Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
File: TWJ4HKFDbZbWd1uiDFzyx139E-k.mft (raw, json)
Hash identifier: I58j2Rz1zo+uh+WlTir660jnqmp/NiNoGkpwFSn3WW8=
Subject key identifier: E4:58:FE:7E:12:C0:9C:DA:84:05:8D:DA:23:61:5F:20:BA:02:CE:FC
Authority key identifier: 4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
Certificate issuer: /CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Certificate serial: 0194BCE0B0A76A74CA6B5F68CC3950217428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
Manifest number: 1383
Signing time: Fri 31 Jan 2025 15:00:29 +0000
Manifest this update: Fri 31 Jan 2025 15:00:29 +0000
Manifest next update: Sat 01 Feb 2025 15:00:29 +0000
Files and hashes: 1: TWJ4HKFDbZbWd1uiDFzyx139E-k.crl (hash: oCgjlmfNqY6t5ILNTbUI7pGnEyF6ew28w6qA0iBif0Q=)
2: aMDb2aqsB1gnaYoCsXASMw4mf7g.roa (hash: nKgevpuMWVmNTWjVHVyGbe988HLYNNZK38XCR2Z6V2s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b0:a7:6a:74:ca:6b:5f:68:cc:39:50:21:74:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d62781ca1436d96d6775ba20c5cf2c75dfd13e9
Validity
Not Before: Jan 31 15:00:29 2025 GMT
Not After : Feb 1 15:00:29 2025 GMT
Subject: CN=e458fe7e12c09cda84058dda23615f20ba02cefc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:9f:5b:53:37:2c:c4:6b:b4:23:e6:c2:8b:47:
ea:2d:b5:a8:61:a7:07:39:f5:fa:2b:58:f7:7f:6e:
a7:e6:3f:75:8c:b2:47:fc:ae:21:01:3d:4c:1a:7e:
55:6a:a4:c4:15:29:b3:d9:12:ab:ff:d2:05:3a:09:
aa:45:01:be:41:c8:70:13:57:5f:b2:5c:d1:96:24:
5b:31:e0:ce:1c:4e:3a:c5:79:9a:8f:ea:64:84:be:
86:87:ea:b1:be:ad:9f:c9:61:5a:3d:7b:ea:39:ca:
a9:99:74:d5:a6:03:64:66:f9:36:2c:9f:fb:52:3a:
96:c3:d1:9f:a4:45:54:8f:40:4a:68:85:9a:23:dc:
a2:c0:90:82:3a:df:0b:9c:21:fc:6c:e7:85:24:3c:
e7:c3:6f:3c:e9:97:8d:ae:cf:44:fb:d5:2c:55:0b:
9d:9f:66:89:8f:ed:23:69:87:28:27:d7:83:7f:35:
8b:b2:70:82:08:52:9e:8f:39:9d:c6:11:15:2c:83:
2f:9f:9d:3b:ce:00:f7:87:3d:c6:50:48:08:bf:78:
23:be:14:30:2c:d5:3e:e2:58:86:c4:28:05:05:7b:
dc:65:e7:22:07:7a:1c:f6:cd:4d:39:1a:10:f2:e4:
f8:b5:d5:17:21:ae:91:65:e0:2a:53:9b:03:e1:68:
a0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:58:FE:7E:12:C0:9C:DA:84:05:8D:DA:23:61:5F:20:BA:02:CE:FC
X509v3 Authority Key Identifier:
keyid:4D:62:78:1C:A1:43:6D:96:D6:77:5B:A2:0C:5C:F2:C7:5D:FD:13:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWJ4HKFDbZbWd1uiDFzyx139E-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/fe6363-6ed5-467d-b96e-8e0bdff237f8/1/TWJ4HKFDbZbWd1uiDFzyx139E-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:39:e0:69:d2:29:dc:a3:2e:6b:1e:d7:a5:93:a6:e3:d5:32:
32:d7:9c:04:83:47:5a:e9:68:5a:a9:b4:8a:f1:de:9c:00:b5:
37:74:6c:8f:4c:8f:a0:16:13:f5:f0:90:d0:2c:13:f2:f4:4f:
75:ba:66:d9:a6:83:a0:d4:43:c5:27:a5:ed:c0:cd:c8:7d:59:
ca:7b:4e:b1:2f:00:22:ff:73:35:4d:5b:49:a8:c6:09:1f:6d:
5b:c6:35:af:c1:02:dc:b8:56:70:ec:b4:ba:e1:cb:ae:fa:9e:
71:b2:8f:88:ac:9b:46:71:79:7b:1a:8e:ab:f9:a9:81:ba:f4:
41:d0:ac:59:ea:e8:39:e3:21:40:2b:74:0a:89:ef:1f:72:fb:
07:6d:32:14:ae:04:8d:61:0e:5d:4c:4e:b6:58:a0:d5:7e:73:
23:e5:1f:46:9d:8a:cd:2f:a7:fa:9f:54:36:91:14:71:56:ee:
85:8c:51:f3:04:30:da:02:50:47:2c:6c:f9:c3:53:f2:84:cc:
66:2d:e7:a3:a2:a3:87:0b:5d:9b:a4:43:d0:c7:0a:97:e7:30:
3a:f0:bb:9c:9d:99:aa:35:13:6d:3b:8e:41:e8:8d:0b:ef:50:
f4:14:a9:5b:af:b3:d2:5e:33:92:0f:ca:fa:03:ca:80:20:06:
34:dc:53:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:08:12 2025 by rpki-client