Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
File: TOmGBryaXUQHT_jL7cvbz8NfBWI.mft (raw, json)
Hash identifier: XtGizzjn/DlR127f/M6iKFUeZxM4qcd2f8d2hPSo3Uc=
Subject key identifier: 66:2E:79:6C:12:EE:9B:53:A9:39:4C:62:15:1B:4F:59:E0:10:28:40
Authority key identifier: 4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
Certificate issuer: /CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Certificate serial: 0194BD4EB2B3F415B2659B8D82EA604336E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:38 +0000
Manifest this update: Fri 31 Jan 2025 17:00:38 +0000
Manifest next update: Sat 01 Feb 2025 17:00:38 +0000
Files and hashes: 1: TOmGBryaXUQHT_jL7cvbz8NfBWI.crl (hash: D8PfydFtNIRC0zJHXhzLrnMlDeBc5s3UpfMpitM3TMk=)
2: _2jPSPlgYJsD4ywwlbMtnQzhjck.roa (hash: dPt4vhrAZj1gNIW23Wk2/nT1GhYcZvAFuVHXtMeqVMs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:b2:b3:f4:15:b2:65:9b:8d:82:ea:60:43:36:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce98606bc9a5d44074ff8cbedcbdbcfc35f0562
Validity
Not Before: Jan 31 17:00:38 2025 GMT
Not After : Feb 1 17:00:38 2025 GMT
Subject: CN=662e796c12ee9b53a9394c62151b4f59e0102840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:03:3c:7f:8b:2b:e6:4b:e0:3f:2d:5d:e0:cb:
4b:30:53:49:ec:5a:e2:c4:62:ce:36:5e:2f:4d:bf:
7e:ce:9f:26:a3:4a:9e:79:73:ca:38:f3:d7:70:6c:
f2:4f:2a:b9:0f:4f:f3:28:8b:36:08:7f:de:35:3f:
2d:fb:a2:71:cc:60:c5:a0:eb:d4:22:c8:9d:05:b2:
46:ce:41:2d:5f:c0:cc:f3:bc:db:49:87:68:15:22:
7c:c0:32:fc:bd:5f:34:91:dc:22:0b:45:db:ba:bc:
ba:2b:27:d3:ab:6a:34:cb:b2:25:92:fb:dd:e3:60:
a1:b2:00:e0:3f:3d:3a:8f:6e:8e:41:3f:4c:29:f2:
c2:9a:18:71:8e:57:46:69:a9:bf:f6:24:16:9b:a6:
5c:f3:13:00:4c:7a:3c:65:87:3a:fe:21:d0:ae:c2:
1d:4a:f4:31:2a:12:4e:ee:1d:a6:ae:c7:ef:15:bb:
b7:bd:77:08:15:b0:0a:4e:2a:36:f3:ac:de:7e:9d:
71:5a:26:8a:1a:e6:98:f4:8c:37:a9:b3:75:4c:4a:
a9:4b:21:3f:b6:ad:93:38:88:38:64:12:7c:7d:ab:
d6:02:6c:21:b0:b4:cd:f2:ae:fa:04:90:57:6c:ea:
57:a7:3c:06:1b:c1:a9:a7:b9:c0:52:78:da:97:2c:
bd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:2E:79:6C:12:EE:9B:53:A9:39:4C:62:15:1B:4F:59:E0:10:28:40
X509v3 Authority Key Identifier:
keyid:4C:E9:86:06:BC:9A:5D:44:07:4F:F8:CB:ED:CB:DB:CF:C3:5F:05:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOmGBryaXUQHT_jL7cvbz8NfBWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/179ed5-d253-4255-9017-88df125ba663/1/TOmGBryaXUQHT_jL7cvbz8NfBWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:9d:23:6e:d9:ba:4a:a3:f3:5b:72:13:14:7a:92:a3:ca:7a:
35:0e:85:62:50:5e:0d:c8:e6:75:4e:99:8f:94:6c:af:b3:df:
30:ca:46:9d:2c:52:b1:be:5c:d9:04:29:0a:2a:73:e9:3f:ae:
2a:86:96:72:41:33:ab:cf:4c:4c:8e:6f:1f:f9:2e:77:32:ed:
a9:dd:aa:6b:6e:02:4e:d1:49:5a:b6:6b:01:10:eb:9d:40:8c:
a1:a9:a4:4f:db:04:af:0f:ad:ce:d4:d1:c6:dd:58:90:c2:5d:
fe:4c:35:66:e5:b5:67:80:d3:15:df:f4:43:d6:f0:3a:28:d2:
df:3e:b4:c4:8b:3d:6d:db:5e:31:3b:25:91:4d:40:e7:0c:4a:
33:20:5b:45:86:fa:da:95:13:69:8c:61:9d:94:9c:96:e0:da:
b8:87:d3:f7:1a:6e:43:6e:33:8c:72:73:34:12:0e:77:e2:37:
87:30:f2:3b:cb:85:75:94:30:6e:52:77:47:26:d4:3b:a6:c9:
80:74:92:8f:47:ff:4b:c9:ac:e6:5a:03:92:30:a5:60:73:01:
05:e6:43:06:b7:de:6b:d3:47:4d:bc:b1:f0:99:ea:d5:7d:dc:
e4:40:34:e2:7f:cc:26:36:72:cf:88:84:52:45:98:28:c3:f7:
ed:1b:34:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:31 2025 by rpki-client