Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
File: TnzINx7SS6z2esqLkCzucGr8Yks.mft (raw, json)
Hash identifier: yHyfVZzuyG2bhfZfF3qAUHs780DB0B9ed8SbuzRZafU=
Subject key identifier: 88:D6:7B:7A:A9:DB:1F:E4:23:ED:29:CD:E4:78:C3:93:8C:31:56:57
Authority key identifier: 4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
Certificate issuer: /CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Certificate serial: 0194BC050DD3F00FA6FD95D1DA27E9C509F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 11:00:35 +0000
Manifest this update: Fri 31 Jan 2025 11:00:35 +0000
Manifest next update: Sat 01 Feb 2025 11:00:35 +0000
Files and hashes: 1: AFXKRWkq4CEJ7e_q_TT8oCKNDgs.roa (hash: vvcSpEWzby7j1iGxx2OT88XWdiMYKYH4weh98eM4dfY=)
2: TnzINx7SS6z2esqLkCzucGr8Yks.crl (hash: eX1ijwL+dgGnYgWIp4zLC4CwK8DhLI947N12ScaC/Q8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:0d:d3:f0:0f:a6:fd:95:d1:da:27:e9:c5:09:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e7cc8371ed24bacf67aca8b902cee706afc624b
Validity
Not Before: Jan 31 11:00:35 2025 GMT
Not After : Feb 1 11:00:35 2025 GMT
Subject: CN=88d67b7aa9db1fe423ed29cde478c3938c315657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c0:0c:fa:ad:2d:e5:76:c4:75:5f:39:9b:90:
0b:10:0e:fb:6b:ce:75:08:06:19:16:59:b6:96:75:
91:65:15:1c:d1:2f:73:c0:db:2f:92:b8:36:67:35:
91:76:c4:fa:ca:25:28:ab:3a:61:a0:28:54:97:4e:
f4:4c:58:44:e9:57:14:c5:9e:43:25:ed:74:6b:db:
9b:ef:a5:cb:99:a7:06:17:3b:9a:13:6e:b0:c4:24:
6c:41:dc:e2:1d:e8:86:7d:6f:61:20:20:f7:db:a5:
0f:4e:98:6c:b8:02:87:47:8d:cb:80:cf:01:b3:30:
f6:23:87:61:87:45:8f:51:96:3e:3e:8c:83:f2:3d:
ad:6b:c5:ea:8b:55:7c:2a:dc:a6:5d:fd:b8:9f:db:
c7:bf:03:78:39:a0:8e:84:38:ec:3d:29:19:d5:82:
88:71:5a:86:6f:f1:a9:59:7d:e1:09:c4:5b:bd:4a:
c2:8c:31:41:b5:13:5b:d6:df:fa:61:41:77:4d:b5:
a7:6c:e2:64:e0:e0:63:14:ed:cd:44:ce:03:14:b6:
36:6e:2e:fe:0a:04:15:f6:89:b1:3f:2a:58:26:5e:
76:2f:49:d3:76:98:c6:96:c5:11:58:ef:a8:f9:51:
d1:8c:d2:43:36:8c:75:f7:3b:50:75:a9:77:f5:fd:
1b:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:D6:7B:7A:A9:DB:1F:E4:23:ED:29:CD:E4:78:C3:93:8C:31:56:57
X509v3 Authority Key Identifier:
keyid:4E:7C:C8:37:1E:D2:4B:AC:F6:7A:CA:8B:90:2C:EE:70:6A:FC:62:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TnzINx7SS6z2esqLkCzucGr8Yks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/0b4cdf-b486-4a58-800d-8ed5a79de835/1/TnzINx7SS6z2esqLkCzucGr8Yks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:cd:82:51:bf:0c:65:52:3b:79:c5:92:d9:ed:7e:ff:ee:2b:
3a:23:90:6d:9b:3f:2f:40:5d:82:d9:fa:ce:da:dd:26:d2:63:
91:08:59:7d:39:74:fb:27:d6:d0:f5:be:d1:af:bd:94:00:0e:
67:2d:00:9f:b5:25:b5:b5:fa:c0:88:9a:ef:ad:08:a5:38:7c:
43:0f:c8:3b:48:8a:44:78:89:c0:2b:82:d2:79:4d:62:19:31:
6d:85:57:7d:4b:53:d2:34:64:d0:70:4a:2c:c3:5e:c1:81:50:
43:58:27:61:32:91:4f:c7:5f:28:f7:d9:04:a2:21:4c:20:56:
26:7b:04:27:a0:6e:a2:16:fd:ec:1e:2b:68:25:0f:47:8f:a0:
6f:5b:4f:12:9f:99:d4:c0:83:2b:cb:0d:e0:fd:bb:f7:15:56:
5b:04:28:07:63:76:51:11:d1:30:1d:5f:1b:39:1a:a4:0b:9e:
7b:38:bf:49:17:36:76:ca:29:b2:54:5e:76:1c:44:86:1e:99:
9e:da:79:46:64:8b:1f:10:c9:4b:72:11:ad:a8:8b:70:05:0c:
24:f0:28:8c:73:fe:a7:ea:60:06:a9:b2:a4:4b:d9:bb:52:4a:
d3:f1:1b:d8:c6:61:10:92:b3:77:a3:1f:ca:41:10:6b:a9:cf:
73:1d:af:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:54 2025 by rpki-client