Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
File: TTxfCqFBARzi2_GMzOqsjSOoAlM.mft (raw, json)
Hash identifier: tUwvRH8iX+7UYYt1UySL+u7iLQL9AX0qDdH5wfQwutk=
Subject key identifier: DF:57:54:E8:8F:BF:9F:BB:47:09:58:9A:93:59:C3:A7:DF:26:B8:EC
Authority key identifier: 4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
Certificate issuer: /CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Certificate serial: 0194BC730BF5A2403C9616300D97A5EECA86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
Manifest number: 0156
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: TTxfCqFBARzi2_GMzOqsjSOoAlM.crl (hash: xL9M1WfBkhzXrGiKo9UsySnUzUQQ3igbaaVJOhNkZV0=)
2: VzuF2DppIrspDzJ85GPpog256VM.roa (hash: NVhHykKnaNaKUFenioMV2s+C+yHI/RstE5ooTmdayhs=)
3: gl57ADSHY0k4ndDK_OjTyc2Vj-w.roa (hash: K2iUKBC94qqs+lcuU9alkOi5wrj2IpvPW1nPAtFGI+M=)
4: wVbnrxwKxuyFCykAZfTxIk8usp4.roa (hash: nUg8btnlBOx76JKnTAelqbIAdPi5nKQqhhSAdUCbOU0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:0b:f5:a2:40:3c:96:16:30:0d:97:a5:ee:ca:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3c5f0aa141011ce2dbf18ccceaac8d23a80253
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=df5754e88fbf9fbb4709589a9359c3a7df26b8ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f9:44:e2:b8:1c:a5:97:60:06:4a:4f:ca:ce:
87:89:cf:b5:19:fb:26:e9:bc:a3:85:7e:5e:81:8e:
20:db:f8:c5:b7:f9:68:48:e8:b5:bc:26:b6:36:7b:
f4:9d:fd:4e:9e:df:65:d8:fb:91:78:13:54:6d:a7:
be:04:a1:62:50:e9:5e:98:2d:5d:2f:6d:86:8c:61:
3a:eb:00:08:df:61:77:d8:87:1e:55:24:81:0c:e3:
f7:f1:79:46:f7:f9:ea:14:24:69:b0:4e:67:b6:e7:
da:d1:50:98:96:24:d1:84:ed:32:0a:22:ad:3a:a4:
80:a6:6a:c6:8a:65:1c:16:4c:ab:66:2b:17:c7:3c:
81:c8:19:47:87:76:c0:4e:2a:c4:4d:95:b4:c1:81:
66:e1:b3:45:b7:de:7b:32:e7:8e:34:5d:e9:03:0e:
48:d4:58:22:7f:6e:e9:cd:6f:53:70:03:93:19:93:
d7:d8:db:d1:1a:07:40:11:1f:28:3f:b3:ed:d1:7a:
e5:c6:36:79:ff:5b:02:2c:d7:b6:8c:a4:44:39:9f:
f7:98:17:65:fe:51:2b:06:2d:1a:c3:fb:92:e4:a6:
f3:01:0c:3f:52:4b:f9:64:07:6c:4a:a3:e9:76:83:
38:de:e4:c5:c8:d1:e2:03:b7:e2:f8:40:f9:17:f0:
bb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:57:54:E8:8F:BF:9F:BB:47:09:58:9A:93:59:C3:A7:DF:26:B8:EC
X509v3 Authority Key Identifier:
keyid:4D:3C:5F:0A:A1:41:01:1C:E2:DB:F1:8C:CC:EA:AC:8D:23:A8:02:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTxfCqFBARzi2_GMzOqsjSOoAlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/2d067c-df72-4040-bc43-19397fc76fec/1/TTxfCqFBARzi2_GMzOqsjSOoAlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:70:c1:61:15:e8:c4:fb:f6:4e:3f:b5:83:74:f2:89:c0:59:
c0:1b:5d:75:7b:3f:76:c6:6b:28:dd:a7:c9:29:5f:97:24:fe:
d7:d1:11:6f:65:4e:2d:7c:b8:82:9e:b8:49:cd:58:28:e1:08:
64:ef:dc:5c:3c:ea:28:7f:69:19:b2:22:fc:c5:60:c0:a1:fd:
c2:fb:05:b9:c0:3b:2e:8f:78:e4:f0:3a:7d:47:1b:a0:31:cf:
67:4c:9e:58:32:93:33:5e:ec:7b:6d:09:d9:f5:bb:c2:3b:2d:
7e:a3:14:6e:8e:49:a6:da:92:7c:a8:fc:77:c9:b4:09:93:17:
aa:ff:ea:8d:be:6e:05:3e:f8:ea:25:75:27:d1:f6:a4:21:b8:
69:c4:06:e9:b0:81:fe:7f:3d:80:6d:86:36:17:df:ca:73:36:
56:e0:dd:27:0a:86:c4:2c:8a:3c:8b:aa:e4:41:6a:b5:ac:90:
d8:7d:52:c1:e8:af:88:45:14:2d:e3:0d:fe:bb:ea:b3:a0:c7:
52:7e:7d:bd:55:eb:05:c8:5c:a7:e4:aa:28:08:58:8c:f4:64:
38:a3:b6:63:ec:f5:13:34:f2:b0:17:89:a6:d1:2b:b8:c6:b4:
8e:df:7d:57:53:95:41:70:cf:a2:ce:c1:85:0c:30:49:6c:50:
77:38:dd:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:04:13 2025 by rpki-client