Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
File: TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft (raw, json)
Hash identifier: Rt7u53nSsQ8xoCfP7RRORNMynLbVHCLFCOKiKGC/2AU=
Subject key identifier: BD:D5:BC:DC:BD:C1:78:3C:8A:72:36:60:37:2A:5C:7A:0B:F1:78:EC
Authority key identifier: 4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
Certificate issuer: /CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Certificate serial: 0194BD1757E1EF69F8BD3C38BBD2986D208E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 16:00:11 +0000
Manifest this update: Fri 31 Jan 2025 16:00:11 +0000
Manifest next update: Sat 01 Feb 2025 16:00:11 +0000
Files and hashes: 1: RV8paaJ3goMy9MfTaatO8nD3vp0.roa (hash: e4c5enruS1aSsE+Y/GCFoVHc8KGnXiS/8gSNbBU+Ybc=)
2: TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl (hash: vxJ0CWMJyLUj6oPS2sUYzo90EZYfho1sVdj5FHvhTWU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:57:e1:ef:69:f8:bd:3c:38:bb:d2:98:6d:20:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21cb9b2f8c5de9daa30889d9e2394537ba3e38
Validity
Not Before: Jan 31 16:00:11 2025 GMT
Not After : Feb 1 16:00:11 2025 GMT
Subject: CN=bdd5bcdcbdc1783c8a723660372a5c7a0bf178ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:23:16:f8:96:e9:74:67:2d:07:17:6a:f2:c2:
f7:94:34:5d:46:b4:18:a8:1e:d5:46:48:2b:af:20:
57:1a:cd:b2:cc:db:58:55:81:12:91:0c:c4:7f:a7:
56:04:25:5f:cd:fc:41:6a:53:81:48:d0:ca:e9:4c:
5a:50:c5:2d:bb:1a:fb:ab:e4:cf:b5:b9:b1:22:bb:
4d:b3:30:58:a4:22:ac:e8:10:dc:9c:de:4f:08:e9:
4a:28:bf:87:96:0e:d7:95:6a:f5:28:75:03:c6:a6:
a4:34:89:bf:a1:29:69:a9:17:51:7a:51:77:27:e8:
a6:d3:b3:75:ef:75:a0:2d:70:a4:d7:03:bb:e3:53:
ee:21:a7:9e:bb:25:82:7f:3a:5a:5f:7a:03:54:11:
dc:b8:7a:19:17:57:cd:16:b8:8f:6f:97:f1:19:ce:
56:a2:9e:ed:b9:12:07:8c:1a:37:5c:9f:a5:d1:f7:
a9:fd:cf:0a:c9:a2:ef:88:27:4f:27:47:db:ed:1c:
1b:1d:10:51:b1:9b:e4:03:52:59:d7:b2:e1:c0:4e:
6b:8a:35:5f:96:8a:64:96:4f:d0:89:91:2a:2d:63:
e7:cd:b2:6f:b4:0b:c9:36:9b:58:bd:2d:be:c7:38:
a8:91:1d:53:63:f1:27:a7:28:a9:e9:55:94:14:ea:
cc:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D5:BC:DC:BD:C1:78:3C:8A:72:36:60:37:2A:5C:7A:0B:F1:78:EC
X509v3 Authority Key Identifier:
keyid:4D:21:CB:9B:2F:8C:5D:E9:DA:A3:08:89:D9:E2:39:45:37:BA:3E:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSHLmy-MXenaowiJ2eI5RTe6Pjg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d994dd-de52-4612-b0fe-14987243ac56/1/TSHLmy-MXenaowiJ2eI5RTe6Pjg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:ed:15:9a:0e:12:2f:66:22:c9:72:cd:44:62:08:48:a3:dd:
5c:61:6f:32:a7:ba:ce:78:25:d7:e9:42:14:e9:eb:cb:64:f3:
84:84:5a:6b:88:8d:6a:c6:d3:2e:a8:8a:62:5c:c4:bf:e7:48:
1e:b5:46:af:c5:31:60:ad:1d:fc:b7:ce:1e:5a:6e:59:4d:60:
8d:1f:93:69:9e:dc:52:a3:52:6d:33:0d:ed:5a:29:5f:3e:83:
c2:1b:a0:4d:c2:a6:b0:e4:98:58:10:7f:fb:d6:92:97:4d:6b:
62:1d:9c:a9:31:46:f3:be:ba:e9:85:e6:3e:78:f6:b6:cd:b4:
3e:fe:8a:7b:7a:c5:a7:09:0b:96:19:15:ee:b7:e7:df:9a:c8:
7c:c4:97:2a:d7:dd:b3:ec:4a:aa:55:3a:a1:c7:b2:7a:f2:9b:
41:83:e9:c9:39:91:39:a9:7b:9f:bb:53:f2:e8:1c:19:ab:d4:
4e:e7:fa:1c:e9:f0:0e:00:f6:8f:0a:fe:e3:fb:02:dd:ab:b1:
c4:a4:2f:cc:a9:fa:64:a3:4a:67:38:8c:89:f4:d2:de:ed:58:
a6:57:7f:2f:5c:e6:41:bd:c5:c8:d8:18:4b:ed:d1:72:60:de:
51:90:d9:f0:e9:9a:18:03:63:a5:ee:be:9a:83:9d:92:04:40:
95:70:ad:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:49 2025 by rpki-client