Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.mft
File: TqcPEdltXfB9x3s-04WTOZ0_Uao.mft (raw, json)
Hash identifier: VFG6tsbA1scAB+xr1CsBO8zbEM2mrXGsMsd39shBQBw=
Subject key identifier: 52:B5:76:27:62:68:EB:22:48:B8:61:4C:B7:73:99:99:87:D9:56:11
Authority key identifier: 4E:A7:0F:11:D9:6D:5D:F0:7D:C7:7B:3E:D3:85:93:39:9D:3F:51:AA
Certificate issuer: /CN=4ea70f11d96d5df07dc77b3ed38593399d3f51aa
Certificate serial: 0195EB011D021547B9988675873339C15A51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqcPEdltXfB9x3s-04WTOZ0_Uao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.mft
Manifest number: 10CE
Signing time: Mon 31 Mar 2025 07:01:13 +0000
Manifest this update: Mon 31 Mar 2025 07:01:13 +0000
Manifest next update: Tue 01 Apr 2025 07:01:13 +0000
Files and hashes: 1: TqcPEdltXfB9x3s-04WTOZ0_Uao.crl (hash: XdqZN1ZfodIk67LnpB7NpFUUBXfHpBzA76M9FacZ3kU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:eb:01:1d:02:15:47:b9:98:86:75:87:33:39:c1:5a:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea70f11d96d5df07dc77b3ed38593399d3f51aa
Validity
Not Before: Mar 31 07:01:13 2025 GMT
Not After : Apr 1 07:01:13 2025 GMT
Subject: CN=52b576276268eb2248b8614cb773999987d95611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:92:2d:fc:5c:e5:78:2e:c1:df:4b:83:98:e2:
ec:b6:5d:ba:db:ec:e5:2f:63:17:86:2d:05:e2:69:
14:2f:f8:a8:ad:94:49:b2:80:f1:78:f8:5d:57:30:
67:a5:e7:44:eb:ac:ed:c2:25:67:73:27:57:55:41:
94:0f:48:d4:8e:ce:d2:02:b2:af:5c:78:5a:fe:cb:
e4:d1:d5:e1:bd:d4:c5:f2:f6:bb:d3:56:cd:9d:6e:
e6:2f:65:dd:9c:fa:55:eb:ba:ac:84:5d:aa:55:ea:
3a:ca:09:03:46:04:a6:b2:32:84:6e:8f:e7:b5:12:
28:6e:e2:cd:6a:27:f2:64:23:0f:56:31:03:2d:9c:
4c:48:eb:71:9d:64:56:f2:94:f4:bb:09:8f:e3:9e:
dc:6e:0e:af:84:1c:f7:b8:da:ec:9f:87:b2:db:72:
35:9a:d5:ba:30:f4:bd:aa:02:66:c0:fb:d1:36:f2:
2f:a9:5a:5f:e7:78:d7:31:65:62:84:90:d5:cd:88:
c9:28:2e:6b:79:e4:b1:8b:f6:9f:ae:54:af:3f:e3:
fe:78:11:54:59:59:21:a8:b2:f1:3b:c2:0c:97:a1:
82:d7:f4:45:2f:fa:14:76:08:32:a2:2c:af:93:20:
34:5f:f5:24:40:5e:c3:3b:f1:fa:c3:e3:2c:7b:0b:
c2:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:B5:76:27:62:68:EB:22:48:B8:61:4C:B7:73:99:99:87:D9:56:11
X509v3 Authority Key Identifier:
keyid:4E:A7:0F:11:D9:6D:5D:F0:7D:C7:7B:3E:D3:85:93:39:9D:3F:51:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqcPEdltXfB9x3s-04WTOZ0_Uao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:bf:cd:3c:c1:27:91:ac:95:89:0e:28:02:a4:bd:c1:e7:d7:
a8:28:cd:eb:47:37:cb:5e:3c:30:fe:d3:30:ca:c5:af:bf:a4:
af:82:7e:65:76:1f:75:32:2e:d1:0f:e6:11:82:80:6e:37:ba:
23:cb:ab:19:99:f3:77:ce:96:29:14:b5:d6:e1:af:5b:77:2f:
39:a1:26:a0:6f:56:47:65:65:ca:90:19:64:30:5e:37:62:58:
80:4e:79:40:5f:84:39:9c:13:5c:14:d7:fb:f3:a0:9c:18:2e:
99:33:2b:cd:17:11:2b:99:97:a4:3b:45:33:61:40:de:fe:97:
81:1a:42:f3:e8:60:97:c4:cf:09:10:f2:b2:50:00:43:f9:84:
d1:2a:91:96:88:98:d3:30:d8:53:2d:d8:7b:9b:1e:c0:40:d7:
ee:d1:ee:23:4b:a5:5f:e9:cd:d3:8c:a3:13:bf:7b:1d:09:ff:
6f:05:d3:52:db:e8:02:1c:3f:fa:5d:8f:8d:02:c1:d7:d8:ad:
ea:8a:d9:80:93:11:f1:c3:b8:ef:d2:4b:80:fb:de:ad:c8:81:
fb:19:30:79:cb:98:f0:45:0e:46:9d:ce:30:5a:37:80:f7:f7:
18:89:31:5c:31:f9:1d:50:8e:c7:68:66:89:f7:fa:2b:9a:80:
bf:aa:79:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 16:33:06 2025 by rpki-client