Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
File: TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft (raw, json)
Hash identifier: DyvTdqGRkr2APTzbk+3sYLG6TSL8V1gbgW45+NNRmDg=
Subject key identifier: 9C:E9:05:1B:1C:44:F5:B4:3D:B7:7D:5F:40:39:5A:7F:1B:56:D7:3A
Authority key identifier: 4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
Certificate issuer: /CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Certificate serial: 0194BD17E0EF6415EC3036D48CEB477AD8CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
Manifest number: 10DE
Signing time: Fri 31 Jan 2025 16:00:46 +0000
Manifest this update: Fri 31 Jan 2025 16:00:46 +0000
Manifest next update: Sat 01 Feb 2025 16:00:46 +0000
Files and hashes: 1: 7mVZwCskyJUQ7gPBL_F_4nbKWrk.roa (hash: Spe2b/mS1SAvEHCJH7XwFJrcW3b1Bvz1bY1SvDC0yz8=)
2: TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl (hash: 7EYbO8xjPynkAXJ3IBUUHouqFY16GtvCmBmqp5DSxGU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:e0:ef:64:15:ec:30:36:d4:8c:eb:47:7a:d8:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c6af986b241d9d27ec724adfabf06d5d231793f
Validity
Not Before: Jan 31 16:00:46 2025 GMT
Not After : Feb 1 16:00:46 2025 GMT
Subject: CN=9ce9051b1c44f5b43db77d5f40395a7f1b56d73a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:e0:85:94:8a:d6:2c:87:79:bb:26:ad:ef:
af:14:78:59:70:66:02:95:ac:b5:63:68:57:39:6e:
8f:b1:ee:06:1b:7d:02:1b:63:a5:bc:32:28:9a:de:
de:6f:26:bc:37:d7:5b:4a:d7:16:b5:98:a7:63:b7:
e0:7b:1c:f5:2d:1f:93:9a:48:06:b4:bb:e3:d3:59:
51:c7:b1:30:c6:c1:4f:1e:c5:fd:24:f2:0c:45:55:
d1:07:e9:bc:4b:bd:42:c2:08:a4:09:78:67:ad:98:
fe:9b:84:13:7c:cb:aa:a9:a0:be:2e:8c:51:85:2b:
40:99:ca:59:7a:e0:7e:55:0e:43:32:9a:76:20:51:
33:9b:02:40:5d:08:db:2b:ca:a0:36:2e:e4:d2:36:
28:2e:c1:78:8f:15:7c:af:88:89:15:8a:b6:c1:50:
38:c1:db:6e:b2:0e:64:c6:ee:7e:de:15:dc:de:a2:
f4:44:dd:9b:81:ea:63:61:e2:11:09:f3:93:b8:f4:
b9:bf:a1:36:93:61:a9:66:40:e7:09:e3:59:e7:34:
1f:df:f2:30:9b:85:49:1d:4e:50:38:82:c4:ea:1c:
d9:04:de:a2:b1:3c:7b:f5:2c:ae:e0:a7:15:09:17:
c2:bf:7f:25:ee:8f:f4:3a:47:e0:40:a3:6a:ef:2c:
82:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:E9:05:1B:1C:44:F5:B4:3D:B7:7D:5F:40:39:5A:7F:1B:56:D7:3A
X509v3 Authority Key Identifier:
keyid:4C:6A:F9:86:B2:41:D9:D2:7E:C7:24:AD:FA:BF:06:D5:D2:31:79:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGr5hrJB2dJ-xySt-r8G1dIxeT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/dbc472-6e0a-411c-af8f-0888eb42744c/1/TGr5hrJB2dJ-xySt-r8G1dIxeT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:76:63:e1:89:ce:97:e0:7d:6c:76:9a:7e:8c:e7:2f:66:58:
32:66:b3:47:32:6f:33:31:da:f3:a0:c3:42:8e:d6:9c:f6:b7:
d2:7d:41:84:82:86:9b:e3:e5:87:3a:ec:85:98:c1:da:19:54:
18:4f:ab:70:13:b2:a9:1e:a3:7c:30:03:e6:1e:ab:e2:91:23:
4c:98:1b:e3:d7:df:47:79:32:2c:b6:ff:dd:6d:df:c7:d3:9a:
50:1a:09:73:e7:98:f9:80:5e:5f:03:10:d5:6c:48:9e:f2:03:
1c:46:56:74:41:23:f4:ae:22:ac:35:e1:95:7c:e9:ad:f0:95:
76:b3:70:e3:dd:36:88:1f:9e:97:ac:cf:ec:b5:df:7e:d2:d8:
0b:24:42:f2:c8:05:93:16:62:65:8c:54:8f:0f:15:04:2f:c2:
23:3a:6d:c7:e7:be:5b:00:45:d3:c2:8a:0b:22:22:d4:f4:cc:
7c:6e:dd:a7:8a:e2:8e:dc:eb:2e:fc:07:78:57:d6:e7:f2:ff:
8d:0f:8c:1a:85:8b:b3:5a:4d:10:a4:76:dc:4a:17:3b:34:60:
fa:c8:0b:47:e3:14:24:a5:32:5e:2d:b8:75:61:8c:d1:6a:2f:
2d:4b:94:f0:91:aa:9a:82:50:fc:77:18:43:c7:23:bc:eb:0c:
e4:16:ec:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:16:29 2025 by rpki-client