e:d9:3b:46:
fd:16:4b:84:58:3d:d0:e7:83:48:73:e2:eb:5c:1a:c4:3f:d7:
48:95:d2:58:93:41:ad:b6:a0:ab:86:98:04:ad:d5:53:07:c8:
ab:6b:b0:f7:d5:3a:e0:6b:fc:94:4d:29:0a:ee:95:16:58:78:
91:37:6e:e9:67:2f:40:ec:4f:d1:ea:11:b7:40:9e:a3:bc:66:
9c:26:eb:11:ce:a0:eb:45:12:a8:1a:53:fc:28:4f:ce:9d:fe:
22:a6:04:e6:1b:ae:29:d1:dc:54:27:c7:4c:7a:92:35:11:cd:
0c:fd:77:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:57 2025 by rpki-client