Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
File: TLIktT7JyLF_MYlbFqjUVx8OaXA.mft (raw, json)
Hash identifier: sX0kMZTbCATxInhP7ae/jKF+7uRg1snbgkj33rOtAbA=
Subject key identifier: 23:CF:1F:9F:4E:57:F1:5D:51:2D:2F:75:28:41:C9:01:1F:E4:20:2A
Authority key identifier: 4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70
Certificate issuer: /CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970
Certificate serial: 0194BBCE6F54F22DD722364B0A8FCCA00A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
Manifest number: 01C4
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: M1M7HuPtGiosGSo4FBz1zc0zdo4.roa (hash: NcnqoCTtbPhCjxo06sSrzfv3k+hjFXX2MJeaGNHx2bI=)
2: TLIktT7JyLF_MYlbFqjUVx8OaXA.crl (hash: PZKOTgWwhiRmCDuMhJuwSTQBfdCJZoGUfvXdi07IF7I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6f:54:f2:2d:d7:22:36:4b:0a:8f:cc:a0:0a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cb224b53ec9c8b17f31895b16a8d4571f0e6970
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=23cf1f9f4e57f15d512d2f752841c9011fe4202a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:32:05:9d:ec:a9:f7:88:98:4d:d9:0b:b5:31:
ca:47:44:c4:fd:d0:21:cf:11:2c:7c:08:9a:9c:db:
c9:9c:81:ed:00:6a:f1:4b:3f:a7:86:1c:00:44:de:
e0:01:cb:53:39:8e:ef:3c:44:d2:39:b3:de:a4:69:
ba:c1:ba:0b:45:32:d9:7b:c0:c4:a5:5a:ee:14:b5:
23:52:bf:b2:36:7e:38:d8:bf:fa:e6:75:25:1c:8d:
f7:c0:d9:55:e4:6b:03:87:25:84:ad:bf:33:f9:48:
fb:21:58:3b:a7:37:eb:a3:01:9c:c5:69:94:42:57:
cd:f5:d2:47:b8:05:72:ab:f2:b5:d3:68:12:79:5c:
83:3d:c1:75:90:f9:34:9b:5f:32:c6:e9:ad:4e:3b:
43:5c:7f:cb:82:5a:35:9b:f3:02:6d:bf:8e:8c:1c:
8d:6c:df:18:0c:2e:5c:91:25:67:5a:4c:a6:c1:b2:
a3:2e:18:53:f4:ed:ff:81:b9:26:7e:a6:15:9f:cb:
63:8b:a4:82:dc:6d:a4:5f:d4:f3:4a:21:bd:ca:18:
7d:8f:b1:cf:87:2f:45:42:22:79:f7:03:fa:32:d9:
1d:fe:2f:34:d3:7b:e3:ed:9b:f7:4b:c8:99:2d:f9:
7b:d8:07:3f:ee:ca:22:b0:9d:6d:f9:ae:02:35:ca:
62:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CF:1F:9F:4E:57:F1:5D:51:2D:2F:75:28:41:C9:01:1F:E4:20:2A
X509v3 Authority Key Identifier:
keyid:4C:B2:24:B5:3E:C9:C8:B1:7F:31:89:5B:16:A8:D4:57:1F:0E:69:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TLIktT7JyLF_MYlbFqjUVx8OaXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/e2aac5-c04d-4ae0-8bf3-9e3d89d9e617/1/TLIktT7JyLF_MYlbFqjUVx8OaXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:d7:2b:76:df:5f:38:75:a7:71:a4:42:f0:0d:9d:27:7d:c8:
7f:01:bb:d2:34:b0:2f:f2:46:18:92:5b:89:c2:77:85:4f:b6:
8d:81:a7:27:d8:19:97:d6:eb:02:48:3d:44:0c:e6:5f:9d:16:
6a:85:a0:00:84:f8:64:d4:6e:ec:26:23:42:91:2c:84:5a:01:
86:dd:8b:7d:63:98:af:f8:4a:d0:61:6b:c5:64:52:f6:46:70:
82:7d:87:9f:1a:07:72:4f:5d:73:b2:1d:7a:3f:96:65:92:71:
db:0b:f9:b3:01:03:f2:0b:da:ce:d0:09:d5:f1:e2:d2:ee:ec:
8d:ac:83:98:d9:01:3b:c0:e0:dd:66:65:ca:3b:4f:3b:a5:84:
a3:34:35:bb:3e:10:27:92:b3:72:c5:d6:4a:4b:0b:df:7d:ef:
d3:5f:67:64:8c:90:c3:bb:13:79:51:b8:e9:f7:53:b2:1e:12:
df:5e:03:e2:63:71:29:42:1c:6d:41:21:25:85:ca:3c:f6:2a:
8f:ba:9d:2a:b3:76:a0:92:11:78:5b:70:02:aa:95:6a:e5:5c:
c7:e2:eb:8d:ba:ef:92:5d:a1:21:ee:ff:e5:3d:ca:fd:68:09:
f3:07:41:18:82:e2:a3:d3:64:5e:ae:84:ed:e3:1a:f7:f8:da:
08:85:cd:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:59 2025 by rpki-client