Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/876166-f057-46e1-be08-a65e5e33dcc0/1/TDXafoQ-N8fbpPynGPQ4Zf18mNw.mft
File: TDXafoQ-N8fbpPynGPQ4Zf18mNw.mft (raw, json)
Hash identifier: i1QPSJyysE0v1tzR1ILSV8JIYJXAINwFA19VmIfmfo8=
Subject key identifier: 4A:77:BA:30:5D:36:BB:18:F2:30:E4:48:3B:E4:47:97:46:83:73:D2
Authority key identifier: 4C:35:DA:7E:84:3E:37:C7:DB:A4:FC:A7:18:F4:38:65:FD:7C:98:DC
Certificate issuer: /CN=4c35da7e843e37c7dba4fca718f43865fd7c98dc
Certificate serial: 0194BC72E83C403EADBEB5E70852423A0025
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDXafoQ-N8fbpPynGPQ4Zf18mNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/876166-f057-46e1-be08-a65e5e33dcc0/1/TDXafoQ-N8fbpPynGPQ4Zf18mNw.mft
Manifest number: 10F8
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: TDXafoQ-N8fbpPynGPQ4Zf18mNw.crl (hash: gn+eYOVZjiniG7LvYYivvQOc6FC5wwDBhuLnaH0iXGc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e8:3c:40:3e:ad:be:b5:e7:08:52:42:3a:00:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c35da7e843e37c7dba4fca718f43865fd7c98dc
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=4a77ba305d36bb18f230e4483be44797468373d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3e:70:d8:f0:00:47:ec:98:95:52:d5:65:6e:
2b:9a:36:a6:1e:e8:41:b0:fb:06:da:fd:17:51:00:
dc:f8:7f:b0:32:e0:6c:61:96:d9:94:35:14:f6:d6:
60:32:dd:41:da:81:9c:a3:ab:4c:95:1f:7e:01:d5:
cf:8b:4f:60:11:87:72:16:02:26:3c:3f:bd:20:02:
2b:4f:93:0a:54:35:d8:7f:ec:67:fb:68:89:16:4b:
3b:59:0d:5a:e8:1a:ca:04:d4:19:67:8f:05:d7:0c:
ff:ad:b1:e4:67:95:dc:cb:03:41:02:0a:fb:c0:eb:
b6:5d:5f:89:f8:5b:bb:3d:9a:99:d2:9a:ec:79:d1:
44:ee:16:2c:d0:23:3d:4b:74:5f:9e:a8:13:6f:67:
fc:54:73:81:2e:e8:ae:b3:ec:02:fb:27:30:55:29:
b3:40:89:6d:02:77:37:a7:35:23:b8:b6:ab:8d:c4:
ee:bd:a7:be:dd:15:5f:43:65:34:80:71:59:21:b7:
5d:2c:3d:23:06:17:b6:e7:cf:e3:80:27:b0:1d:c6:
e4:c8:0c:6a:b0:76:79:fb:b4:2f:57:84:94:f3:61:
ea:38:6e:74:f9:04:c2:b5:26:90:9c:7f:95:f5:eb:
7b:75:0e:a1:56:d6:72:44:8a:8b:57:02:c8:05:6c:
a7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:77:BA:30:5D:36:BB:18:F2:30:E4:48:3B:E4:47:97:46:83:73:D2
X509v3 Authority Key Identifier:
keyid:4C:35:DA:7E:84:3E:37:C7:DB:A4:FC:A7:18:F4:38:65:FD:7C:98:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDXafoQ-N8fbpPynGPQ4Zf18mNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/876166-f057-46e1-be08-a65e5e33dcc0/1/TDXafoQ-N8fbpPynGPQ4Zf18mNw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/876166-f057-46e1-be08-a65e5e33dcc0/1/TDXafoQ-N8fbpPynGPQ4Zf18mNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:46:73:94:d1:59:7d:36:df:3c:af:b0:dc:7f:fe:f6:88:df:
03:39:6c:46:c8:5a:b4:3d:bd:4b:44:33:b5:4c:80:35:f3:9e:
d7:0c:b9:83:87:37:10:a8:2a:63:cc:49:50:a7:c0:2c:5d:74:
c9:c3:d5:3e:cd:d8:e1:48:63:7e:cd:24:f9:36:d7:a1:b2:1f:
d8:4b:b4:37:09:0c:1b:f6:ab:5b:91:f7:e6:1e:39:3b:0e:21:
92:ab:1b:e8:5a:a6:82:e2:f9:81:de:8e:06:15:22:79:56:65:
80:60:ea:7d:bc:95:6e:ad:ac:ef:26:3d:3f:4b:29:50:8d:0e:
0f:0e:24:8c:6f:7d:5f:59:1b:43:80:72:e3:02:11:2e:d2:53:
d2:f5:9a:a8:d3:98:0f:d0:97:e8:da:08:b6:94:bb:9a:1c:bd:
1d:c7:0a:95:b6:20:23:ea:e2:8d:e2:a8:dc:f5:d1:fa:f7:6c:
d0:5b:b0:74:01:cb:18:d2:b4:32:d1:6c:d8:fa:b6:e7:a7:b1:
66:ec:87:10:22:61:b3:1d:a4:e9:26:fa:12:62:46:f7:df:86:
0e:57:3e:21:86:38:6b:88:e4:e8:e5:64:d0:ee:23:a1:00:15:
4c:25:8b:e6:ef:c0:02:95:42:69:02:3b:1d:52:0b:49:a2:28:
4e:7b:70:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:00:24 2025 by rpki-client