Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
File: TgTgpximE5qcZfDUiGu4JxTaZoI.mft (raw, json)
Hash identifier: fkNqq//aX/BFCnvadx38UeOOve4ddVyMAjX4wvYQmXU=
Subject key identifier: 7B:C0:E5:5A:41:B0:43:52:98:E1:49:55:C6:77:94:64:AA:57:F2:8C
Authority key identifier: 4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
Certificate issuer: /CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Certificate serial: 0194BBCDC1D711F42BB452F787AD1DE82022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: TgTgpximE5qcZfDUiGu4JxTaZoI.crl (hash: yeWGd2XAMAXo6Nq+0YwmwOvl2NBd8a3O7cuDgHteg5Q=)
2: _DVbXJIlrc4WueVJodx5_dUQQGU.roa (hash: qLnLYdx/R1C59idEfb9lAoJsSeK5qnRHJhL7xW0LEkE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c1:d7:11:f4:2b:b4:52:f7:87:ad:1d:e8:20:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e04e0a718a6139a9c65f0d4886bb82714da6682
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=7bc0e55a41b0435298e14955c6779464aa57f28c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:55:ad:84:84:45:b6:91:3f:fd:20:d8:18:2b:
78:86:b0:00:4f:5d:ab:d1:51:23:ee:b8:f5:04:15:
05:3c:dd:7f:6f:c7:ab:b2:c4:19:55:05:61:80:73:
06:41:5b:4e:b0:c0:e0:b1:21:27:03:9a:87:44:57:
a9:41:42:ce:4b:a9:b0:3e:8a:76:88:56:fd:27:ff:
37:5a:89:5f:cc:da:40:84:ef:11:de:12:df:45:09:
8c:75:8f:fb:72:f2:c0:68:fd:4d:3e:03:1a:e7:1f:
43:1e:a1:ef:f3:47:90:09:d3:f5:ed:50:29:d5:d1:
c2:e8:8e:ed:18:67:d9:69:06:29:84:28:d4:fd:61:
c4:94:90:2a:0a:a1:cc:1d:88:a0:2d:84:99:40:ca:
08:1f:fd:12:a2:83:76:5d:de:83:b6:50:f5:59:58:
8e:1f:c2:1c:57:b2:6a:76:25:51:d9:17:66:2e:fc:
4a:bc:21:a8:88:10:b0:f7:61:10:0a:9d:eb:44:fc:
4c:39:96:db:c3:ca:f8:f0:9d:7f:1d:81:f3:a9:e6:
b1:76:ed:a9:c3:fb:15:f6:6c:69:80:47:a3:fd:ae:
52:f5:60:77:8e:40:2d:4f:ba:2f:4a:36:04:d7:4f:
69:21:0c:f7:9c:10:73:98:d9:bc:cd:fa:6e:78:af:
f7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C0:E5:5A:41:B0:43:52:98:E1:49:55:C6:77:94:64:AA:57:F2:8C
X509v3 Authority Key Identifier:
keyid:4E:04:E0:A7:18:A6:13:9A:9C:65:F0:D4:88:6B:B8:27:14:DA:66:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgTgpximE5qcZfDUiGu4JxTaZoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/4afeab-02b9-4ebd-bfa2-8e80b496a03e/1/TgTgpximE5qcZfDUiGu4JxTaZoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b3:18:5f:28:17:35:f7:58:3d:13:ad:92:2a:73:ef:72:05:
1f:fc:38:83:ad:e8:2b:80:28:91:ff:11:33:30:61:a9:fa:33:
7e:1f:25:d4:96:4d:19:b9:d6:6e:07:83:8e:11:79:54:7e:d0:
76:ec:17:d5:5c:be:c8:c9:c9:9a:fd:8c:ce:cc:6c:22:08:00:
19:13:3b:bd:ea:f0:b2:33:4d:0f:22:83:10:6e:08:6b:36:a2:
d5:ab:a0:9b:c8:14:6a:f8:f2:28:e0:cc:b4:32:ee:2b:e5:36:
42:70:8f:e9:4a:3b:c6:91:94:cb:f4:d2:8e:63:af:27:93:5c:
d4:24:ca:9a:9d:27:0f:c2:fc:8c:f4:db:31:d9:71:aa:68:24:
a8:fc:65:1b:10:b1:43:02:9d:09:80:83:f5:de:7f:b2:41:44:
63:6a:aa:56:a7:25:87:d7:a8:cb:03:fe:54:2e:01:26:1a:7c:
87:3c:af:24:96:f0:78:84:d4:d0:81:6f:50:d8:60:1d:bb:47:
9a:c3:f9:45:93:2c:9e:a1:60:d2:16:6c:8b:35:99:ac:37:57:
61:74:81:aa:a4:1d:db:7f:7a:02:99:c3:4f:8e:84:eb:af:6a:
8c:df:e9:cd:16:90:82:10:63:d0:b4:88:ce:ac:43:90:7a:47:
29:69:a0:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 14:31:05 2025 by rpki-client