Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
File: TecEA8nS15Ys8RPZPEYvlJPYc2I.mft (raw, json)
Hash identifier: 7D3UtiUe9ZXUw5ui1lHBhnS0CnJUQZeHf03jPJt68+o=
Subject key identifier: 5E:87:DA:5B:81:AD:14:FE:5D:69:87:8D:69:BF:F1:B4:0C:DE:12:94
Authority key identifier: 4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
Certificate issuer: /CN=4de70403c9d2d7962cf113d93c462f9493d87362
Certificate serial: 0194BD4EC0EC9B2D3ADE5E02FD3A6E47ACB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:42 +0000
Manifest this update: Fri 31 Jan 2025 17:00:42 +0000
Manifest next update: Sat 01 Feb 2025 17:00:42 +0000
Files and hashes: 1: GbfL1ZrfRVmwsoIJhPo9qm8dkFU.roa (hash: 5rCvc90C0u6LOlrowQ6t9CQlQZi5SGZg6tgn8PV2EF4=)
2: TecEA8nS15Ys8RPZPEYvlJPYc2I.crl (hash: /8N2RSbR9fbAUnM0n8rzcayQhsJX7tYXIuYMiQ8cYsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:c0:ec:9b:2d:3a:de:5e:02:fd:3a:6e:47:ac:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de70403c9d2d7962cf113d93c462f9493d87362
Validity
Not Before: Jan 31 17:00:42 2025 GMT
Not After : Feb 1 17:00:42 2025 GMT
Subject: CN=5e87da5b81ad14fe5d69878d69bff1b40cde1294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:7d:68:19:ab:30:06:cb:d8:1d:22:3d:ba:
4d:3d:6e:4e:2a:67:9f:85:e9:09:02:22:bb:cd:82:
35:e2:b3:3c:40:cb:90:a3:62:8c:26:b4:ac:47:f2:
a8:76:f2:40:ce:75:03:bf:94:1c:11:ea:a0:cf:91:
a6:34:60:0c:9e:42:e0:14:00:81:ea:67:e7:bb:2f:
f3:66:d8:69:b6:7a:c8:6e:a5:08:29:69:cd:94:f8:
43:88:33:b8:7c:df:29:55:89:5b:fc:1a:c7:77:54:
d1:36:cc:0b:2f:4c:dd:9d:7b:85:46:98:b5:73:dc:
00:2d:7b:e2:ec:43:89:11:06:21:dd:55:74:ec:21:
21:54:04:3f:a7:12:28:ad:49:7d:bf:5b:1a:49:49:
d1:c3:a2:4a:4b:73:9f:2e:28:c2:5b:ae:fe:c1:75:
ab:61:07:68:9f:7d:f4:69:95:e9:9b:e8:f4:39:30:
d3:f3:ca:16:ec:25:b5:d9:47:6e:9b:33:ca:a3:43:
25:b3:37:15:d4:c2:b6:3f:69:5c:55:f8:53:e1:b4:
9f:c6:f1:74:13:00:96:99:16:e8:82:3a:1c:47:c3:
b1:84:92:f8:3f:ff:e5:f7:12:2d:5e:60:4f:b1:32:
47:1f:04:ad:56:f5:88:a8:64:57:36:db:9a:e9:a8:
01:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:87:DA:5B:81:AD:14:FE:5D:69:87:8D:69:BF:F1:B4:0C:DE:12:94
X509v3 Authority Key Identifier:
keyid:4D:E7:04:03:C9:D2:D7:96:2C:F1:13:D9:3C:46:2F:94:93:D8:73:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TecEA8nS15Ys8RPZPEYvlJPYc2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/250127-85d7-46b4-8865-bf0da5e8ce7f/1/TecEA8nS15Ys8RPZPEYvlJPYc2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:18:09:e0:93:74:d8:55:ad:62:97:f4:9d:b8:bf:d7:26:96:
ce:19:51:90:cb:dd:b1:c8:d2:29:79:10:86:ab:89:c2:f1:49:
39:6c:0a:97:2a:25:ae:18:bb:b2:06:82:c6:3e:1c:59:bd:93:
6d:40:b4:34:66:fd:49:de:24:df:2a:f6:46:ee:78:69:a8:37:
54:d5:58:08:ad:b7:20:d6:9b:a0:66:b8:7c:44:b4:8d:e8:71:
ed:ae:1c:e9:df:86:41:ef:56:aa:30:5f:47:e3:20:1a:9f:24:
e5:2a:b1:b1:0e:c6:8b:af:c5:3c:74:33:2e:ae:b6:64:43:1a:
6a:2f:dc:73:8d:a4:3b:f3:ba:88:4c:bd:64:4f:89:ee:04:d3:
e4:44:c0:d5:01:f6:ce:96:c3:18:8e:8d:18:bb:e2:68:dc:01:
0d:7f:ed:cf:ec:fd:8e:09:fe:78:94:31:ca:d0:37:2b:d4:7a:
c9:2e:5d:6b:e2:8d:08:c7:6f:b0:53:90:94:7b:fc:97:b9:bf:
b0:49:5e:19:29:d8:df:f9:4e:a9:71:6c:77:ab:bf:cb:f5:d0:
d3:0d:ee:d4:a9:95:f0:8e:bf:2d:36:54:d8:ea:91:4e:14:9a:
db:9f:09:2e:38:df:a1:63:82:3f:80:23:49:90:ec:f2:f1:5e:
31:38:39:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:41:11 2025 by rpki-client