Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
File: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft (raw, json)
Hash identifier: nsWcfPCl2XnQrndNCdYscmp8diYp6wThr5iimgtAsYk=
Subject key identifier: BD:C1:D8:7D:8B:E8:B9:4A:AC:48:EE:28:32:E5:25:D5:AD:A1:C8:4A
Authority key identifier: 4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
Certificate issuer: /CN=4d92be02509643bc7a2f862871639d08e276c636
Certificate serial: 0194BD853754CFDEE582215DCE938CCB31B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
Manifest number: 0D8C
Signing time: Fri 31 Jan 2025 18:00:11 +0000
Manifest this update: Fri 31 Jan 2025 18:00:11 +0000
Manifest next update: Sat 01 Feb 2025 18:00:11 +0000
Files and hashes: 1: TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl (hash: J4CUM82BQsYT3L2CYMWd9con5CQ1mELS3UkqiEZUBbk=)
2: odyRy2FLHB1ia0-B0wtN-GrVmpY.roa (hash: kVTUOVywoB+P4bkpPocvLbzGPCGuaGOyFmq1BUYllIU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:37:54:cf:de:e5:82:21:5d:ce:93:8c:cb:31:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d92be02509643bc7a2f862871639d08e276c636
Validity
Not Before: Jan 31 18:00:11 2025 GMT
Not After : Feb 1 18:00:11 2025 GMT
Subject: CN=bdc1d87d8be8b94aac48ee2832e525d5ada1c84a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b2:42:41:de:6b:f9:6b:f5:d9:b1:9c:6a:00:
53:57:e5:4e:02:6e:34:72:cb:c3:39:2c:a1:a9:23:
4b:9d:7f:5f:08:5e:07:3e:13:be:27:ca:72:20:8a:
e4:e7:69:40:98:2a:9c:93:e8:58:e5:60:6f:5e:ad:
26:27:2a:c4:35:3a:a3:ae:0f:d1:54:8a:63:36:4c:
f2:09:75:eb:ba:d4:ff:72:f6:20:6d:59:2e:f6:cc:
b4:cf:d3:0f:e4:1c:4d:56:6d:6f:7e:7d:f5:dc:92:
9a:58:ab:1f:4b:29:61:22:41:fc:84:59:ad:4d:42:
e6:23:fd:99:bf:dd:27:7d:63:8d:76:2f:07:82:34:
42:28:42:ef:c6:df:08:60:83:90:07:00:4d:fc:a1:
d8:13:9d:ed:e0:46:36:6a:c9:fa:1b:8b:9b:35:dc:
47:ff:db:42:fa:26:e1:37:d6:2f:80:de:8e:9c:b8:
25:47:4d:ef:7a:be:43:ed:7e:67:54:24:bc:7c:a7:
05:9e:f5:d0:83:83:90:f4:25:2e:e0:8c:e3:11:3f:
4f:11:80:fe:3a:75:a8:13:00:8f:e9:80:6a:72:79:
ac:a7:3c:94:05:be:ec:e1:91:ab:35:1b:72:5e:36:
1c:e5:d8:ee:ed:10:10:ed:fb:7a:4d:8a:a1:b9:f4:
43:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:C1:D8:7D:8B:E8:B9:4A:AC:48:EE:28:32:E5:25:D5:AD:A1:C8:4A
X509v3 Authority Key Identifier:
keyid:4D:92:BE:02:50:96:43:BC:7A:2F:86:28:71:63:9D:08:E2:76:C6:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/24640e-f25c-42e7-b37c-b7312ab20273/1/TZK-AlCWQ7x6L4YocWOdCOJ2xjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:bf:ea:3c:73:d5:d3:75:e9:5b:26:ae:32:0e:81:be:06:d9:
cc:40:68:69:d6:d2:42:9a:34:c2:d8:00:ab:e7:6c:2e:e5:fb:
df:f9:27:d1:86:02:16:b8:2b:30:04:b9:49:63:ad:8b:f3:32:
e5:8a:0d:60:4f:90:32:ec:57:8f:d4:fd:00:2e:2e:da:d0:cb:
4e:e5:45:3b:ee:c6:4e:2b:04:38:60:8b:52:fd:2e:d9:78:71:
88:65:5c:cb:67:92:62:fd:44:7a:89:ce:0d:34:c0:d6:f5:3f:
53:94:7a:a6:da:ae:e2:4c:e0:da:5d:bf:58:12:09:81:70:85:
5f:23:5a:2d:d3:ea:84:f0:11:3d:0c:7d:82:b7:e2:35:41:fd:
ba:6a:06:a0:7b:e6:7b:d9:21:d7:40:93:ce:a5:60:24:db:b5:
97:33:05:21:46:66:2c:c6:c0:04:dc:de:0d:32:96:f0:48:72:
da:92:13:bc:14:ab:2b:9a:18:2e:c9:36:04:f3:b4:da:28:34:
94:1f:d2:6e:fe:19:90:eb:79:ee:e8:fd:87:0e:b2:d8:43:5a:
53:4f:e3:94:c2:17:5f:17:25:8f:ff:f3:38:31:1d:f2:32:15:
8d:dd:21:3b:ab:0b:8d:35:b6:4c:8b:b2:ea:48:ec:57:10:0e:
04:38:6b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:38:03 2025 by rpki-client