Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
File: TFTszmy8nFSSnqpLIrM3sP2bNr8.mft (raw, json)
Hash identifier: i62bVOLZmxB4PUJ8i7ts84Apb76m4ksRfp/XGvXAlEw=
Subject key identifier: 2D:FC:92:A4:16:30:A6:FC:C4:F7:87:71:75:C1:66:4C:6F:9E:64:76
Authority key identifier: 4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
Certificate issuer: /CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Certificate serial: 0194BBCEE50D6A7582548D57F6BFE088901C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:25 +0000
Manifest this update: Fri 31 Jan 2025 10:01:25 +0000
Manifest next update: Sat 01 Feb 2025 10:01:25 +0000
Files and hashes: 1: TFTszmy8nFSSnqpLIrM3sP2bNr8.crl (hash: Z1sAWDxRLCDMZUQN/6aVl14oWH2uEvP6KIyCPU51MhQ=)
2: eHPqpiMAvfqI-We9VzdWjZPR_bY.roa (hash: 2EtKDvjgQC4QGGaHfks3HUfVQC7NvALc/OB3oROL6rM=)
3: ePZ7Yuu3-_aTMfNEBfmL4fdhXII.roa (hash: ho6FnqARFfeawc2fVl+6U/A9evk5Ck/9UluGTSWRaEw=)
4: jEFUKY2bhw_vuBM1OshauBn8mvg.roa (hash: ZeWPCxGU+ldLXwfBechPAx21XNMieJ0auUVK9LjYs/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e5:0d:6a:75:82:54:8d:57:f6:bf:e0:88:90:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c54ecce6cbc9c54929eaa4b22b337b0fd9b36bf
Validity
Not Before: Jan 31 10:01:25 2025 GMT
Not After : Feb 1 10:01:25 2025 GMT
Subject: CN=2dfc92a41630a6fcc4f7877175c1664c6f9e6476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:49:8e:54:ba:ef:87:c3:56:d1:c8:28:80:
ed:ee:50:f3:33:dd:8f:fc:a4:df:3d:63:33:34:3c:
21:2c:ef:d2:06:9d:f0:ca:40:78:d6:c9:da:f3:85:
01:f4:7a:cb:79:ce:93:3c:f7:a4:35:0e:33:ac:57:
92:0a:c4:dc:ba:72:42:ac:c4:16:ea:01:ed:2f:4f:
bd:85:b1:18:e3:57:69:33:73:e2:7c:bf:20:85:f6:
9e:06:bd:39:e9:b0:0d:f3:33:45:4c:1f:cc:60:37:
28:e4:f9:83:17:02:7b:95:ed:dd:d7:6e:c0:fa:78:
75:a7:1c:82:71:9d:a2:04:18:87:ab:e2:98:e8:77:
ef:b3:dc:7a:55:04:59:b0:f0:1f:25:10:e2:77:0e:
88:3f:52:36:59:d3:7d:2e:69:44:cf:8e:52:38:0a:
88:60:1e:c3:e9:dd:55:4d:f4:a2:97:d8:94:a5:5e:
fc:56:da:d5:0a:95:54:35:c0:df:fd:3a:d3:23:d4:
26:66:d2:9e:7d:a2:1d:9a:90:ba:11:4d:17:90:f3:
c4:e6:31:5b:64:85:c6:b7:16:e5:ff:d2:9a:91:4b:
d9:c3:91:86:25:d0:3a:e0:61:10:7f:04:fb:ec:cb:
d1:c0:4a:05:ee:21:b8:12:07:69:b0:6b:15:f8:15:
d6:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:FC:92:A4:16:30:A6:FC:C4:F7:87:71:75:C1:66:4C:6F:9E:64:76
X509v3 Authority Key Identifier:
keyid:4C:54:EC:CE:6C:BC:9C:54:92:9E:AA:4B:22:B3:37:B0:FD:9B:36:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFTszmy8nFSSnqpLIrM3sP2bNr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/02c5ec-7c6f-4ae2-9897-3059c89b72ea/1/TFTszmy8nFSSnqpLIrM3sP2bNr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:7f:f3:d4:52:c4:1e:69:2c:f6:8c:15:ca:72:d9:58:ce:5d:
99:08:b0:6e:01:aa:b6:fc:5e:db:7e:0c:30:a7:59:bd:ef:b5:
d7:98:53:ad:28:f0:05:20:d4:7a:1a:05:7e:f4:1b:2b:03:85:
ac:10:df:35:de:7b:c1:9f:0e:93:1f:8b:16:37:27:c0:d0:9e:
4d:85:5b:ea:21:9a:de:13:ec:f6:ab:f5:2e:f8:07:aa:91:17:
49:7e:8b:7f:5a:e3:1b:06:ff:06:56:32:68:af:4a:75:46:82:
d2:9f:5d:64:da:13:26:22:6f:be:43:3c:91:f7:e9:8e:de:ec:
19:19:96:3d:81:df:c7:3e:22:3d:74:76:69:00:24:b6:f6:bd:
d7:05:71:eb:a9:ef:88:4a:c0:14:96:a3:3c:bd:19:88:ab:01:
c5:27:e5:2c:5d:a9:76:d5:9e:e1:66:7c:ce:03:65:69:7c:c8:
2f:10:b6:de:e0:ad:f7:7d:8e:5e:87:e3:cb:87:fb:e4:91:25:
51:9a:4b:b7:7f:1a:20:36:9c:f0:cb:b3:05:30:0a:c1:3c:a7:
bd:36:d6:c7:5f:6b:0a:ea:d3:ae:e1:3d:95:1e:77:e7:b8:ac:
ed:7f:fb:01:51:b5:c3:8e:56:6d:2d:ed:0e:50:ed:16:b7:d1:
b3:72:56:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:15:39 2025 by rpki-client