Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
File: TORqOpla2FRclax7aSMcpiT8iJM.mft (raw, json)
Hash identifier: BCJMZsPCXLUZPRDgMVomXdrM5MYtibXv/iR8jUdXduE=
Subject key identifier: AF:6E:E5:F6:82:18:B2:36:63:61:2B:DF:A7:B3:9C:B1:C0:DB:6C:05
Authority key identifier: 4C:E4:6A:3A:99:5A:D8:54:5C:95:AC:7B:69:23:1C:A6:24:FC:88:93
Certificate issuer: /CN=4ce46a3a995ad8545c95ac7b69231ca624fc8893
Certificate serial: 0194BBCEC8D55CB583A77D3ED846779A75D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TORqOpla2FRclax7aSMcpiT8iJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
Manifest number: 0F0F
Signing time: Fri 31 Jan 2025 10:01:18 +0000
Manifest this update: Fri 31 Jan 2025 10:01:18 +0000
Manifest next update: Sat 01 Feb 2025 10:01:18 +0000
Files and hashes: 1: TORqOpla2FRclax7aSMcpiT8iJM.crl (hash: T+VUqA3Myu+lnNwpleW9eJ1FvKQAFviziL1p3nAbCRw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:c8:d5:5c:b5:83:a7:7d:3e:d8:46:77:9a:75:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce46a3a995ad8545c95ac7b69231ca624fc8893
Validity
Not Before: Jan 31 10:01:18 2025 GMT
Not After : Feb 1 10:01:18 2025 GMT
Subject: CN=af6ee5f68218b23663612bdfa7b39cb1c0db6c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:26:b5:0a:ee:b9:1a:e3:35:5d:8c:9b:98:ca:
50:ad:7d:08:4c:f6:38:08:27:89:6c:ba:e2:15:0d:
e6:d0:93:e1:b3:bf:cd:6c:b3:9c:01:d7:87:c5:50:
f3:08:87:4f:ba:8d:3d:82:42:9f:e4:47:18:c8:52:
5e:e4:03:dc:f4:2e:ee:e5:84:5b:b9:84:5d:5f:32:
ec:8f:6c:72:51:05:32:84:11:ef:d4:85:a0:e0:6b:
ba:4d:6d:08:a7:64:39:b0:b9:25:67:05:bf:c6:d5:
fc:ec:a5:b4:1f:4b:f8:70:19:0a:0e:49:12:10:93:
56:b1:f1:30:d8:ba:fe:d6:ed:82:8b:ed:24:ba:59:
7b:7f:6f:3e:1d:7c:f9:70:48:0a:fc:eb:31:3e:80:
81:b6:13:2c:41:dd:5d:d9:e1:46:4c:74:c3:b3:81:
de:65:15:86:04:38:0b:8c:ab:00:c1:86:1b:ec:dd:
f0:70:85:f8:7f:81:c9:8a:5d:b4:72:c9:b2:85:7d:
48:50:92:a0:a4:59:fe:a4:09:cc:e1:59:e8:49:99:
6d:98:7c:6e:6d:d9:f1:86:32:b3:76:63:cb:ea:ee:
56:a2:fb:19:22:60:b7:73:65:fa:b9:67:b1:78:09:
eb:95:e0:a3:41:18:74:31:d1:2a:53:29:2f:11:62:
7a:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:6E:E5:F6:82:18:B2:36:63:61:2B:DF:A7:B3:9C:B1:C0:DB:6C:05
X509v3 Authority Key Identifier:
keyid:4C:E4:6A:3A:99:5A:D8:54:5C:95:AC:7B:69:23:1C:A6:24:FC:88:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TORqOpla2FRclax7aSMcpiT8iJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/b34d06-5247-48f8-9b56-60f6d4a5a74f/1/TORqOpla2FRclax7aSMcpiT8iJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:0a:61:fa:86:2b:fe:9f:33:0c:7b:b6:19:b1:51:57:99:be:
66:1d:25:b0:5b:aa:b0:a6:0e:9a:b5:59:f3:b6:7f:c6:7b:68:
74:8f:fe:0c:d1:af:74:7c:08:4f:70:e5:c7:31:91:64:76:5b:
3e:3c:83:fb:95:ae:77:65:75:2f:00:9d:3b:7f:5e:de:75:41:
e3:48:35:7d:9f:c5:ed:49:e7:71:aa:ff:9e:64:a8:88:e3:17:
02:e9:0b:b0:df:cc:24:6d:64:82:22:dd:7d:57:3b:3c:bf:7a:
ab:1c:e0:3b:59:29:ad:e9:8b:d2:cc:de:e8:ed:13:d0:ff:64:
30:58:35:10:49:96:75:89:44:cd:f7:ba:70:55:51:28:ad:62:
c4:00:8e:e5:5f:28:44:f6:b8:d1:43:49:47:db:9a:ed:2b:cb:
24:8b:e4:0c:e1:87:2b:cc:d7:15:fa:1c:78:70:f8:5d:7a:d9:
fa:98:37:fb:5c:fb:b6:fb:32:f8:c5:b5:bf:95:4b:9a:af:51:
1f:0c:60:99:16:e6:e6:3d:a9:0b:0c:d0:e6:bd:66:48:66:4d:
cd:21:44:6f:1f:0c:60:8e:f9:b1:4d:4c:5a:6b:c7:42:4c:08:
b3:04:4b:30:71:49:83:25:06:83:75:1e:e1:2f:e9:86:e7:e9:
c7:26:e3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:17 2025 by rpki-client