Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
File: TMxgSVsqNNiSEcwceVJOq2G6FlY.mft (raw, json)
Hash identifier: Q3tP8vX83gcj31oEn2q3nxS0PqL6zNyVwpLZ3fXjXkc=
Subject key identifier: 21:1C:61:D5:5C:61:4F:9E:88:52:EF:60:02:FF:45:84:BB:43:30:2E
Authority key identifier: 4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
Certificate issuer: /CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Certificate serial: 0194BC72EBFC01885D0DCF49ADC5BA9A02AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: LHdFFtkhND-G29Bb5TNwX3ZX6HI.roa (hash: 5JCuzcczihsYGo60q4ytQ60HO2vUMA1Wb8XrWH6WiqE=)
2: TMxgSVsqNNiSEcwceVJOq2G6FlY.crl (hash: analVHWth3T+D6Ezg5MEuCNU8dfvWaGNmv4ktpZ6kvI=)
3: VYrJyKdSTfJ9aOSPJMCRhItn6O0.roa (hash: EVl6QPoQm24Wnsg0W0HBnWjfCtTCiCv6xfCekdHCwzI=)
4: XGm_swis7gPqLxLCw4_WpqKe8Ac.roa (hash: HuoRGpzlvzmJtj6Rn/56OaSHzb/3wfWOGTlv62srzB8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:eb:fc:01:88:5d:0d:cf:49:ad:c5:ba:9a:02:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ccc60495b2a34d89211cc1c79524eab61ba1656
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=211c61d55c614f9e8852ef6002ff4584bb43302e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ec:6c:c1:8a:5f:32:43:ff:e5:a2:09:04:2d:
97:79:6e:c9:cd:66:c8:07:d8:05:c7:8e:c5:de:bc:
f3:ed:c7:4b:25:d6:df:fa:61:c0:1b:5e:35:2f:6b:
99:e8:2b:6f:60:0b:d0:a6:68:ca:0f:b4:3b:ce:9a:
68:26:b8:13:17:fd:a4:4f:27:20:33:3b:fe:73:be:
e1:64:26:95:21:fe:ce:13:40:af:a2:0d:09:cd:b5:
8b:13:58:30:7f:24:33:7d:42:b9:76:cb:93:25:1f:
0a:f5:25:81:3e:15:cd:4c:6c:0d:dc:83:fa:71:49:
52:1b:5a:9f:62:79:25:41:bf:f7:4a:25:4d:bf:f1:
f7:63:21:7c:a8:cd:41:46:dd:fa:fa:da:97:80:1a:
83:f9:f3:31:de:c0:1e:f5:fa:a2:00:79:11:a2:d3:
6b:11:1d:dd:f7:35:b8:2b:a7:4a:ea:6a:a0:1d:10:
b3:55:7e:3f:6c:7d:a6:56:55:94:36:22:45:07:e2:
e9:55:fe:bd:bf:04:8a:53:8b:f8:f7:30:da:52:bc:
d5:cd:d4:6f:14:4b:a1:bd:53:c5:b0:61:82:6f:59:
37:dc:81:71:3f:01:c6:16:1e:58:74:55:dc:c2:38:
98:9c:e3:64:d3:25:5c:50:d6:3d:de:d3:50:7f:09:
d5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1C:61:D5:5C:61:4F:9E:88:52:EF:60:02:FF:45:84:BB:43:30:2E
X509v3 Authority Key Identifier:
keyid:4C:CC:60:49:5B:2A:34:D8:92:11:CC:1C:79:52:4E:AB:61:BA:16:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TMxgSVsqNNiSEcwceVJOq2G6FlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/151c6c-617c-4643-9f6e-69809d8b9c20/1/TMxgSVsqNNiSEcwceVJOq2G6FlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:91:ea:28:ba:a2:f7:35:d6:ce:ed:92:06:54:b5:a2:1e:5d:
08:6c:68:71:3e:ca:10:a2:83:a7:29:52:ea:19:53:20:0d:e7:
3d:2e:f5:4b:63:0b:4b:49:24:05:3a:3b:ea:ac:fe:42:10:43:
e5:d7:32:43:38:46:5f:3c:6e:9f:ea:3b:a9:b8:f6:e6:67:36:
43:24:13:17:77:3d:d7:5b:32:1e:6d:fb:46:a8:f0:76:b6:05:
43:00:f8:4d:06:5e:1f:21:e1:42:1b:bb:88:9e:01:62:b8:0f:
a9:fe:5d:82:48:50:be:a9:c1:ce:64:d4:43:c4:30:1b:3b:32:
0e:1e:13:a9:f2:98:49:31:25:67:72:d5:b9:d5:38:b9:a7:8a:
29:2b:4e:aa:30:bf:64:19:74:26:ce:c0:56:41:d8:35:c4:0d:
da:78:c0:d9:9a:cb:a0:2b:c8:56:49:00:79:40:8a:6f:f0:0b:
5f:bc:0b:a5:c1:26:b9:a9:11:72:b7:43:17:0e:db:de:a9:7a:
ea:91:4f:51:da:21:49:09:3f:ed:62:83:9d:20:b4:93:5b:b2:
e9:34:4f:02:c1:ce:16:c0:73:f2:96:95:d3:3d:96:39:0e:75:
b5:22:57:90:e6:75:26:28:6e:70:03:06:52:8b:de:46:6f:92:
5d:8c:41:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:54 2025 by rpki-client