Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
File: TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft (raw, json)
Hash identifier: XDMdMntT3SPgva5gjPIr5Qi5MrCzA4AZs2Q5xbQorl0=
Subject key identifier: 48:02:C8:06:06:65:05:14:24:39:9C:F1:02:C6:B0:EF:34:D8:93:65
Authority key identifier: 4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
Certificate issuer: /CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Certificate serial: 0194BD4EA4CC7D7BF567A717F3A4A645F88E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 17:00:35 +0000
Manifest this update: Fri 31 Jan 2025 17:00:35 +0000
Manifest next update: Sat 01 Feb 2025 17:00:35 +0000
Files and hashes: 1: TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl (hash: ZLL1o6Y27lmIyPDGtbYxADIvrtHeRZVZudcHU1sQHxw=)
2: tbYt8CsTUjvQCfPmxRHFnIb3gng.roa (hash: Wb48gd6AG1NXeN5IWX1LXBtrKALPG/kRfuLTU0uD7B0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:a4:cc:7d:7b:f5:67:a7:17:f3:a4:a6:45:f8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c61d118479b5222ef0f864167cac5b4c07cc219
Validity
Not Before: Jan 31 17:00:35 2025 GMT
Not After : Feb 1 17:00:35 2025 GMT
Subject: CN=4802c8060665051424399cf102c6b0ef34d89365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:48:23:08:55:d9:90:2c:0a:73:cf:eb:34:34:
9f:07:b7:f3:67:09:d2:f0:b5:1a:5a:19:fb:6d:1a:
b5:c4:ac:c7:a7:1f:b1:85:44:9e:53:f5:9d:14:97:
de:4e:aa:fa:44:36:e5:37:86:91:6f:46:d8:49:ec:
13:e4:fb:b5:60:5d:d1:f3:07:ca:18:68:16:5f:49:
28:ef:e0:3e:f4:f6:f8:ef:78:d4:d2:23:02:7e:00:
c0:eb:a2:43:5f:13:48:00:b5:b9:6e:bf:57:80:74:
1a:9a:ad:f9:4b:ac:0f:3c:df:cc:de:cd:07:8f:58:
37:5b:09:5a:4c:d7:eb:7b:81:28:bb:fa:be:58:02:
03:8c:78:4a:f9:de:a9:a4:8e:1a:43:dc:fe:ee:cc:
a9:c4:82:06:84:40:72:c3:3c:84:94:d5:ce:87:ef:
8b:ec:6e:66:42:ac:e5:e6:fe:99:ef:24:95:8d:6d:
b5:58:05:70:2e:67:d2:ff:d1:d0:fe:1c:4e:0c:0e:
29:f3:2c:c8:a3:64:16:a4:77:a9:f2:9b:c2:3f:62:
50:41:f7:96:a2:25:60:6c:f6:83:e4:3f:d4:61:c5:
fb:a9:7b:e2:3b:2d:b9:9e:db:08:24:2b:21:32:5a:
b0:01:5f:36:b0:de:80:d9:12:1b:d3:fd:90:fd:f3:
ad:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:02:C8:06:06:65:05:14:24:39:9C:F1:02:C6:B0:EF:34:D8:93:65
X509v3 Authority Key Identifier:
keyid:4C:61:D1:18:47:9B:52:22:EF:0F:86:41:67:CA:C5:B4:C0:7C:C2:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGHRGEebUiLvD4ZBZ8rFtMB8whk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6e9dfd-ce47-4e61-a315-e5aa74700f9d/1/TGHRGEebUiLvD4ZBZ8rFtMB8whk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:0d:3b:fc:6d:99:45:f9:33:4c:44:1d:9c:11:ea:67:46:d4:
81:b5:77:fd:ad:f0:95:8f:54:1a:13:7d:83:bc:1c:30:1d:21:
09:b5:5e:fe:32:2d:84:08:fc:1a:ca:f2:53:4e:9e:02:96:b8:
c4:ea:74:e4:56:d8:3f:a5:79:3c:ce:71:c3:38:fd:d7:d5:c1:
83:58:f2:5e:37:91:54:67:3f:22:f9:e0:17:d9:c8:64:49:1a:
cb:59:a7:4b:08:65:38:e1:da:a3:58:5f:fb:fe:29:87:0d:02:
c2:1b:95:49:b3:40:2a:66:a2:d8:ad:15:12:e4:fb:6d:10:82:
25:9f:1e:87:41:ac:4a:8b:b5:bd:bb:bd:86:7e:e4:cf:9b:c1:
71:93:f2:7b:31:fe:6e:55:69:3d:63:92:c0:55:59:a2:43:13:
ea:69:8a:7f:12:5f:b5:a6:d3:eb:33:38:bf:41:35:34:65:dc:
f9:08:6f:25:60:d6:b2:95:e0:41:b3:d2:00:f3:11:53:75:cf:
4d:75:e0:59:97:b6:c3:d3:5d:4f:3f:2c:bb:e2:b4:5d:e0:2e:
9d:76:9e:34:41:4b:b3:e3:67:72:68:49:fd:f0:63:c7:9e:ac:
5f:02:7a:69:6a:1b:85:ce:1b:ed:82:da:a8:ca:44:7d:a0:4f:
7d:20:bf:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:01:36 2025 by rpki-client