Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
File: TjQBh8D85f_wN87ZplCCQ-QE2nE.mft (raw, json)
Hash identifier: 6nkO3MXBxRNtJI+3w+TuomwZNciTK9tMlsU7Wj2zcVc=
Subject key identifier: 88:63:51:03:D7:BC:F4:D3:44:E3:4A:41:57:1E:4B:60:D2:7F:AF:84
Authority key identifier: 4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
Certificate issuer: /CN=4e340187c0fce5fff037ced9a6508243e404da71
Certificate serial: 0194BC3C770DD571C46EDC27690FD317E23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
Manifest number: 0756
Signing time: Fri 31 Jan 2025 12:01:06 +0000
Manifest this update: Fri 31 Jan 2025 12:01:06 +0000
Manifest next update: Sat 01 Feb 2025 12:01:06 +0000
Files and hashes: 1: CpuMVh4uJ1tcoj_OkQygaUN_hh8.roa (hash: yhnMpFW3oI3a8/KGPX3tjlLUQZvGsHrg1LJyUrjeFm8=)
2: TjQBh8D85f_wN87ZplCCQ-QE2nE.crl (hash: RGJcVY23ompuKs8kuKEMy5Utd5aathuDzf2YCYRsek0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:77:0d:d5:71:c4:6e:dc:27:69:0f:d3:17:e2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e340187c0fce5fff037ced9a6508243e404da71
Validity
Not Before: Jan 31 12:01:06 2025 GMT
Not After : Feb 1 12:01:06 2025 GMT
Subject: CN=88635103d7bcf4d344e34a41571e4b60d27faf84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a4:c7:3b:be:8b:44:d8:89:f2:79:68:95:b8:
c9:6a:b5:8b:b7:81:5a:83:9e:0e:39:4f:fc:c7:63:
de:89:f1:c3:93:4d:ae:1c:d2:9f:06:01:e6:8a:e3:
1f:fe:bb:ef:d2:9c:52:65:84:54:63:a3:aa:f3:51:
75:16:14:f1:d5:bd:38:b9:6a:be:77:5d:72:b4:8f:
a3:81:a4:93:b4:c3:85:dd:6b:d2:1e:e8:1e:0a:08:
94:1a:58:e1:c8:f5:4f:20:df:62:e2:cb:7a:7d:5c:
25:b5:42:ba:6b:20:01:85:32:df:87:26:57:7a:c6:
29:38:4d:fe:2e:9c:9e:78:f1:35:f0:24:ad:0e:58:
b9:d2:ec:d5:3c:1d:6f:e3:69:22:a6:9a:6a:e8:ec:
fb:dc:27:5d:98:bf:ce:d6:9c:9a:77:7e:84:e0:14:
af:cb:79:34:9c:9c:d8:57:ff:85:05:3c:24:ba:93:
ed:59:29:4c:83:cc:30:fe:97:e2:00:2d:c9:58:0b:
0c:34:18:bd:7d:3f:5f:c3:ce:c3:41:38:5b:9b:94:
e2:a4:82:10:cb:df:b4:23:93:43:5a:3e:19:a6:88:
cc:54:49:b3:e9:be:e0:d7:77:8f:f9:f3:e4:f8:94:
fc:c3:ac:0b:11:f6:05:7d:5a:0b:9b:42:ea:6d:8d:
89:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:63:51:03:D7:BC:F4:D3:44:E3:4A:41:57:1E:4B:60:D2:7F:AF:84
X509v3 Authority Key Identifier:
keyid:4E:34:01:87:C0:FC:E5:FF:F0:37:CE:D9:A6:50:82:43:E4:04:DA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjQBh8D85f_wN87ZplCCQ-QE2nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/961f64-837c-4811-aa42-58f215bca53a/1/TjQBh8D85f_wN87ZplCCQ-QE2nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4f:f7:8a:aa:b5:69:f3:1c:4e:04:b3:74:0b:fb:2c:e5:c2:
93:1b:55:9a:76:76:d3:ae:24:c2:e2:2a:6a:02:59:72:2c:30:
74:f5:c3:de:fd:51:7f:31:ad:ec:c9:64:53:88:ef:e5:99:1a:
bd:4b:b6:bb:d7:01:aa:7e:0c:6a:1a:7e:c0:97:5c:7e:5f:73:
9d:80:f4:f6:b4:9a:2a:41:7b:dc:6e:48:0a:7c:a7:00:39:ec:
58:c8:41:70:81:06:2d:3e:bf:67:2a:1d:dd:65:c5:ac:ed:f0:
5c:8f:c5:b2:88:00:72:cb:1a:cb:3c:26:b8:a7:f8:a7:22:f3:
f5:34:17:c1:36:40:b6:60:1b:b0:6b:9f:d8:a3:d0:64:58:cb:
a3:41:9a:c7:a2:ac:ea:ff:93:04:1f:27:86:bf:c1:6f:bf:31:
22:df:87:12:36:22:a0:0e:3b:cb:ea:21:4e:23:42:f7:89:36:
02:71:f8:fc:2d:35:96:86:0d:fe:8d:6c:f4:60:03:21:18:e2:
fe:e7:ff:b8:70:fe:ca:9e:e6:65:0d:84:cb:37:07:c4:e3:55:
51:26:a9:28:d4:55:5f:a2:07:85:4f:cb:ff:90:2f:ca:6b:7d:
56:99:33:eb:a0:0d:ab:99:3e:5b:06:c3:fc:2e:c2:55:1a:72:
79:59:56:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:48:18 2025 by rpki-client