Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
File: TJMhPYj6h060Rg4sXPG7GpHakHg.mft (raw, json)
Hash identifier: XbBe93Zve2rSHkI+fuwmJDIiqI8iwCyOO7RHyyYqrCI=
Subject key identifier: 69:E5:55:0A:0B:17:0F:E8:C8:87:A4:BD:B7:5D:B5:38:89:30:2F:10
Authority key identifier: 4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
Certificate issuer: /CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Certificate serial: 0194BCE0C28F493947539129F11C46F99376
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:33 +0000
Manifest this update: Fri 31 Jan 2025 15:00:33 +0000
Manifest next update: Sat 01 Feb 2025 15:00:33 +0000
Files and hashes: 1: Rg6hH-WpB5JizUzL9_m7Rs15AT8.roa (hash: evDadyMTuwtAOSC/b6PGvpRRvlRN1DP+6W56r0BhqXQ=)
2: TJMhPYj6h060Rg4sXPG7GpHakHg.crl (hash: yPmm3mhijiSmHnKok/IjVFuthxpWmPeoVLYlW35m5TU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c2:8f:49:39:47:53:91:29:f1:1c:46:f9:93:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93213d88fa874eb4460e2c5cf1bb1a91da9078
Validity
Not Before: Jan 31 15:00:33 2025 GMT
Not After : Feb 1 15:00:33 2025 GMT
Subject: CN=69e5550a0b170fe8c887a4bdb75db53889302f10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:7f:e6:1f:6b:cd:a4:76:31:8e:d7:a3:bb:0e:
f4:16:e3:02:3d:d6:04:63:23:69:1a:a6:2b:ec:83:
c9:88:55:34:87:0b:07:39:35:29:e8:40:81:18:ec:
33:99:aa:24:77:ff:bb:3c:ae:92:d8:4f:a4:08:6b:
16:51:8f:48:b6:6d:f8:8c:b5:1b:3d:fa:4e:ef:00:
c8:1f:9d:d4:7e:44:b5:3f:8e:c5:6c:1a:87:61:fd:
74:8d:dc:54:c2:61:ba:29:30:52:d8:d5:d2:73:93:
b6:43:ce:51:d3:f1:dd:0d:69:86:4d:94:6f:93:aa:
28:1e:db:9b:28:ab:16:cc:27:d0:20:93:a8:1e:b6:
7a:88:50:b5:19:bd:d8:2a:39:48:97:58:59:8b:41:
ef:92:cd:1e:4f:0a:1f:21:0a:e8:a0:b0:c5:67:ee:
36:8b:84:a1:68:74:5c:d8:bc:3d:29:ef:54:c1:64:
e3:6d:42:25:b2:8c:9e:92:ca:73:6d:5b:da:c6:dd:
2e:44:c4:ff:10:26:61:2a:0b:03:d5:c9:43:63:53:
a7:33:74:54:d5:30:bd:89:25:44:13:53:3c:6f:3c:
6d:7d:33:38:da:74:a8:f1:ce:e5:9f:b2:3e:f6:f0:
82:07:fb:c3:96:74:a4:5e:e8:1a:09:99:6f:af:05:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E5:55:0A:0B:17:0F:E8:C8:87:A4:BD:B7:5D:B5:38:89:30:2F:10
X509v3 Authority Key Identifier:
keyid:4C:93:21:3D:88:FA:87:4E:B4:46:0E:2C:5C:F1:BB:1A:91:DA:90:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMhPYj6h060Rg4sXPG7GpHakHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/e4e696-9d78-414c-af40-cf56c66a0ac0/1/TJMhPYj6h060Rg4sXPG7GpHakHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c2:fe:dc:35:27:c5:92:a0:03:01:9e:bd:a0:25:1d:b1:f5:
ea:aa:b2:8e:8a:63:5d:cf:3b:38:2d:b4:90:19:c5:a3:f8:a3:
3b:8d:73:6b:cd:25:e2:a0:3a:d9:f5:1a:d4:f8:8a:36:53:ea:
4a:ba:da:61:27:f6:35:1e:ac:44:70:d3:ea:99:c8:67:df:b4:
f5:8d:23:f1:72:6f:e3:8a:f6:2b:5a:9b:24:1c:a9:1d:91:65:
43:30:15:0a:62:7c:ae:d6:bf:c6:52:a5:a1:8d:f8:1f:5a:56:
0c:ce:f6:81:bf:fb:da:3e:b8:73:5f:d4:74:85:39:d2:93:bd:
b6:7e:aa:b6:94:5c:96:db:47:7a:57:6d:a8:32:8f:7d:d3:cd:
fb:eb:6e:be:67:2d:22:a3:88:8d:dd:84:cd:ab:01:01:98:10:
bb:07:0a:2f:10:0c:f0:8b:35:65:61:05:2d:24:42:f6:7d:72:
a0:7f:b5:54:5d:3e:2f:08:99:c3:a6:db:95:0b:d8:9e:63:d1:
e0:1f:db:11:be:8f:ab:b7:4c:e2:ea:e0:ec:22:9d:ca:07:f1:
47:60:0d:c1:b6:92:a6:1e:0c:5c:cb:c5:7b:ac:82:bc:0f:40:
29:32:86:e5:93:b0:b9:25:a5:fa:a6:c4:fb:69:a3:0b:6b:38:
90:67:69:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:49 2025 by rpki-client