Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
File: TPzH4BfCyfdjLacpNHa7fkowNlo.mft (raw, json)
Hash identifier: 0f5qjQwHOJ9hOy20eRVOb4E9JXJUbA2KenbEqKEOQtU=
Subject key identifier: CA:83:65:18:B5:C4:D1:7E:28:7A:30:05:0F:96:00:2C:47:A2:A3:1E
Authority key identifier: 4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
Certificate issuer: /CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Certificate serial: 0194BC3C13AF79BBC363D92131252F5B5183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:41 +0000
Manifest this update: Fri 31 Jan 2025 12:00:41 +0000
Manifest next update: Sat 01 Feb 2025 12:00:41 +0000
Files and hashes: 1: OQKKfCP8SjNyLo9484epfP4wbRU.roa (hash: GIFqkdSx0szCVRVxH/rU2b7Y/JXh/nneSVo+VlwXpJY=)
2: TPzH4BfCyfdjLacpNHa7fkowNlo.crl (hash: VbAoMsC0Po43v0BsDEa+JNFhBnthFsyhNr3lTbt5Vw4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:13:af:79:bb:c3:63:d9:21:31:25:2f:5b:51:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfcc7e017c2c9f7632da7293476bb7e4a30365a
Validity
Not Before: Jan 31 12:00:41 2025 GMT
Not After : Feb 1 12:00:41 2025 GMT
Subject: CN=ca836518b5c4d17e287a30050f96002c47a2a31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:37:c2:32:c0:62:7a:52:ba:7f:18:a5:1d:8a:
0f:eb:28:14:1b:5a:f7:39:7b:f1:09:e9:34:0b:26:
87:3c:a4:94:0d:61:cd:32:3d:fd:53:65:16:c4:19:
19:75:ed:b0:e8:9a:ef:78:24:1e:27:10:48:1f:51:
36:f5:31:6d:4e:e9:f2:a0:b5:91:e4:38:46:3e:ca:
db:9c:c7:6f:2a:ab:1a:b5:fc:b4:f8:d9:c8:85:f9:
16:c7:d0:c4:9d:9f:62:75:0c:e9:a3:0a:49:a2:e3:
3d:18:87:db:3f:f9:16:9a:d9:2f:03:18:3d:0d:17:
4b:4c:ab:f9:1e:bc:ef:d9:80:9f:25:f7:08:17:e6:
94:7e:8a:06:de:58:ce:9a:9e:00:53:24:b8:2d:0b:
5d:ed:5f:74:34:c8:eb:23:d4:91:15:54:26:f1:9b:
35:ed:34:eb:55:b4:39:9f:3b:91:9d:07:58:de:e5:
e9:ff:78:d7:b2:15:48:20:27:b3:8d:04:16:da:63:
65:75:e1:8a:22:34:78:c3:b2:04:cf:58:07:d3:e6:
56:bc:11:97:cf:7c:bb:16:c7:d9:38:8f:91:ac:c5:
19:0e:24:ce:ff:82:93:5e:f0:ae:44:b2:21:7c:14:
19:51:15:3c:71:3d:06:97:4e:0e:6b:e3:41:15:b8:
c4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:83:65:18:B5:C4:D1:7E:28:7A:30:05:0F:96:00:2C:47:A2:A3:1E
X509v3 Authority Key Identifier:
keyid:4C:FC:C7:E0:17:C2:C9:F7:63:2D:A7:29:34:76:BB:7E:4A:30:36:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPzH4BfCyfdjLacpNHa7fkowNlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/bbedbe-8821-4bd8-bbcc-3adf9b61347d/1/TPzH4BfCyfdjLacpNHa7fkowNlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:d6:f9:a7:07:2e:78:fe:1f:16:cc:01:f3:b7:1c:c9:f3:a3:
7a:e8:00:f4:9d:aa:cc:a6:fb:70:9b:27:ee:79:b3:ed:31:40:
d5:5b:bc:2d:e6:1d:18:65:d9:ad:56:31:f2:d2:1e:1c:9f:7e:
ee:e0:8d:58:f9:b1:18:79:8f:88:23:de:e7:7e:74:57:69:3c:
75:53:9b:a8:d6:7a:ca:30:d5:79:68:a3:74:75:1e:33:5c:e4:
99:01:71:82:f6:95:6e:0d:01:b4:c0:80:16:82:c3:3c:17:b0:
99:36:b2:13:27:d6:7d:37:23:30:7d:50:b7:59:8f:08:5e:41:
cc:5b:f9:5a:1f:6d:0d:33:d0:bc:65:18:46:e0:86:46:d3:d0:
29:ba:66:b1:1e:db:d5:74:31:85:cc:ba:12:8f:a6:ef:8c:a4:
16:c3:01:8f:75:fb:1e:ad:0b:ca:0e:ef:55:d6:30:8e:2a:e3:
33:a3:06:8d:77:68:90:dd:b7:63:d9:03:29:3a:af:85:23:5a:
19:f6:7b:9d:fb:cd:3a:6a:c6:5e:29:cc:54:bd:ea:a6:51:16:
50:3b:62:b3:41:dd:15:f7:21:f6:ed:38:d5:b4:b2:68:70:25:
97:1f:ca:8b:7a:00:1c:30:b4:79:8a:dd:4e:ad:0d:c5:92:a8:
0e:df:0d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:01 2025 by rpki-client