Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
File: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft (raw, json)
Hash identifier: pqZNO3M5N3GWK6US1dCwiEWO4TV/9H3cZvx4GR3VJok=
Subject key identifier: 32:C8:8E:58:AC:37:64:A3:07:89:A2:3F:E4:91:57:15:7E:91:29:0A
Authority key identifier: 4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
Certificate issuer: /CN=4d1527d1839bf830360d71590134354e6d904697
Certificate serial: 0194BD4E7E04C40D9416B2712538EBB653E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl (hash: NF0ix4tfi36mKtjvVIYRHTKTVx5dAxRtGodwjzms2Hw=)
2: a6Whh1qMHaCLz9si7bMkIx4xg1Y.roa (hash: R/Syehgq2eEOSio/8bhqr2YXvz+4Ke3qpd0G80XikQo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7e:04:c4:0d:94:16:b2:71:25:38:eb:b6:53:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d1527d1839bf830360d71590134354e6d904697
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=32c88e58ac3764a30789a23fe49157157e91290a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:65:ba:5f:2d:9b:37:bd:94:03:ec:e0:aa:10:
3d:81:d4:8f:a1:37:5a:6e:82:7d:6e:ad:32:25:81:
9a:b5:73:14:8c:73:be:fe:27:a0:2f:e7:2c:6d:3a:
2d:81:41:1a:57:8a:c4:88:01:e9:ea:77:a0:89:bd:
e8:8b:08:e9:f7:0a:c3:e4:0a:9c:c5:36:0e:a2:c5:
b2:4f:5a:cf:0a:4f:18:38:87:bf:be:c5:60:80:8d:
8d:f0:ee:8d:42:25:0a:8c:67:81:9b:8a:4f:77:b0:
11:13:cc:05:58:54:df:8b:0d:e2:93:b8:5e:8a:dd:
39:d1:48:a6:38:13:af:0d:25:2e:fb:1c:2c:36:a3:
a0:c3:c3:e2:97:a2:ff:9b:af:4d:39:be:52:f6:ce:
df:9a:89:53:7e:fb:b1:e0:30:ef:c1:48:b0:8c:28:
23:62:0f:a6:6c:72:59:38:3a:52:27:b3:9d:92:69:
cd:05:15:32:f6:e7:71:8e:b9:c8:a7:d3:d5:2b:dd:
3d:35:f6:51:08:49:b1:d6:72:4c:33:92:b6:b5:5c:
09:3b:64:7b:ad:f7:f4:a6:23:5f:85:d1:a2:9b:88:
30:88:83:f0:53:78:bc:f0:10:92:8c:69:7a:d0:8a:
7e:fe:45:a2:b1:f8:4c:42:57:c0:0d:cd:c8:20:e7:
c1:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C8:8E:58:AC:37:64:A3:07:89:A2:3F:E4:91:57:15:7E:91:29:0A
X509v3 Authority Key Identifier:
keyid:4D:15:27:D1:83:9B:F8:30:36:0D:71:59:01:34:35:4E:6D:90:46:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/309d36-c420-4321-9540-f3df673ea58c/1/TRUn0YOb-DA2DXFZATQ1Tm2QRpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:2e:00:d2:d8:1e:03:94:7e:37:f0:dd:31:89:a5:89:2d:3d:
9a:d7:19:f2:26:d3:f3:00:36:ab:86:4a:33:a2:05:2b:c1:31:
dc:0c:a7:ed:34:42:21:b0:04:ab:a5:74:98:7c:3e:1c:c2:54:
47:d2:12:3a:7d:79:81:3e:23:09:61:7a:be:09:20:d1:6d:d6:
d1:0a:ff:74:ed:ab:14:95:95:62:89:72:03:37:eb:a4:58:a0:
a9:16:66:36:14:a9:6c:cd:a0:8f:56:db:64:2b:c5:85:5c:98:
d9:ee:40:77:98:40:c1:e5:3b:c6:ad:69:0b:75:14:8f:b8:7f:
64:f1:b4:56:3b:42:7a:2e:04:e8:d6:5f:a8:0c:0a:b9:e3:54:
72:8c:36:bf:cd:53:fa:ee:78:18:99:88:c9:c3:38:4f:02:b6:
a7:41:72:4c:08:1e:00:fc:06:50:e5:33:27:5b:ce:14:a1:7a:
32:53:b0:8c:a6:cf:8e:f0:ea:ca:30:12:73:ba:ee:cd:f7:d6:
f6:1b:1d:6a:1e:e6:7b:06:e4:77:7a:e2:13:49:2c:c9:6e:a2:
79:9a:85:7c:36:54:c0:5f:d0:d6:a1:69:cd:d7:60:12:82:1e:
ac:a5:eb:91:43:45:30:31:6f:5a:0f:ff:b8:81:33:cc:fc:c8:
1d:44:8a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:40 2025 by rpki-client