Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
File: THWUsCFCZPBmd2CbtKpHeese7K0.mft (raw, json)
Hash identifier: RrI8r3mkME/Rk0RmpKv7U10TtIfy8a3zHmTapUivLCo=
Subject key identifier: 48:A3:EC:D4:E4:16:2C:C6:59:D1:7B:B2:E9:64:9F:04:F8:44:50:3F
Authority key identifier: 4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD
Certificate issuer: /CN=4c7594b0214264f06677609bb4aa4779eb1eecad
Certificate serial: 0194BC72E69F798F75EEE766F433668F3142
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: RlERu2riJWKRmPGYqUGwVhMTEfA.roa (hash: w2p8YNRnxQaiCold+0o9++nb5GsSq8cnfNdvqMaxke0=)
2: THWUsCFCZPBmd2CbtKpHeese7K0.crl (hash: 632PQokaWtwtLhlp3xNKa0UIaqzgZIllesvCIoyTJeE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e6:9f:79:8f:75:ee:e7:66:f4:33:66:8f:31:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c7594b0214264f06677609bb4aa4779eb1eecad
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=48a3ecd4e4162cc659d17bb2e9649f04f844503f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:41:ad:05:55:4b:4a:8f:de:d3:8d:04:d1:01:
5a:0b:c6:8b:f6:69:2e:44:17:12:6c:cf:03:30:8c:
b8:38:b0:e8:b2:8a:0a:7e:3d:07:ac:61:7e:74:f5:
51:87:a9:22:54:bd:b2:97:d1:0a:e1:bf:0a:3c:58:
87:4f:f4:59:0a:8a:70:eb:fe:62:64:fd:95:3c:e7:
bd:28:ca:64:a0:41:7e:e7:13:05:18:1c:f3:c7:17:
68:06:ff:6f:e2:01:be:1d:fe:30:34:ee:bf:87:33:
6f:81:2f:4e:3d:80:17:3d:4f:85:e6:5d:d1:a8:40:
65:57:9c:6c:bc:21:d1:a2:9d:91:68:e1:6a:aa:13:
c5:6c:2b:3d:9d:c8:7f:9f:1e:a9:62:91:7d:6e:5a:
35:3c:b3:39:be:1b:af:8c:90:cd:f7:fd:33:eb:bd:
8a:35:f6:f9:94:98:eb:31:a7:92:70:ae:63:08:c1:
c8:ca:9a:bf:db:8a:40:e0:25:82:28:84:d3:36:fb:
e4:ba:09:31:92:80:b5:a3:d2:75:6a:30:65:5c:bc:
ad:b8:71:a9:57:6e:d2:75:37:79:fe:58:ea:a8:c3:
a1:27:ed:7b:b1:c4:8e:69:34:00:e5:3d:88:b2:b4:
4b:0d:fe:dd:db:f8:45:af:b4:e3:d4:db:ea:46:ae:
01:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:A3:EC:D4:E4:16:2C:C6:59:D1:7B:B2:E9:64:9F:04:F8:44:50:3F
X509v3 Authority Key Identifier:
keyid:4C:75:94:B0:21:42:64:F0:66:77:60:9B:B4:AA:47:79:EB:1E:EC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/THWUsCFCZPBmd2CbtKpHeese7K0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b80b47-a7bc-4eb4-8be6-b130bf76fe10/1/THWUsCFCZPBmd2CbtKpHeese7K0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:14:ae:0a:11:c6:d1:86:eb:17:e9:2d:a4:c3:81:e3:7b:5e:
79:ae:c5:6d:0c:bf:fa:72:f4:cc:53:f7:59:b9:72:68:f0:ef:
cb:01:e1:06:3f:7e:d4:c4:c9:fd:9f:0e:50:8c:fc:57:ce:42:
ed:8f:31:29:11:8f:97:6d:62:1e:35:72:d2:fe:21:e1:2a:07:
a7:4d:b2:ba:3d:74:92:5c:5c:2f:7f:e4:19:44:dd:ed:38:cc:
8a:c1:9f:8c:48:de:92:05:95:3f:97:36:65:67:8b:7f:51:d6:
f2:f4:09:ed:32:d9:5f:2d:3a:ee:3b:0e:07:d5:c5:75:14:0a:
9f:52:ab:b9:4b:f9:4e:a9:cc:b3:c4:fa:39:8c:2d:70:32:f3:
86:70:f0:77:05:76:23:28:05:87:2c:f6:e5:e0:15:a4:4e:3b:
ca:e7:a3:1d:cf:e3:3b:fa:58:cd:ab:3e:78:4f:c6:b8:4a:da:
1d:1d:7e:84:ac:e6:a5:51:b6:ef:03:2f:64:99:91:b7:81:0f:
15:e6:91:04:66:73:d8:49:24:c4:d5:5d:ab:54:ed:db:e6:1f:
95:56:47:aa:20:62:ba:8e:aa:bd:8d:c0:2c:5d:c9:e7:6b:38:
d4:df:b7:c7:c1:00:fb:3e:7b:98:b9:35:5a:e5:b7:e8:69:59:
22:c7:8d:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:28 2025 by rpki-client