Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
File: TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft (raw, json)
Hash identifier: 4fAfq+8GU5bp+dbYZIoK6bzBSBaNeE7wCOcH6LCaR7c=
Subject key identifier: 98:0E:EC:4F:AB:7E:2A:87:A2:FC:98:AC:40:62:78:31:1F:C3:57:80
Authority key identifier: 4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
Certificate issuer: /CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Certificate serial: 0194BCE0A2D8AD37AC23C1C4053B8CCD8C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
Manifest number: 0A55
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: MhvE3qmmLRT0N7DSbTLw9Csy23Q.roa (hash: JVGSBwpVFJHRhnHW5L6AwZ0tkeTLczM6lU9i030j0HQ=)
2: TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl (hash: NK1aqantQ/vAA80hsYpvLwk0VxWh/y8AShUOsjfAEnY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a2:d8:ad:37:ac:23:c1:c4:05:3b:8c:cd:8c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c216f66560ae16ba7594f46af060f351e0eb49e
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=980eec4fab7e2a87a2fc98ac406278311fc35780
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4b:b1:79:6c:ad:31:da:dc:ae:a3:5b:e8:bd:
88:29:ca:8a:ce:34:b2:41:9d:53:69:99:c5:01:86:
6f:20:df:23:af:f2:da:6a:06:30:43:88:19:02:2d:
01:c3:27:98:41:bb:2d:07:32:18:db:a9:66:84:da:
3b:42:09:33:4b:8d:1c:47:ac:72:66:a2:92:a9:f9:
13:27:5d:58:74:54:f9:aa:57:f3:1d:3e:d5:4e:04:
5d:be:6f:8d:3b:fc:20:6b:b2:e8:f0:2a:17:f4:bf:
d4:02:c3:19:77:7a:78:3e:a2:34:77:d9:d1:a4:41:
59:6a:87:71:d7:6b:f1:bd:28:e1:28:f3:18:f6:47:
07:5e:74:33:a6:54:10:b6:e8:91:40:da:9c:9d:bd:
15:34:38:c8:0d:9c:ee:b9:4d:d7:f2:dd:9f:0f:3d:
7d:f1:00:aa:4b:b5:c2:78:f8:59:b3:b9:be:b2:96:
98:9b:16:36:01:98:c8:10:33:b1:d7:b8:00:4c:46:
aa:32:dc:82:36:3b:28:d9:3a:e0:e9:57:69:f1:ec:
bf:e8:bf:f0:37:db:7c:48:04:6d:2c:d8:28:2b:bd:
a0:d2:ea:e0:b3:61:5b:cd:c9:ce:55:8f:62:3e:1d:
16:13:f7:1b:61:0a:06:1a:b3:40:7d:78:97:60:b6:
d3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:0E:EC:4F:AB:7E:2A:87:A2:FC:98:AC:40:62:78:31:1F:C3:57:80
X509v3 Authority Key Identifier:
keyid:4C:21:6F:66:56:0A:E1:6B:A7:59:4F:46:AF:06:0F:35:1E:0E:B4:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCFvZlYK4WunWU9GrwYPNR4OtJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/65646f-bea4-4f93-96be-48fea345fa13/1/TCFvZlYK4WunWU9GrwYPNR4OtJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:4b:08:99:7a:af:e6:a6:ea:80:2f:91:49:91:5c:e9:71:4a:
33:ae:a7:3f:7d:d1:5e:c2:a6:5a:06:75:a4:c9:e4:b8:9d:dd:
1c:75:b6:32:71:fa:5b:ae:f8:9c:a5:72:9c:5f:b5:b5:a6:ad:
9c:c2:35:91:00:9e:88:08:fa:3b:71:f9:11:cf:d6:6e:14:f6:
41:77:60:b5:13:19:e0:9f:5b:4e:60:de:b0:cd:21:3b:ee:b1:
e0:3f:07:bd:40:00:18:ca:c6:25:99:c9:c5:c4:9e:94:5a:5f:
1d:c3:e1:a6:79:99:65:43:53:63:5f:58:b7:03:ad:91:e7:4b:
69:28:ed:b0:c5:0c:44:9d:d0:b6:c9:ce:63:fd:34:85:4b:75:
97:40:64:82:9c:a3:f5:8e:6b:63:cf:c3:e7:c6:53:c3:d3:03:
a0:b6:32:ca:bf:e2:f6:95:f2:f4:c5:36:0d:df:08:11:64:c5:
6f:55:ad:d9:4b:e9:ae:72:dc:d6:95:ae:a9:48:01:cb:22:16:
9d:68:7d:12:d4:9c:9b:9d:c9:5b:3b:29:3f:39:c7:9c:00:a8:
61:bb:ff:e8:b7:5f:4a:33:be:6e:b2:32:31:2f:e2:ad:d8:51:
d3:c8:99:cd:bd:dd:cc:34:9a:e1:4c:30:fe:fb:2c:31:ba:b9:
18:bf:91:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 11:25:57 2025 by rpki-client