Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
File: TkB_fq2BapVV9HrxCQPvRcgXC4I.mft (raw, json)
Hash identifier: MeMkNy5EgXque0svvxEsTDckwb+eiEhf9GFhXFGyV6E=
Subject key identifier: A3:5A:71:CE:37:7B:D7:6A:CC:BD:F8:C2:5B:4C:1E:66:D6:15:09:60
Authority key identifier: 4E:40:7F:7E:AD:81:6A:95:55:F4:7A:F1:09:03:EF:45:C8:17:0B:82
Certificate issuer: /CN=4e407f7ead816a9555f47af10903ef45c8170b82
Certificate serial: 0194BCA9C9B4824413EE803598969AA17C05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkB_fq2BapVV9HrxCQPvRcgXC4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
Manifest number: 050F
Signing time: Fri 31 Jan 2025 14:00:31 +0000
Manifest this update: Fri 31 Jan 2025 14:00:31 +0000
Manifest next update: Sat 01 Feb 2025 14:00:31 +0000
Files and hashes: 1: TkB_fq2BapVV9HrxCQPvRcgXC4I.crl (hash: Kntkd8633Us22Kj3llr+ezjHpuYbxI2iGws2lpczQpU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c9:b4:82:44:13:ee:80:35:98:96:9a:a1:7c:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e407f7ead816a9555f47af10903ef45c8170b82
Validity
Not Before: Jan 31 14:00:31 2025 GMT
Not After : Feb 1 14:00:31 2025 GMT
Subject: CN=a35a71ce377bd76accbdf8c25b4c1e66d6150960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d1:c7:0d:87:3e:18:23:94:6b:a4:c0:a3:66:
b9:55:8f:17:47:53:f2:d7:76:23:74:9d:6a:1c:d7:
6a:05:93:ac:23:58:45:5f:7a:2a:63:c8:46:a9:84:
fa:cc:29:ae:3f:ab:e6:ca:8a:54:b5:a7:cb:c0:a6:
63:d3:67:16:75:19:35:96:f3:60:54:c9:de:a3:13:
0a:e1:53:af:0c:68:f7:6c:a5:eb:1d:af:e4:db:c2:
cf:93:dd:8a:04:b7:66:85:0e:61:e2:09:a8:f2:a7:
63:c4:ad:bd:69:66:25:0b:61:2f:87:cd:c0:15:39:
52:46:d9:d0:d8:97:c9:f1:1e:fd:91:9a:2a:c0:5b:
7a:95:7d:e4:72:93:e1:8f:8f:ba:c5:37:89:39:bb:
b2:cd:25:b7:ea:97:7f:25:48:ca:84:06:bd:63:a2:
7d:7c:ab:44:3e:b6:29:2a:09:15:ad:dd:0d:cd:2a:
fa:62:dc:f5:5e:3d:b9:5d:43:6d:c4:6a:64:c0:c3:
7f:b1:08:d8:9b:17:a0:fe:17:66:1b:c4:2a:e8:e8:
34:55:24:3b:37:62:54:32:c7:2f:30:b1:83:98:1c:
81:15:3e:d4:6e:d6:9b:94:e0:14:a5:e1:ef:6e:98:
91:92:0b:98:28:53:ea:8f:6b:ab:c6:cd:9d:01:06:
59:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:5A:71:CE:37:7B:D7:6A:CC:BD:F8:C2:5B:4C:1E:66:D6:15:09:60
X509v3 Authority Key Identifier:
keyid:4E:40:7F:7E:AD:81:6A:95:55:F4:7A:F1:09:03:EF:45:C8:17:0B:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkB_fq2BapVV9HrxCQPvRcgXC4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/356552-312a-44ce-8677-405505fc460e/1/TkB_fq2BapVV9HrxCQPvRcgXC4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:01:a5:36:d0:63:65:43:07:03:cd:61:8d:83:53:fb:e7:6e:
9f:9e:fd:e6:cb:cd:30:f0:ed:9b:75:d5:d7:08:cc:4e:55:6e:
97:5a:86:53:f6:b9:c1:0b:39:77:e2:8e:b1:67:0a:e0:5c:8f:
4f:7b:4d:5b:5e:61:e7:c6:2d:ab:78:78:29:66:87:88:00:93:
c0:84:48:43:30:54:b8:f3:68:61:4d:03:57:9c:88:4e:d4:ef:
fa:38:2b:d2:e6:11:54:9d:3b:34:4b:56:8e:77:29:83:a1:d7:
75:10:64:4b:c6:22:e7:89:9c:55:d3:1a:03:cb:bb:c6:3b:af:
42:76:be:46:3c:90:07:f9:dd:83:cd:e7:b6:52:3f:52:3a:e5:
f9:ba:5e:54:2d:57:b7:3f:79:cc:a1:72:bf:9c:f1:09:34:5d:
7e:7d:e1:6b:a4:e5:7b:81:99:16:4a:13:c9:28:d8:b4:81:b3:
c1:e8:60:86:b9:9f:87:92:6b:5c:53:f6:d6:98:5f:fd:5e:3e:
ea:47:d3:53:b0:b3:e1:66:8a:75:bf:81:33:07:3f:bd:41:c4:
f6:e6:df:b5:d7:79:84:b7:a3:fe:6d:a0:ce:ee:1a:63:b0:13:
b1:e6:2f:05:d8:a3:78:f5:88:e4:d4:50:50:5b:20:4b:58:e8:
92:af:0a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:26 2025 by rpki-client