Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
File: TRMSiBUQNXRBfKenBBLaOrO4RRE.mft (raw, json)
Hash identifier: +6R1scYuCIjXr9IT2F/LcZTVdsJG0g/jPBOgkKMmv8M=
Subject key identifier: AD:33:50:32:AD:AF:8F:82:D9:AA:A1:21:F8:33:6E:4E:81:B2:21:01
Authority key identifier: 4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
Certificate issuer: /CN=4d13128815103574417ca7a70412da3ab3b84511
Certificate serial: 0194BC3C65A1629E00694EE166E9BF7243B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 12:01:02 +0000
Manifest this update: Fri 31 Jan 2025 12:01:02 +0000
Manifest next update: Sat 01 Feb 2025 12:01:02 +0000
Files and hashes: 1: RbRcN6wl0nEFVsWYx8c9XyFYSpY.roa (hash: BVR+Y8S7WJeuusRjWoFe5ZeYBx8jVE+CDBxd/rFYYkU=)
2: TRMSiBUQNXRBfKenBBLaOrO4RRE.crl (hash: VFiQQdeEpgMETO9u+5rDx3+RTdlWRhtTNapMQp8oZO8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:65:a1:62:9e:00:69:4e:e1:66:e9:bf:72:43:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d13128815103574417ca7a70412da3ab3b84511
Validity
Not Before: Jan 31 12:01:02 2025 GMT
Not After : Feb 1 12:01:02 2025 GMT
Subject: CN=ad335032adaf8f82d9aaa121f8336e4e81b22101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:54:ba:12:61:41:40:fa:4a:61:7d:d9:96:2d:
91:75:3a:16:6a:00:85:b5:5f:ba:e5:79:b3:e4:25:
cd:4d:2f:bb:a3:0b:fb:e3:fe:15:30:1d:47:2c:3a:
10:41:cd:7e:d9:4a:ce:86:f6:5b:8f:3b:2f:f4:c1:
8a:be:d4:a5:13:3b:96:14:a8:6f:80:00:b8:ea:07:
84:49:f6:c1:3e:96:c1:d7:b0:c3:e4:d8:7d:5a:4d:
d1:db:dd:d0:38:ae:08:d7:b3:dd:be:e3:41:9b:07:
24:d9:61:34:8e:67:d8:ee:a4:f8:2f:25:03:eb:89:
5a:b3:16:65:c0:40:e0:2a:69:97:4b:bb:e3:83:14:
41:16:cd:b6:77:cc:8c:15:66:04:7e:3b:ea:40:77:
19:47:d1:01:67:5b:ea:0f:6c:35:21:12:d3:50:c7:
33:53:93:b1:29:a2:df:98:ca:d8:6e:15:74:8b:d7:
04:a7:fd:9a:c5:77:7e:3c:ed:bb:d4:3f:4d:e2:10:
06:88:65:96:dd:87:d0:11:86:a6:e0:d5:18:8f:c9:
27:e3:fb:49:8a:f1:59:fa:10:b7:e1:27:47:52:9e:
09:ae:32:c9:e1:b6:e9:97:ef:46:c7:35:22:07:6f:
7f:7f:79:1f:84:b4:90:0c:16:5b:19:70:14:47:ff:
69:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:33:50:32:AD:AF:8F:82:D9:AA:A1:21:F8:33:6E:4E:81:B2:21:01
X509v3 Authority Key Identifier:
keyid:4D:13:12:88:15:10:35:74:41:7C:A7:A7:04:12:DA:3A:B3:B8:45:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRMSiBUQNXRBfKenBBLaOrO4RRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/faffc2-9517-4d18-8993-f55ea48ce75a/1/TRMSiBUQNXRBfKenBBLaOrO4RRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e5:da:c7:fc:5a:0e:1c:13:77:07:4f:e7:71:54:88:5d:00:
66:0b:66:fa:7b:aa:0f:d4:1c:19:7f:71:06:a3:60:cc:38:f7:
6e:d9:34:08:98:1b:b2:17:32:7d:32:f4:86:13:ef:eb:4e:2f:
ad:1a:5a:dd:fd:6e:c5:ae:d2:37:a5:1c:19:8f:98:f6:fe:d2:
8c:ac:ed:af:af:49:81:3f:32:71:df:fc:39:59:02:12:0a:3f:
6f:14:47:99:d0:30:87:6c:1c:60:d8:ea:d7:a6:71:d6:cd:f1:
9a:91:18:5b:27:27:a2:a6:56:78:dd:d8:b3:d3:a7:47:4a:d2:
27:ad:ae:61:6f:23:ab:ad:f8:e1:66:98:c9:ad:9e:6d:e7:79:
b3:48:64:45:1d:8e:b8:c8:ed:ea:d0:b8:00:5a:3b:1e:58:d0:
2d:26:91:74:a3:27:94:e6:56:6b:a5:10:eb:87:8c:35:90:07:
ee:dc:cd:4e:3b:aa:7d:f1:43:2c:8f:90:f0:6d:c3:b8:a7:12:
bd:a1:d5:5f:f8:0d:3a:3c:0b:d7:1a:bb:e7:e1:12:7d:76:a5:
16:eb:29:2a:8b:f8:5a:47:8e:2c:cc:48:2c:41:ea:a8:e7:1f:
f4:10:1d:1d:4f:aa:65:dc:6c:c2:2d:fd:fd:38:a0:d7:1c:71:
d2:cd:50:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:34:43 2025 by rpki-client