Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
File: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft (raw, json)
Hash identifier: 3VzguTr5B6Piw2toOUxQL74t9GzdE7I94d4w+bX2lBY=
Subject key identifier: 3D:2D:68:11:93:B8:E4:16:20:DB:D3:21:A9:79:C5:C7:21:17:87:6B
Authority key identifier: 4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
Certificate issuer: /CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Certificate serial: 0194BCA986D59DAF4CB5ED08324D09E28F6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
Manifest number: 0672
Signing time: Fri 31 Jan 2025 14:00:14 +0000
Manifest this update: Fri 31 Jan 2025 14:00:14 +0000
Manifest next update: Sat 01 Feb 2025 14:00:14 +0000
Files and hashes: 1: TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl (hash: Am7gKBnYwuN7N3uoV3qtnhqdpYltNjES/vwvspYtTEw=)
2: jkZUIqdvougoYWTFFIYTmQ_0c3I.roa (hash: FvJzMAch2URVowys51R40ZrFG4sKpVwuQwZnFuBLSQ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:86:d5:9d:af:4c:b5:ed:08:32:4d:09:e2:8f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9fbe4756028fa4187a399595fac65c3c1c43c6
Validity
Not Before: Jan 31 14:00:14 2025 GMT
Not After : Feb 1 14:00:14 2025 GMT
Subject: CN=3d2d681193b8e41620dbd321a979c5c72117876b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:50:8d:cd:ff:33:d3:ea:c6:de:f2:63:4e:82:
6a:7a:08:30:4a:7a:e2:77:60:33:cb:56:c1:84:8d:
22:64:67:dd:fe:9d:f5:87:b5:55:99:ce:0d:4e:d5:
31:ce:1a:da:78:13:f1:b0:f1:cc:d9:3c:da:e4:8d:
32:2e:41:10:e1:fb:27:96:dd:a7:57:0e:1d:8c:be:
12:1f:ed:b0:e8:f3:af:a9:a7:76:a0:09:60:3e:5c:
70:57:4e:76:b9:68:eb:17:5d:87:82:4b:ac:c1:4b:
99:8e:4d:47:69:19:ef:aa:c1:04:ce:d0:46:ef:e0:
ba:55:11:9b:de:4b:27:70:05:fd:97:95:99:c8:21:
4f:48:52:4e:4f:84:79:db:5c:c2:27:c9:ac:2f:09:
9e:1a:6b:15:b0:dd:37:3c:11:77:a5:6a:90:98:b4:
3c:0d:cd:31:59:bc:0f:c9:13:72:cc:cb:91:7a:f4:
50:36:e6:80:23:de:f8:81:77:c6:bb:f9:22:a2:d9:
10:95:f5:3b:21:72:bb:e3:15:6e:f0:ad:70:13:7c:
d1:da:0f:d6:07:e4:7c:38:cc:b3:96:a9:79:64:6c:
e5:61:c0:0c:8c:9d:ce:28:fe:27:52:74:79:4a:fb:
6f:e4:67:11:59:91:51:76:bd:49:1c:8b:9d:57:62:
aa:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2D:68:11:93:B8:E4:16:20:DB:D3:21:A9:79:C5:C7:21:17:87:6B
X509v3 Authority Key Identifier:
keyid:4C:9F:BE:47:56:02:8F:A4:18:7A:39:95:95:FA:C6:5C:3C:1C:43:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/b5fb58-928c-438f-bcef-858f8aca323f/1/TJ--R1YCj6QYejmVlfrGXDwcQ8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:cd:b4:6e:d9:f0:a5:7c:f1:25:ef:93:fe:85:14:a9:fe:c9:
71:02:5c:83:81:80:df:e8:1d:2a:15:bc:0b:40:cf:f6:fb:18:
c4:2c:52:75:47:1e:bf:62:e0:6d:0a:89:4a:56:83:49:7f:88:
78:6a:f5:ef:c2:4b:4e:9b:1c:5e:fa:df:c2:fc:0c:48:1a:a3:
97:af:d0:7f:a1:bd:7b:97:48:9f:c1:1b:17:7b:ae:50:57:1d:
ca:b0:77:13:55:9f:72:a6:8b:71:e5:98:44:c0:5e:53:a1:51:
19:a0:8c:ca:02:27:c0:20:a4:e6:f2:67:0b:77:6e:17:9c:76:
a2:52:06:53:fc:bf:fa:db:c1:e6:1c:aa:f2:30:06:ab:cb:d6:
9e:9f:78:45:14:ab:38:6f:45:8c:97:bb:76:45:32:da:bf:4b:
c2:3a:67:70:78:87:3f:5d:cb:29:21:b9:39:74:18:6b:bb:68:
4d:6d:2d:22:17:68:52:bd:c4:1d:be:bf:44:3d:a9:e8:49:7c:
91:d8:fe:db:f7:c9:17:17:27:fe:45:63:98:a6:b0:62:82:e9:
f2:18:43:c6:0e:f7:01:2a:33:41:4a:da:ff:f6:49:c9:4a:8c:
86:b2:d9:81:76:ea:71:e8:05:a1:b6:92:ff:1a:22:8a:bc:d4:
7c:31:b7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:42 2025 by rpki-client