Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.mft
File: TTaHdCvs89CAgu0S6fNHC4LafP8.mft (raw, json)
Hash identifier: Ar4rhCIUoM42hHlHZHncaVzOslgUlGRNGFvnjwRnP/A=
Subject key identifier: CE:18:36:8D:BE:0D:B9:1D:0C:4F:37:A8:F1:02:8C:76:E5:A8:D1:94
Authority key identifier: 4D:36:87:74:2B:EC:F3:D0:80:82:ED:12:E9:F3:47:0B:82:DA:7C:FF
Certificate issuer: /CN=4d3687742becf3d08082ed12e9f3470b82da7cff
Certificate serial: 0194BCA9AA3682F1F8F44540556B70380D84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTaHdCvs89CAgu0S6fNHC4LafP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.mft
Manifest number: 0B0C
Signing time: Fri 31 Jan 2025 14:00:23 +0000
Manifest this update: Fri 31 Jan 2025 14:00:23 +0000
Manifest next update: Sat 01 Feb 2025 14:00:23 +0000
Files and hashes: 1: TTaHdCvs89CAgu0S6fNHC4LafP8.crl (hash: gxl9JayKw/nlOxp0r7OzdPhdocueHAalSSACjQ53slI=)
2: ehQIMYmYwJQIMwezxzrnCxQWXrQ.roa (hash: K5j8O7wSUuuth3uj2946HM7L4q3WosF43ObE+K/eL8k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:aa:36:82:f1:f8:f4:45:40:55:6b:70:38:0d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3687742becf3d08082ed12e9f3470b82da7cff
Validity
Not Before: Jan 31 14:00:23 2025 GMT
Not After : Feb 1 14:00:23 2025 GMT
Subject: CN=ce18368dbe0db91d0c4f37a8f1028c76e5a8d194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d1:fd:b2:82:9a:bf:42:b7:08:cf:95:65:7d:
ca:dc:73:d9:c7:a8:ef:03:5d:ac:e0:7e:42:a4:55:
b9:93:d5:19:3e:8f:b3:0b:97:ca:d7:1e:bf:f1:c3:
15:38:ff:fb:21:93:9d:d4:21:7b:7c:92:96:cf:f8:
6b:18:35:75:8d:93:48:47:1b:fb:ae:f6:d4:00:82:
b9:53:54:14:82:25:be:8d:10:03:42:75:23:d0:ef:
ab:9b:12:db:97:e8:de:33:29:ee:e6:c6:ae:9b:3a:
35:07:01:31:a7:44:2f:4a:76:98:18:60:c1:00:a1:
ec:c9:39:33:6c:11:5c:c9:b5:f3:d4:d6:2c:ee:46:
88:f9:06:c6:cc:47:f3:a5:4d:b7:70:88:44:3b:1e:
88:32:c2:5d:72:3d:47:04:7b:18:d6:56:b7:43:6b:
46:c1:bc:7d:be:e5:26:33:f8:df:fc:27:2f:80:5d:
29:0a:c2:9e:18:38:cc:9e:b9:5b:9f:79:01:51:d1:
07:30:22:7e:ab:cf:fc:4d:b2:94:81:39:ab:ee:42:
c8:22:51:87:ab:8f:e2:03:1c:1f:f7:0a:5b:1c:26:
34:78:bd:80:98:37:f7:a2:f2:0b:1a:e8:9b:a7:56:
3a:a6:3a:b7:4e:f9:98:cf:4b:17:f3:8d:18:cc:9f:
9d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:18:36:8D:BE:0D:B9:1D:0C:4F:37:A8:F1:02:8C:76:E5:A8:D1:94
X509v3 Authority Key Identifier:
keyid:4D:36:87:74:2B:EC:F3:D0:80:82:ED:12:E9:F3:47:0B:82:DA:7C:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTaHdCvs89CAgu0S6fNHC4LafP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/d885bb-a3dc-4390-bf24-103b17d3eb45/1/TTaHdCvs89CAgu0S6fNHC4LafP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:f5:13:95:84:03:86:6f:2a:85:a0:6f:bb:75:fc:0b:63:54:
b3:be:ef:0b:43:18:9f:f1:d3:e7:77:b9:b6:83:aa:9a:2a:48:
bc:7d:ae:cd:e7:de:19:92:2b:79:8a:d9:5c:57:0b:b6:54:36:
2d:36:c6:48:13:1c:9b:df:70:f1:50:bd:6a:4c:68:e0:15:cf:
3c:db:49:3f:e2:7c:c6:8b:73:f5:f0:bf:b1:38:1a:e8:d6:4e:
91:5c:37:81:12:4c:47:00:65:cd:0a:a3:f1:de:8c:c7:7f:41:
fe:1b:14:b5:76:43:c6:6c:25:7f:96:20:bf:83:00:d3:96:c5:
04:74:a6:cd:3a:a0:79:cc:15:4a:63:a7:97:ac:0d:92:ef:87:
f1:20:bc:74:50:72:bc:2d:05:8c:ec:c9:1c:3e:6a:91:7f:53:
4e:c0:59:c6:94:07:8c:d0:04:b0:6d:c9:f9:c1:56:a2:90:ea:
e0:19:99:7f:8b:8f:f1:b0:0b:f5:cd:38:f2:ea:70:0f:4c:11:
96:ee:d8:78:32:e7:4d:e3:d7:41:12:7a:5d:12:42:4a:cf:af:
5c:cb:bf:db:20:07:42:85:6c:2e:d5:52:f0:44:94:83:1f:95:
a5:2e:f8:d0:36:1f:a1:63:29:56:e7:6b:9c:4f:ad:14:5e:95:
99:98:19:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:46:55 2025 by rpki-client