Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
File: TlFGu04hl0T1jCaOnsYhwY3SKcM.mft (raw, json)
Hash identifier: m8uPhe4qoKdSgsWBsXOkbu7GkZQoEJVvuPrV0xuFySs=
Subject key identifier: 6D:DF:5E:3C:6C:E4:C2:E4:4D:3E:6F:0B:A0:A2:8C:EC:98:EA:1B:A4
Authority key identifier: 4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
Certificate issuer: /CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Certificate serial: 0194BC04BCA72830C3393F77FD814D9A09CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
Manifest number: 1438
Signing time: Fri 31 Jan 2025 11:00:14 +0000
Manifest this update: Fri 31 Jan 2025 11:00:14 +0000
Manifest next update: Sat 01 Feb 2025 11:00:14 +0000
Files and hashes: 1: FAOYdRa4uoJSdoI3e8-q11iXfiE.roa (hash: FqMdw256VpvhGAmP1nnLAhKDEQ1LXuBv38BkFocmRoU=)
2: TlFGu04hl0T1jCaOnsYhwY3SKcM.crl (hash: ZugUezgulQrGLvVVzJ3LxFLlG7KdVVWsIsgUVIfnmZQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:bc:a7:28:30:c3:39:3f:77:fd:81:4d:9a:09:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5146bb4e219744f58c268e9ec621c18dd229c3
Validity
Not Before: Jan 31 11:00:14 2025 GMT
Not After : Feb 1 11:00:14 2025 GMT
Subject: CN=6ddf5e3c6ce4c2e44d3e6f0ba0a28cec98ea1ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8d:38:16:09:b2:a3:ff:4c:be:33:91:9e:e8:
cb:ba:ad:60:a0:70:e7:49:cb:92:5c:97:98:91:89:
cc:58:57:ec:51:26:90:63:da:65:86:b1:4a:8b:06:
b8:a7:72:c9:89:08:90:ee:88:5b:9e:b6:00:21:e5:
cf:a7:19:47:b2:54:ea:06:e7:aa:d8:07:12:fd:74:
86:42:a6:75:35:28:02:ec:db:33:d9:fb:15:de:09:
37:ba:47:50:c9:ff:4c:8b:98:a1:7e:20:18:e0:24:
16:2d:d7:c7:11:72:82:82:1a:73:d9:f3:a9:e7:88:
6d:51:cc:77:0e:6b:1f:d6:f6:8d:a9:b5:5c:ce:9c:
21:af:ad:80:53:b1:c3:cc:28:82:4f:f6:7c:7a:43:
6b:6a:a3:fa:4b:75:b4:e6:0f:1f:e0:58:8b:39:90:
a7:cb:ff:43:c1:45:ad:ea:d6:a8:22:f7:ae:6a:de:
66:56:a3:0e:3a:8a:b6:e0:8e:26:57:b8:a5:af:eb:
f0:6b:41:b4:98:36:bb:8f:48:cb:b2:3d:3a:15:d9:
12:22:5c:41:99:8a:03:8d:cb:74:bd:71:e1:ad:de:
e7:23:69:e2:ba:3d:7d:d3:9e:5e:f3:8a:f1:db:f2:
e6:c1:60:f1:64:21:57:24:bd:12:fc:b0:08:12:d0:
d7:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:DF:5E:3C:6C:E4:C2:E4:4D:3E:6F:0B:A0:A2:8C:EC:98:EA:1B:A4
X509v3 Authority Key Identifier:
keyid:4E:51:46:BB:4E:21:97:44:F5:8C:26:8E:9E:C6:21:C1:8D:D2:29:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlFGu04hl0T1jCaOnsYhwY3SKcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/25b54a-e770-44ab-a004-c920c517d600/1/TlFGu04hl0T1jCaOnsYhwY3SKcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:69:d3:c0:ae:8c:2b:94:dd:d2:ee:4f:3a:51:f1:32:a3:01:
d9:21:bb:e3:0a:9e:7b:35:fe:e3:df:c7:5a:09:10:e4:6e:c8:
ee:0c:5f:1b:74:16:19:60:01:5a:8a:49:ff:27:e3:59:b4:11:
83:c8:60:55:f9:2c:4a:e1:b2:6d:09:08:2e:1f:62:3f:99:34:
19:5c:c4:21:9c:e5:07:2e:17:14:c0:30:95:42:94:3f:79:70:
2a:de:7a:7a:6a:f7:b7:64:64:fc:f1:20:18:48:15:3e:51:e4:
48:ef:46:45:f6:1a:d5:65:f3:03:d8:ea:09:4e:30:0a:65:1e:
e9:d8:19:25:0c:34:5d:22:66:11:85:d5:46:ea:2e:08:f6:83:
d5:59:81:08:3d:04:0f:dc:66:12:7e:da:dc:30:47:8c:74:c5:
65:e2:e7:05:4d:47:99:30:63:05:05:ce:54:87:64:09:14:54:
88:ff:15:64:58:93:a7:f3:01:41:40:36:05:47:41:71:3f:1b:
f6:8e:8e:03:d5:03:43:45:45:3a:bb:82:de:95:0a:c1:fc:b0:
d4:bd:57:90:14:ef:65:0a:21:87:61:a4:87:33:ed:06:ab:6a:
c6:7a:e8:79:da:34:bc:14:dc:7e:88:e4:05:65:47:25:5f:d0:
48:6b:3a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:31:49 2025 by rpki-client