Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
File: TPgIAsZXmk1KEGCNz5LprOmQWxY.mft (raw, json)
Hash identifier: fOeWIwc2ajSdEk0aV0Nm3/fjqCRo5Wd9L0oJs5641ac=
Subject key identifier: C7:79:55:CA:1B:C5:20:DF:27:47:07:C7:82:DE:59:55:FB:DE:36:C8
Authority key identifier: 4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
Certificate issuer: /CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Certificate serial: 0194BC3C9484081FCACE7B537B9720AC5830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
Manifest number: 02E7
Signing time: Fri 31 Jan 2025 12:01:14 +0000
Manifest this update: Fri 31 Jan 2025 12:01:14 +0000
Manifest next update: Sat 01 Feb 2025 12:01:14 +0000
Files and hashes: 1: FXVByNPxdRkMO-o6GsvvheK9loQ.roa (hash: cJsMagby7QEs7crG2RTXoRPWZv4X7cM8ggqQkmQ3WIs=)
2: TPgIAsZXmk1KEGCNz5LprOmQWxY.crl (hash: UNkU37Z3a0erYcZN9knYtG6wouWLbsKxorPmzbLDhCU=)
3: lUkUA-Czwa2okiPJT7Kq8pTW_Yo.roa (hash: fS+41ubfx3zCs5hYx7i3kz5j50EsoWw6NrXQjh9DDSs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:94:84:08:1f:ca:ce:7b:53:7b:97:20:ac:58:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf80802c6579a4d4a10608dcf92e9ace9905b16
Validity
Not Before: Jan 31 12:01:14 2025 GMT
Not After : Feb 1 12:01:14 2025 GMT
Subject: CN=c77955ca1bc520df274707c782de5955fbde36c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d8:1b:f4:27:eb:49:dd:e8:b3:ac:7e:11:a0:
84:3d:f8:26:ba:27:f8:da:ab:9a:7f:3f:39:1d:41:
03:63:00:d6:7d:39:48:2d:f3:91:6d:4c:72:4c:a4:
db:be:8b:3a:87:40:ce:09:90:2f:bb:24:bc:61:ce:
cf:51:06:23:75:82:c9:47:6d:a2:0b:37:4a:d4:b5:
2f:2b:d0:c0:8a:a0:63:17:80:12:9a:ec:ef:90:fe:
55:d3:87:61:9f:91:72:2e:88:4a:6f:78:e6:92:8c:
03:27:3d:9d:56:2f:ae:9a:71:03:0c:56:6b:92:72:
2d:9a:8c:b6:1a:2b:18:fd:a3:e3:27:45:6c:d4:58:
8b:84:49:a8:49:bf:ea:80:13:91:f4:27:16:b1:5c:
c2:87:9b:bc:b5:1a:43:f1:87:d2:94:a7:d3:f7:2e:
53:a6:7c:3c:40:81:d5:c7:fa:34:c7:7a:84:af:36:
f9:24:80:ad:2f:60:7a:3b:ec:5b:fa:bd:cf:e2:80:
43:8b:97:a0:c8:61:64:25:e6:c6:4f:27:8d:ef:31:
b3:1a:05:68:eb:d4:d3:b3:18:e2:fa:f5:27:07:24:
c9:5e:da:4d:e6:4a:9d:ce:56:db:41:13:ba:db:55:
fc:dc:97:b9:e8:df:07:18:f5:94:50:04:04:3e:e1:
b0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:79:55:CA:1B:C5:20:DF:27:47:07:C7:82:DE:59:55:FB:DE:36:C8
X509v3 Authority Key Identifier:
keyid:4C:F8:08:02:C6:57:9A:4D:4A:10:60:8D:CF:92:E9:AC:E9:90:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPgIAsZXmk1KEGCNz5LprOmQWxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/398bbb-184f-4851-b2a0-91f49d8d115d/1/TPgIAsZXmk1KEGCNz5LprOmQWxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d7:bc:6f:73:47:b0:23:44:e3:cb:43:5b:cc:82:de:b8:e4:
48:a2:cb:1c:15:8d:1c:55:99:53:8d:6a:c4:43:8b:25:62:21:
54:2a:6a:12:ec:30:42:0b:e5:c4:51:e0:5e:c5:d2:b8:8e:d5:
fd:3b:3b:b9:8c:d1:d9:9b:d9:f2:c0:21:61:dd:8c:d9:71:d2:
a8:94:23:00:81:4c:fb:4a:5e:9f:30:cf:df:cf:17:eb:68:d3:
de:4f:78:9c:61:7c:f2:66:ed:ad:1f:03:b7:dc:4f:41:fa:c4:
94:b2:9d:be:ef:49:eb:9f:85:ac:9f:7f:93:5d:e9:1a:e1:ed:
40:f5:fd:7c:99:88:f3:17:b5:70:49:ab:ba:b8:c2:30:5b:0c:
cc:72:45:58:78:3e:e4:ac:36:b5:33:6b:84:e8:d5:33:75:30:
36:b2:c3:30:c5:a8:fa:d7:d4:0a:ad:69:4e:c7:ae:d4:40:ce:
72:a7:08:32:31:0b:c7:c3:97:92:da:9b:12:ab:e4:2a:af:59:
dc:8f:37:60:cd:d5:0c:10:c7:66:f7:78:1b:30:ae:a8:bf:99:
77:47:27:13:80:a1:54:00:04:61:3d:64:3c:39:32:2d:22:d1:
99:30:50:eb:a7:09:44:b0:dd:15:18:27:ee:f3:8c:1b:c2:2c:
aa:6a:6f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:02 2025 by rpki-client