Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
File: TNR7i4qp-8zP89UHgU_HRGSiq_A.mft (raw, json)
Hash identifier: 8DyyEG2XmmpzHSj8b3r/VwEpR3zOUG/rJgh7TxPdkP4=
Subject key identifier: EE:39:12:39:87:51:63:26:5A:52:F1:36:51:BE:DE:F3:7B:0C:C0:88
Authority key identifier: 4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
Certificate issuer: /CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Certificate serial: 0194BC3CA7DC933203355EF4AE9FE7DD6BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
Manifest number: 0B1F
Signing time: Fri 31 Jan 2025 12:01:19 +0000
Manifest this update: Fri 31 Jan 2025 12:01:19 +0000
Manifest next update: Sat 01 Feb 2025 12:01:19 +0000
Files and hashes: 1: TNR7i4qp-8zP89UHgU_HRGSiq_A.crl (hash: 8wW+RegKY8MXECFvYWxhW39nG0xeg/kNGGoz77xVOc4=)
2: zYBlb8-4iJi2Xsk5poztWDw6ukY.roa (hash: veXHQ0WmE+2KQkfYtO+EXvFrciAIGT+yWdclt50BTQA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:a7:dc:93:32:03:35:5e:f4:ae:9f:e7:dd:6b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd47b8b8aa9fbcccff3d507814fc74464a2abf0
Validity
Not Before: Jan 31 12:01:19 2025 GMT
Not After : Feb 1 12:01:19 2025 GMT
Subject: CN=ee391239875163265a52f13651bedef37b0cc088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:62:a4:10:82:44:91:b9:b3:12:90:a7:1c:e7:
65:1c:c9:04:2a:a7:e3:d7:8f:81:3e:74:d5:a3:53:
be:89:91:bf:54:62:7e:1f:75:61:8a:2c:43:46:28:
47:87:cb:20:47:47:dd:dd:fd:43:f3:ab:39:8b:1b:
64:22:c0:86:77:99:97:2c:ae:ce:1f:22:8f:d1:bf:
be:d3:71:bc:5f:47:00:8a:0e:e5:a2:a3:96:79:a3:
c0:2f:52:95:34:90:e8:39:2e:e3:d0:8c:fd:57:28:
7e:6a:70:01:e3:d5:1e:02:51:12:5b:dd:18:40:74:
a6:d2:46:67:01:48:62:9b:b1:ff:ab:f7:45:9a:d4:
22:b9:fe:d7:cf:ae:1d:b5:31:0a:5b:9a:bd:1d:86:
85:dd:a9:2c:0a:76:fb:3e:ef:42:b6:cd:d8:02:f1:
a2:a5:4f:4a:03:7d:7d:68:7a:56:d8:bf:ab:1d:51:
f8:68:6b:33:6d:30:6b:b1:5f:e4:1d:f3:7a:25:10:
df:68:f6:e8:b7:2d:ed:0d:7a:17:7a:85:58:e1:ae:
be:e9:c2:87:09:88:b2:72:b0:26:98:b5:f5:fd:19:
ee:08:76:5c:f8:c0:6a:5e:a9:1f:ce:cb:48:64:00:
42:9c:0a:b1:e3:70:b5:06:96:a2:b8:37:48:1b:f0:
44:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:39:12:39:87:51:63:26:5A:52:F1:36:51:BE:DE:F3:7B:0C:C0:88
X509v3 Authority Key Identifier:
keyid:4C:D4:7B:8B:8A:A9:FB:CC:CF:F3:D5:07:81:4F:C7:44:64:A2:AB:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNR7i4qp-8zP89UHgU_HRGSiq_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/5ca294-897b-4e49-a9c7-bc48b41f498b/1/TNR7i4qp-8zP89UHgU_HRGSiq_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ae:d2:69:84:ed:5c:3e:fb:2c:09:db:1d:33:d2:38:40:a8:
ff:8d:97:f8:98:73:d7:3f:bc:1b:a7:02:68:a5:e3:7c:f5:d1:
5f:f0:fc:39:19:4f:20:52:e0:18:b6:fb:f0:8a:7e:9c:ff:11:
a6:20:40:7e:7a:4d:f6:a1:33:80:74:7f:e6:9b:71:e1:41:bf:
61:fd:65:99:2d:d9:c4:ad:c7:7d:1d:a1:1c:79:f1:41:8c:05:
fb:dc:f6:c9:2d:09:93:12:47:68:7e:60:96:cb:14:0c:ae:1e:
0a:14:a2:b1:31:99:8d:28:c5:e0:2e:d2:a1:cd:03:bc:23:c8:
b8:f1:89:ff:3e:29:11:c8:7d:79:3a:32:55:2f:fc:62:13:2e:
bd:47:ea:bd:a1:42:47:c7:a9:d3:27:42:a6:db:fc:e2:51:be:
a8:56:bb:2c:91:00:ec:b4:f2:e3:49:86:91:50:dd:b9:65:f8:
f2:aa:11:4f:31:b7:52:5e:4b:f5:17:3c:95:48:fb:88:67:2f:
0b:c1:f8:8f:4f:06:17:a8:fe:ba:51:47:f5:5a:57:b4:5c:eb:
e8:a0:23:c5:34:f6:9e:7e:ba:20:3c:22:cf:30:c7:92:bb:25:
20:e9:2f:d7:9f:4b:4c:07:78:2a:37:ef:3e:09:81:c9:d6:54:
04:8b:0d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:19 2025 by rpki-client