Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
File: TEaPGBJltNlsooNaPlcMJnkDXf8.mft (raw, json)
Hash identifier: rjp5pf7O4Tp5PTn0/IKXZ7lyI5UzhQqCWpwaPpHGSo0=
Subject key identifier: F9:25:47:1E:A5:F2:E2:49:42:3E:39:EC:15:D5:9A:0C:50:35:F4:3F
Authority key identifier: 4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
Certificate issuer: /CN=4c468f181265b4d96ca2835a3e570c2679035dff
Certificate serial: 0194BC05258F67D3266445424A44D78C803D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
Manifest number: 135C
Signing time: Fri 31 Jan 2025 11:00:41 +0000
Manifest this update: Fri 31 Jan 2025 11:00:41 +0000
Manifest next update: Sat 01 Feb 2025 11:00:41 +0000
Files and hashes: 1: TEaPGBJltNlsooNaPlcMJnkDXf8.crl (hash: I1hbSaiJEVIRIXUkIupi3dVVz4VPBcslVyTAr6Edorc=)
2: TlMdFyo8UfqJ-RDrKLDhrg_5XKw.roa (hash: xU0L/Ky30tv9qoqHoWWKteKnPJXzN1H+V1CKVuBw5jA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:25:8f:67:d3:26:64:45:42:4a:44:d7:8c:80:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c468f181265b4d96ca2835a3e570c2679035dff
Validity
Not Before: Jan 31 11:00:41 2025 GMT
Not After : Feb 1 11:00:41 2025 GMT
Subject: CN=f925471ea5f2e249423e39ec15d59a0c5035f43f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:90:48:1d:4d:e2:d6:2a:3d:db:46:37:94:da:
c8:09:f4:8c:e2:11:ef:02:56:51:1d:cc:28:84:79:
9d:9a:0d:72:a0:04:75:15:20:84:e6:b0:3a:39:c9:
de:3c:f6:10:13:f6:ea:eb:91:d6:ac:dd:9b:76:76:
06:31:69:bb:85:13:68:b1:ec:81:5c:95:ce:75:25:
60:ca:72:f3:ea:3c:17:6a:1d:77:35:71:bb:6c:0a:
df:5c:b3:1c:c6:27:05:ff:0a:67:3b:8f:62:05:9c:
80:2c:d2:39:58:65:d6:04:93:40:b9:09:a0:4f:a3:
d9:e1:6b:e9:c7:17:41:14:11:40:98:e7:94:41:3c:
79:b5:50:cb:57:95:d9:1c:73:cd:b6:ed:35:c8:e9:
79:df:b2:bb:44:38:0b:aa:a7:71:55:4a:40:e4:5f:
61:65:a3:88:9d:0f:63:62:91:72:ed:1f:39:0a:81:
f4:65:6a:01:64:89:a3:85:26:97:59:4f:2e:4f:98:
5f:19:33:ba:0a:01:b5:09:a6:59:a8:e4:09:c7:7a:
50:40:1e:5a:40:ca:c3:e1:83:95:52:ca:51:67:f7:
10:ac:99:35:80:43:cf:2e:3c:32:dd:ec:fc:82:97:
1b:ac:96:05:48:5a:26:aa:6e:57:ea:6f:51:00:3c:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:25:47:1E:A5:F2:E2:49:42:3E:39:EC:15:D5:9A:0C:50:35:F4:3F
X509v3 Authority Key Identifier:
keyid:4C:46:8F:18:12:65:B4:D9:6C:A2:83:5A:3E:57:0C:26:79:03:5D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEaPGBJltNlsooNaPlcMJnkDXf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/690659-3190-434d-8c22-1cd3393d0bf5/1/TEaPGBJltNlsooNaPlcMJnkDXf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:f7:9f:69:dc:f8:65:7d:2d:ac:c5:05:fa:7f:f3:fb:71:d2:
35:2b:04:89:19:52:67:16:53:6e:15:9e:86:eb:81:96:3d:0c:
6c:72:42:74:18:fe:77:6e:31:5b:76:74:3f:18:80:af:d0:10:
dc:b4:96:75:bf:0f:cc:7d:f1:cc:0c:3c:a6:50:e1:85:18:76:
9b:ac:d3:25:63:a0:9a:2f:06:ae:3f:cf:7a:07:da:ff:64:1e:
47:2a:20:82:43:ee:dd:2b:ad:28:83:62:48:91:dc:aa:82:ac:
5c:3f:00:02:53:2e:e1:cd:ac:21:a1:21:7f:13:02:4f:e4:d5:
a9:81:70:f6:97:9a:59:4e:49:6c:10:a5:f9:5d:34:f6:16:a7:
ef:19:12:15:4d:23:29:12:c6:d5:fa:57:a0:11:a6:10:bc:9f:
d7:6e:0e:3c:0e:1a:50:e9:ad:68:09:4e:97:67:20:15:58:10:
5e:d1:f8:28:a1:92:71:87:55:39:9c:bb:90:c1:19:86:57:a2:
58:9d:b5:49:49:79:39:76:8b:01:d5:de:5c:3f:be:a9:67:9a:
76:8f:59:5d:25:1c:92:4f:36:48:64:83:1e:68:be:89:a9:17:
e2:fd:f6:b2:fb:03:25:1c:52:71:c3:12:fb:db:a0:53:d4:4c:
9f:93:dc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:46 2025 by rpki-client