Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
File: TTuCKQwugJCSSp79nFF8oUpcNwQ.mft (raw, json)
Hash identifier: 8DTQBzV1akW78bECB5uLThazEUBpfF7LSaC8+hB62CA=
Subject key identifier: F8:87:98:0E:17:A1:18:84:5E:BD:D5:E8:F7:A5:7A:3D:A6:B8:0F:95
Authority key identifier: 4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04
Certificate issuer: /CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
Certificate serial: 0194BBCDC28D6D40F5E83F045C464CC000E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:00:11 +0000
Manifest this update: Fri 31 Jan 2025 10:00:11 +0000
Manifest next update: Sat 01 Feb 2025 10:00:11 +0000
Files and hashes: 1: TTuCKQwugJCSSp79nFF8oUpcNwQ.crl (hash: WNXjpOA6jv4q4PaTJJxxlvyISV3bhl2lGE38ke3A+ug=)
2: pdjC9ITQ24acWwqpMZ438xSZhiA.roa (hash: J1OLMcnc+nGL4fyVYlLU268vrwR6/zxGbhF2T7OJ2uY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c2:8d:6d:40:f5:e8:3f:04:5c:46:4c:c0:00:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3b82290c2e8090924a9efd9c517ca14a5c3704
Validity
Not Before: Jan 31 10:00:11 2025 GMT
Not After : Feb 1 10:00:11 2025 GMT
Subject: CN=f887980e17a118845ebdd5e8f7a57a3da6b80f95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:26:64:5d:ae:68:a0:d4:5a:e3:b3:a9:74:3b:
7b:f0:c9:2f:a1:e8:b2:00:68:d4:ab:d5:18:f0:d3:
88:4f:a8:c4:92:52:3e:aa:35:0d:8e:21:01:21:24:
dc:26:2a:dc:de:44:c2:78:7c:17:88:fc:1f:a5:a4:
75:66:68:c1:0d:4f:0d:f3:e8:4a:d6:2d:44:90:04:
c2:a3:41:7b:17:76:2e:f6:ac:21:55:37:c5:22:2e:
a4:f5:cd:e6:ca:b1:3f:1d:8e:65:11:8c:43:72:98:
db:e3:0c:93:d9:0f:32:b5:a6:32:0a:d0:64:8d:41:
c0:68:9e:91:85:a0:9d:6c:5f:3b:ac:5a:87:e2:ac:
cb:e7:20:b7:6e:8d:64:da:86:4c:66:e7:77:35:c7:
b5:64:5a:4a:cf:a2:dd:fd:9a:10:5b:28:e5:4d:f5:
f4:9c:cd:5f:3b:0c:f4:4f:dc:7a:fe:5b:0c:2b:17:
81:c3:99:bf:8b:85:29:e4:e8:28:16:1f:ce:79:37:
89:31:8c:1e:fc:74:cb:8b:2f:a0:13:6c:65:f1:c2:
44:39:30:a9:ac:78:72:47:26:1e:d7:24:bd:9c:cf:
cd:60:e7:a2:df:6e:c4:31:e3:32:dd:17:1f:7a:aa:
8a:91:70:66:f7:56:fb:ec:dd:65:80:b0:7e:b8:9a:
54:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:87:98:0E:17:A1:18:84:5E:BD:D5:E8:F7:A5:7A:3D:A6:B8:0F:95
X509v3 Authority Key Identifier:
keyid:4D:3B:82:29:0C:2E:80:90:92:4A:9E:FD:9C:51:7C:A1:4A:5C:37:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TTuCKQwugJCSSp79nFF8oUpcNwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/c5ccd8-8f0d-4862-86aa-d979ece93285/1/TTuCKQwugJCSSp79nFF8oUpcNwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:a0:db:2e:b0:e2:fd:c9:1d:db:60:4a:82:59:64:8a:85:8c:
11:22:d9:31:a0:95:5e:bd:df:39:9f:17:f3:14:2a:b5:c4:9d:
7b:f9:61:0f:c3:1a:e8:fe:8e:d2:78:6e:fd:c6:b2:07:c7:16:
81:15:f4:11:20:a4:28:cb:59:59:f3:4b:ee:7e:e1:3c:b0:44:
ab:96:28:ab:06:cb:b0:b6:83:50:24:74:67:d3:47:67:65:13:
1c:c8:6a:53:3d:1c:0a:ff:26:8e:d2:d8:1a:2c:76:43:22:44:
66:9a:12:0c:ac:1c:02:68:3c:9e:25:64:16:1a:ac:2f:c4:62:
f2:60:02:bc:db:32:f6:b3:47:09:fd:67:d3:ff:df:78:32:8a:
bb:23:65:49:19:36:f0:10:83:7b:07:6d:52:44:23:c2:51:bb:
e9:b8:e4:88:95:fc:2e:b0:0c:b2:81:8a:99:da:af:a6:38:89:
b1:76:fe:ad:8d:52:ff:14:60:03:7e:80:a5:80:58:53:dc:7a:
c6:dd:32:02:cd:33:9f:48:c9:43:5b:52:31:6d:71:fa:ae:eb:
16:e4:a8:20:2f:cc:ed:27:eb:4b:87:ba:1e:bd:36:81:5f:8a:
4f:f7:5d:ce:80:97:01:bd:cd:9f:1c:b0:3c:94:7e:80:11:22:
b8:6e:04:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:03 2025 by rpki-client