Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
File: TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft (raw, json)
Hash identifier: Gp49egA9kRzyH8JSbkCA2s1zejmnPvT/FFS1qjBWNaA=
Subject key identifier: 27:C7:D5:7B:F2:C1:47:38:5E:86:36:FD:B2:A1:A7:F9:76:CE:56:25
Authority key identifier: 4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
Certificate issuer: /CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Certificate serial: 0194BC732036568D480CA07583E66C37B314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
Manifest number: 1434
Signing time: Fri 31 Jan 2025 13:00:48 +0000
Manifest this update: Fri 31 Jan 2025 13:00:48 +0000
Manifest next update: Sat 01 Feb 2025 13:00:48 +0000
Files and hashes: 1: IF7POYmH2s6_XyYc1YSgmRclBfU.roa (hash: vkWkPszh+VD/raa/NYL5vb45rCVCasfYYp1M1TBPCxY=)
2: JEYd_tTpdWRz3pFCNxB3FFwgT6Y.roa (hash: Cf4mCXc4k2uDXgbB44mtC61vJtEhAxi4CrnAuvkGzGk=)
3: TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl (hash: 0UrDtDoCLMd8860rbm6e0AYbSx5gr+MRudRhKA6HKJc=)
4: aC7DUlOCYd4ZrOlGrZ-OMdQYyBE.roa (hash: gIed90T8oX8NcIFpqOYwduIUaAgChpM53a4QzPH0Bg8=)
5: mkB4SicZVGVWHTxw9oi0-PVxn0E.roa (hash: 2wDNVFd31otqzR0DUqjmHU5P99370PEDq5aHd3jA9Wk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:20:36:56:8d:48:0c:a0:75:83:e6:6c:37:b3:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cbfd3e72d4a0396f95347336b42678f68c26430
Validity
Not Before: Jan 31 13:00:48 2025 GMT
Not After : Feb 1 13:00:48 2025 GMT
Subject: CN=27c7d57bf2c147385e8636fdb2a1a7f976ce5625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f7:27:e4:9d:5f:fc:fc:e6:63:4c:18:9b:bd:
34:f4:f2:d6:03:5c:0d:7a:36:be:07:c2:6e:ce:50:
70:99:30:1a:f5:a5:08:63:8d:90:c9:ee:3a:c3:fb:
df:d3:e3:a4:19:8e:77:80:0b:90:70:de:31:2d:39:
ee:a5:be:5d:61:99:f5:75:c9:62:05:4f:28:63:7f:
8f:e8:31:f4:8d:70:53:b0:6a:cf:79:bf:de:eb:9c:
fe:d7:93:45:4a:c3:59:52:f2:8b:05:28:64:cc:ad:
91:6c:87:3a:bd:7d:46:03:86:f1:c7:07:b6:20:51:
30:dc:52:e5:9f:2f:66:f3:c3:f0:f4:3f:0c:31:89:
c9:14:80:f8:43:15:17:64:00:20:b7:db:a3:7f:b9:
ab:28:fb:8c:ad:44:83:be:68:fa:e5:b3:63:9e:41:
38:d3:a5:a3:e6:d7:f4:61:5d:3c:73:0b:6a:2d:a0:
b6:8f:1b:bb:b9:5e:a3:27:68:a1:69:d5:4f:e4:57:
7b:f9:67:3d:c7:3e:86:72:a7:03:dd:03:15:74:7a:
4e:25:f3:16:c1:09:c1:9e:0f:23:34:bc:c9:9c:31:
b8:15:b0:1c:f0:ac:17:d4:a4:80:2d:e6:bb:30:85:
14:6c:19:21:c0:c1:f7:c5:e2:8d:2e:c2:f0:ec:c3:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C7:D5:7B:F2:C1:47:38:5E:86:36:FD:B2:A1:A7:F9:76:CE:56:25
X509v3 Authority Key Identifier:
keyid:4C:BF:D3:E7:2D:4A:03:96:F9:53:47:33:6B:42:67:8F:68:C2:64:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TL_T5y1KA5b5U0cza0Jnj2jCZDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b5733b-3891-449b-9950-ff60e218ed41/1/TL_T5y1KA5b5U0cza0Jnj2jCZDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:d3:79:6b:ff:95:0c:f6:ab:8c:06:ce:53:c7:3c:0b:fe:8b:
66:0d:0b:33:f1:b1:2e:59:9b:ce:94:aa:13:a8:ad:99:07:47:
19:8b:5b:3e:fb:99:c8:70:d4:7d:22:73:d6:ca:d0:62:1a:cf:
64:36:84:9e:de:4b:0c:84:6e:75:db:91:34:0c:c6:4e:14:99:
12:29:9a:31:59:ee:1e:5a:47:de:de:b4:62:df:26:7c:5a:08:
8e:a8:dd:db:8e:e4:db:7d:3d:02:1d:ef:97:31:b7:6b:81:2d:
ef:c6:2b:69:77:cc:32:ab:94:62:2c:dc:df:0e:25:51:f9:d0:
39:f7:08:3b:fb:3b:ab:53:0c:c8:60:22:47:f6:a3:aa:0f:6a:
19:d9:59:54:cb:60:1f:0a:1d:de:84:02:45:b7:00:16:47:df:
3e:f5:04:60:ca:ff:cd:6c:2f:15:2b:c4:33:b3:4f:8e:23:e1:
da:d2:58:f4:40:ce:f3:da:5b:fa:c4:4d:96:4d:92:d1:94:1f:
83:f4:9d:e2:c5:65:c2:45:15:25:91:05:32:4b:c4:72:2b:b1:
c3:d3:a3:74:dc:6a:38:71:58:05:4b:ab:9d:fd:5b:29:f1:cf:
dc:0a:76:1e:8d:b3:bb:24:90:44:e6:a3:e0:f5:5c:1a:b2:67:
69:10:89:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:38:15 2025 by rpki-client