Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.mft
File: TqcPEdltXfB9x3s-04WTOZ0_Uao.mft (raw, json)
Hash identifier: k6JdHH62MGleBCALiTDYrWpZTs4TCgQwK1wukwrBoCc=
Subject key identifier: DD:84:BC:48:93:A9:6C:48:04:C5:85:5C:8E:C9:66:93:97:BD:E9:42
Authority key identifier: 4E:A7:0F:11:D9:6D:5D:F0:7D:C7:7B:3E:D3:85:93:39:9D:3F:51:AA
Certificate issuer: /CN=4ea70f11d96d5df07dc77b3ed38593399d3f51aa
Certificate serial: 0194BBCED37CB6DADC6617DEDAE9A3E40BEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqcPEdltXfB9x3s-04WTOZ0_Uao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.mft
Manifest number: 1031
Signing time: Fri 31 Jan 2025 10:01:21 +0000
Manifest this update: Fri 31 Jan 2025 10:01:21 +0000
Manifest next update: Sat 01 Feb 2025 10:01:21 +0000
Files and hashes: 1: TqcPEdltXfB9x3s-04WTOZ0_Uao.crl (hash: bF4/NSZzGUfAc8x1o1IrfbiaSX76O0tPC8AlcWZuzB0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d3:7c:b6:da:dc:66:17:de:da:e9:a3:e4:0b:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea70f11d96d5df07dc77b3ed38593399d3f51aa
Validity
Not Before: Jan 31 10:01:21 2025 GMT
Not After : Feb 1 10:01:21 2025 GMT
Subject: CN=dd84bc4893a96c4804c5855c8ec9669397bde942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:54:cb:a7:24:26:28:9c:f8:1c:a4:35:6b:8f:
17:ca:9a:7b:8a:3c:29:56:1d:86:d9:37:e4:91:4d:
99:99:48:a7:f3:a7:38:e2:02:64:07:1e:6b:4d:d5:
7e:d0:5c:97:78:48:e8:85:fb:7a:5f:ad:3d:f0:60:
6c:9c:db:45:b6:1f:13:62:b9:83:9b:ac:90:95:06:
fc:2c:25:11:15:2d:e8:1d:18:07:d6:90:8f:07:90:
f2:96:5a:b7:69:8d:d3:ca:e6:7d:03:e0:86:9e:fe:
a9:02:f5:bb:3f:0d:a3:58:2a:74:aa:d3:ba:86:5a:
72:e3:67:8f:b3:df:62:4d:a4:29:27:27:b2:80:91:
2b:4e:8b:f3:c6:fd:47:85:cd:27:f1:2b:19:85:37:
b4:c7:97:d8:f8:dd:a7:16:43:39:4c:4e:07:5e:ee:
da:6b:bb:99:cc:89:71:19:7d:88:a6:2d:4b:54:1e:
bd:fb:44:4c:81:27:d6:ce:1d:7c:36:c6:58:3b:d2:
88:11:94:e7:5f:c1:0c:3f:3e:17:db:c7:40:ab:96:
1a:91:03:76:0d:02:1a:56:b5:9f:01:33:fc:83:fb:
75:ab:81:70:87:2d:3c:ae:bc:a9:45:61:18:00:ae:
7c:a6:5d:b5:3b:1b:3d:a7:75:3a:47:ce:67:ef:6a:
88:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:84:BC:48:93:A9:6C:48:04:C5:85:5C:8E:C9:66:93:97:BD:E9:42
X509v3 Authority Key Identifier:
keyid:4E:A7:0F:11:D9:6D:5D:F0:7D:C7:7B:3E:D3:85:93:39:9D:3F:51:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqcPEdltXfB9x3s-04WTOZ0_Uao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:c0:8a:83:05:3b:3d:81:60:30:09:dd:e0:d3:ab:6b:c5:09:
9c:f1:97:c1:a3:97:39:eb:bb:d2:1e:23:50:0d:d9:0c:82:52:
da:c2:62:91:9e:c5:b5:5b:47:26:96:fd:31:d8:89:6a:39:79:
c3:82:9a:b3:af:35:17:0f:c1:7c:90:32:a0:98:61:1e:9b:00:
9e:77:b7:1e:f8:52:f8:a9:6c:ca:04:99:5f:cd:42:cf:41:7b:
37:0a:ab:aa:1c:ce:51:9a:db:34:23:00:b6:87:14:f9:1c:f5:
9b:01:f7:60:af:87:e8:83:bd:cf:9c:9d:fd:a3:83:84:9b:a4:
6e:b6:b9:c0:df:1c:15:2d:50:d2:b1:9d:50:21:bd:7b:a5:b0:
89:35:c5:32:e2:40:f4:fb:a1:4d:66:96:39:c4:a8:3c:98:db:
7f:c2:00:c6:49:41:b1:bc:55:75:83:bc:58:83:a7:94:01:28:
24:93:c5:9c:94:fb:de:fa:e3:3d:03:64:07:03:b8:5b:b0:f3:
d6:00:5b:75:c4:66:df:1f:86:e3:1e:55:ef:d4:b0:09:e1:1f:
0e:b6:2e:9f:9d:96:30:90:57:2c:cd:4c:de:b3:af:2d:13:fb:
ba:a9:e7:32:eb:20:d4:79:d5:5d:f6:fc:44:1b:fd:ea:85:75:
88:b2:b5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:47:03 2025 by rpki-client