Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
File: TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft (raw, json)
Hash identifier: WPNrV0J5ZwZYrpe+bASQQz5tsbPKxMZvxoARLi2tu0E=
Subject key identifier: F6:42:35:0B:19:64:AA:4D:30:05:1C:2D:A5:E1:42:AA:B2:86:70:6A
Authority key identifier: 4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
Certificate issuer: /CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Certificate serial: 0194BCA9800A92E02384AD9CC9E2DC09FD91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
Manifest number: 0FDF
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl (hash: yON9RbcxQcd2oS8hQmX6hOSWhLTkrerAE9h9NR9W5Jw=)
2: j-betU5F3fuYYNREFl5I-_t74ng.roa (hash: ThVTYZ7pBXxFoxAK1y8K2Bay/CDdSEmxPkT01D83Maw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:80:0a:92:e0:23:84:ad:9c:c9:e2:dc:09:fd:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb932bc60e9fd1186f8fa6bd713c20729ae73ee
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=f642350b1964aa4d30051c2da5e142aab286706a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:28:15:56:5b:14:29:e9:16:d3:62:dc:e7:2f:
f4:20:da:41:27:18:a6:d8:62:c3:5c:09:f7:a0:e0:
dc:09:ec:c1:20:c8:b1:73:88:b5:67:99:87:98:25:
83:f6:79:fe:76:ce:10:41:f2:25:be:06:36:f2:0f:
70:4f:54:73:55:7a:40:02:3c:1e:45:64:3e:22:24:
76:92:30:af:89:1e:1f:2a:48:42:1b:fb:40:58:e8:
cb:d3:cd:de:c4:0e:d0:73:7a:cd:d1:40:47:1d:fd:
49:ce:4c:7f:1c:a9:04:5c:ef:a9:33:0d:07:2a:c3:
9c:6a:92:9b:e8:fb:de:c5:4a:8f:96:2d:8f:fc:ac:
df:31:90:02:0f:a1:75:cd:48:98:d3:b0:a2:b9:17:
e0:0b:44:a1:cd:df:cb:9b:ce:a9:ba:39:cd:d0:fc:
50:a4:81:96:35:65:9c:1b:79:f3:f8:4c:be:e4:d9:
1b:78:ad:92:34:af:8d:ed:61:90:a5:5f:d2:f6:1f:
5a:ca:7f:4e:d0:25:45:03:53:91:58:8a:84:6d:d8:
74:c1:48:84:99:38:e6:ca:93:eb:9d:32:56:3a:14:
40:d4:7c:0c:fa:f8:12:76:64:a8:8d:26:9a:1d:f3:
35:99:bb:7c:39:c0:a2:cc:b2:c2:98:11:ba:8f:8d:
06:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:42:35:0B:19:64:AA:4D:30:05:1C:2D:A5:E1:42:AA:B2:86:70:6A
X509v3 Authority Key Identifier:
keyid:4C:B9:32:BC:60:E9:FD:11:86:F8:FA:6B:D7:13:C2:07:29:AE:73:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLkyvGDp_RGG-Ppr1xPCBymuc-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/343892-780c-432a-882f-1e0d7c42da76/1/TLkyvGDp_RGG-Ppr1xPCBymuc-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ce:59:55:a3:e5:2f:63:84:35:f9:b5:81:1d:69:11:ea:f8:
94:d1:8e:e5:6e:62:71:89:cf:0e:8a:f2:6b:08:99:e4:5b:85:
b1:5c:bf:e2:3c:96:53:9e:9a:58:e9:33:af:b5:a7:62:d3:a8:
59:6c:94:d4:6d:c4:fd:57:c4:bb:a9:41:bf:5e:45:8f:7e:7e:
ae:ab:7b:81:3a:c4:6f:de:a4:d5:c7:7f:dc:45:aa:51:27:48:
1c:41:e5:c9:72:26:ad:3e:66:dc:54:7a:90:39:2b:6a:49:eb:
b3:c9:78:ea:41:0d:48:b9:15:be:0a:21:e3:72:25:ac:8a:c1:
14:c6:16:32:c9:b4:3c:c8:af:53:95:24:b7:68:01:e3:76:57:
33:ac:dd:00:93:ba:67:aa:80:ad:5a:b2:f2:74:af:5c:c6:5e:
22:cb:c1:f2:aa:0d:9e:f8:9d:9d:83:45:df:c7:63:40:a7:bf:
eb:28:d3:92:24:ae:9c:fe:f5:f8:95:5f:4d:eb:0a:c7:ec:7d:
21:04:01:14:8e:1b:0a:70:5a:55:82:10:64:cd:7a:b3:0b:f7:
8a:9f:0d:52:57:e1:b9:61:1c:0b:87:a1:c5:a1:a8:81:d5:f1:
10:84:4f:44:d1:8f:18:cf:78:7b:17:02:4e:ce:46:0b:92:18:
cc:30:37:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:03:56 2025 by rpki-client