Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
File: TON_cckzv4JxGMY8B3dN6YZF0Bk.mft (raw, json)
Hash identifier: a9lLYsg1gRTFSceH3QNxi1ceQShCvuTcYGkjOpwFAtI=
Subject key identifier: F8:6D:2B:10:7C:87:FF:66:91:CC:64:33:AC:D4:9D:07:E0:C3:87:33
Authority key identifier: 4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
Certificate issuer: /CN=4ce37f71c933bf827118c63c07774de98645d019
Certificate serial: 0194BC04A512BD5A72DBE109C4F0B8986CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
Manifest number: 1413
Signing time: Fri 31 Jan 2025 11:00:08 +0000
Manifest this update: Fri 31 Jan 2025 11:00:08 +0000
Manifest next update: Sat 01 Feb 2025 11:00:08 +0000
Files and hashes: 1: TON_cckzv4JxGMY8B3dN6YZF0Bk.crl (hash: q5bI9mQWDR1KgxL6K5cCbZPgH4WcaONDopmgIHLKvCg=)
2: koXyrmlL8TV6kv-ynNvnYugzfR0.roa (hash: GOGOtosuaVGe4tHk7fwfyT9PGqFfVztVqM7H2kaOye0=)
3: qV_9AVxPWae0y5-fLZuto-85kDg.roa (hash: OSp098/Lccrx91ZNUKdEfBZVG37EvXYrZYRNYQ5KXq4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a5:12:bd:5a:72:db:e1:09:c4:f0:b8:98:6c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce37f71c933bf827118c63c07774de98645d019
Validity
Not Before: Jan 31 11:00:08 2025 GMT
Not After : Feb 1 11:00:08 2025 GMT
Subject: CN=f86d2b107c87ff6691cc6433acd49d07e0c38733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e8:0d:33:09:34:e1:0e:1c:ae:53:60:53:d4:
a6:03:62:19:a9:b8:98:23:64:bb:ec:d0:0d:00:4e:
3b:8e:ac:18:d8:24:34:c4:9f:ef:61:b6:5b:74:7b:
ee:aa:b0:6c:64:a4:15:b5:49:3a:bc:72:a6:43:94:
30:87:fe:27:d4:68:b0:72:bf:f6:d8:d8:dc:54:88:
56:02:3e:b1:d3:4e:00:a5:ef:8c:d9:dd:93:b2:a9:
5d:b4:55:57:d5:92:8c:bf:4e:10:96:62:dd:a8:32:
51:d7:f5:19:46:14:c8:f3:2b:0f:2e:74:ba:11:b1:
67:5b:0b:2e:f0:89:41:54:ff:23:39:6e:89:0f:26:
53:6b:be:1d:87:09:c5:1b:53:10:54:de:70:11:b8:
67:ed:93:10:bf:7d:fc:29:70:f0:29:99:48:d2:ca:
b5:93:d2:7d:21:d3:86:eb:9c:7d:66:88:ad:7c:ac:
cb:f1:d4:ed:4f:c0:d5:c3:0d:4c:92:fc:34:66:aa:
62:48:9e:a4:78:4f:57:b6:5d:6a:88:39:d4:9a:bd:
0b:21:92:ac:d4:04:5f:49:ee:54:22:08:60:bd:20:
58:30:15:dd:25:21:ef:c1:88:c2:fa:83:34:b4:da:
2e:e1:9c:43:73:bb:0e:5e:ad:7c:72:9c:c6:b1:ce:
a0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:6D:2B:10:7C:87:FF:66:91:CC:64:33:AC:D4:9D:07:E0:C3:87:33
X509v3 Authority Key Identifier:
keyid:4C:E3:7F:71:C9:33:BF:82:71:18:C6:3C:07:77:4D:E9:86:45:D0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON_cckzv4JxGMY8B3dN6YZF0Bk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/efdfc9-da3a-46bd-8300-e1c8a4febdee/1/TON_cckzv4JxGMY8B3dN6YZF0Bk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:1e:49:63:26:6e:e9:30:50:69:4d:98:17:82:b6:9f:27:aa:
16:8a:c3:ef:93:db:20:98:4c:fa:71:87:1f:9d:c6:89:9b:9c:
be:66:9f:fd:d1:35:a3:75:99:e8:8c:4f:0f:78:83:95:e9:e2:
3b:7e:69:30:bc:60:e3:38:bf:88:79:1c:01:73:b8:c1:c9:55:
92:95:e6:96:ef:0b:23:c7:16:96:20:0e:02:39:a4:50:2a:ff:
fc:9c:4f:e5:99:9e:16:45:70:26:2d:93:e0:89:1b:d2:ad:63:
6e:7f:99:ab:87:55:d5:e9:8e:74:8c:bc:1d:3b:c8:b4:3b:58:
8a:79:0b:7e:50:b6:49:4a:4f:fc:0a:2d:4a:fb:79:af:2a:d5:
0b:8a:99:53:a3:72:3d:c0:d0:3f:9b:17:1f:8a:2d:eb:c0:be:
57:bb:8b:f9:39:30:0c:b5:30:27:27:4c:ef:94:20:37:93:95:
cc:4b:8e:45:5d:b0:96:9f:8c:91:a6:7c:c6:e9:e9:25:c7:e8:
d1:16:20:4e:65:19:5f:24:33:e8:db:6b:ca:c7:6d:67:f3:7c:
2c:a4:40:15:73:35:37:ba:0d:f4:9d:3d:6f:28:fc:3f:8c:75:
39:49:24:cb:48:f3:43:e5:8f:df:21:60:ee:4f:b9:3c:00:44:
bc:58:4e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:51 2025 by rpki-client