Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/TK8PdjWpbv9bc_IW2P53zE4qCo4.mft
File: TK8PdjWpbv9bc_IW2P53zE4qCo4.mft (raw, json)
Hash identifier: lUU9SmAVYMVAlqOvX+wqIcZ7LkSMzGPa7+vmz4/BWAE=
Subject key identifier: CC:5E:3C:6C:39:11:54:D2:01:1A:72:32:E7:4B:0E:EF:84:82:04:E2
Authority key identifier: 4C:AF:0F:76:35:A9:6E:FF:5B:73:F2:16:D8:FE:77:CC:4E:2A:0A:8E
Certificate issuer: /CN=4caf0f7635a96eff5b73f216d8fe77cc4e2a0a8e
Certificate serial: 0191D63D2E3084C09BE684DD76CDA09BA45C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK8PdjWpbv9bc_IW2P53zE4qCo4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/TK8PdjWpbv9bc_IW2P53zE4qCo4.mft
Manifest number: 12A9
Signing time: Mon 09 Sep 2024 10:03:39 +0000
Manifest this update: Mon 09 Sep 2024 10:03:39 +0000
Manifest next update: Tue 10 Sep 2024 10:03:39 +0000
Files and hashes: 1: TK8PdjWpbv9bc_IW2P53zE4qCo4.crl (hash: TVeTlTbGXQafzZEhV+rDBXgCvKNox9jJ7o/Zpbu1ksU=)
2: uajxMGGWx4MGmHew-WmC7J6FOj8.roa (hash: HNTeR/DKXB6ff19WPa5OESRqXraW7+ds1xJeftGClJ8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:d6:3d:2e:30:84:c0:9b:e6:84:dd:76:cd:a0:9b:a4:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4caf0f7635a96eff5b73f216d8fe77cc4e2a0a8e
Validity
Not Before: Sep 9 10:03:39 2024 GMT
Not After : Sep 10 10:03:39 2024 GMT
Subject: CN=cc5e3c6c391154d2011a7232e74b0eef848204e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1b:74:26:59:e9:15:a4:6f:c8:23:28:d4:f4:
4a:9e:56:38:7f:dc:58:bf:b9:34:21:85:cb:10:19:
ca:90:52:7c:6c:d8:1d:9a:49:3f:fd:23:73:e8:30:
90:86:f0:ff:96:82:9a:eb:74:dd:7d:c5:43:8e:df:
f2:c2:7b:e4:0d:18:c6:87:a3:f4:ed:c7:50:74:d9:
8d:06:a3:37:8b:05:cc:8b:20:b2:67:9f:09:e9:f9:
d8:8a:79:f9:28:8c:4d:3c:3f:ab:89:bd:66:7f:1a:
ba:1d:1f:09:88:b6:dc:5d:cd:6a:1f:c7:5b:06:71:
eb:52:6a:4f:e3:e2:d2:96:aa:54:e9:e2:e1:5e:67:
80:6d:d9:a0:48:18:fd:b3:06:16:eb:cb:ee:f5:71:
cd:6a:fc:00:b9:78:fb:be:10:90:aa:41:57:b3:ee:
e9:f2:28:66:87:91:d6:d5:ba:1a:05:04:6e:eb:81:
b4:28:85:02:7e:a2:f2:9c:99:be:a0:04:19:85:00:
31:e5:55:38:eb:ec:1a:05:c6:5b:9b:61:e3:a6:ec:
88:0f:c5:cb:c8:e6:55:4c:d5:7b:32:38:44:01:a6:
21:24:59:41:bb:66:e3:67:b6:15:b7:f5:ec:7f:13:
33:bd:d3:6f:3a:97:3b:45:14:ac:5a:45:62:d6:98:
30:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:5E:3C:6C:39:11:54:D2:01:1A:72:32:E7:4B:0E:EF:84:82:04:E2
X509v3 Authority Key Identifier:
keyid:4C:AF:0F:76:35:A9:6E:FF:5B:73:F2:16:D8:FE:77:CC:4E:2A:0A:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK8PdjWpbv9bc_IW2P53zE4qCo4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/TK8PdjWpbv9bc_IW2P53zE4qCo4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/06aa59-c694-4d0f-bc36-4fdbcb305d9d/1/TK8PdjWpbv9bc_IW2P53zE4qCo4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:a2:8a:3c:2b:de:f5:56:2b:78:5e:0c:b3:5c:ca:a1:e2:b1:
56:7c:c2:a3:ba:4f:45:8a:b5:ab:d1:cd:56:66:ad:78:f4:45:
6c:da:7d:9c:d7:26:23:15:56:69:a5:a7:fa:b6:24:f8:0f:c2:
48:92:75:a8:32:25:29:c6:ee:37:35:31:05:cf:62:b1:54:d2:
91:8e:26:58:55:86:4a:27:2d:72:3d:90:36:46:dd:28:f0:91:
7b:76:11:87:d4:df:cd:b0:f2:28:c3:bf:4e:bf:0e:af:a7:89:
2b:9f:6c:12:2e:9e:eb:cd:bc:80:b8:4f:36:f3:0d:9a:51:32:
d0:46:7c:36:43:8e:1c:87:6d:a6:4d:85:99:5f:56:bb:0e:f5:
c0:39:e1:44:55:c4:df:77:a3:84:45:7f:f7:1f:09:f9:95:1e:
73:f0:de:5f:bf:07:f3:3a:f6:4e:be:c5:8e:d6:62:70:9d:f8:
51:ed:10:3a:a8:40:a5:8f:b6:35:67:4f:2c:aa:ce:75:56:b9:
7e:ef:c0:3b:9d:07:d8:f9:8b:eb:dd:a1:71:92:c9:f0:fe:9d:
ec:d4:40:ac:90:88:91:c0:9e:29:54:b4:c3:57:44:11:f6:01:
6c:4d:a4:42:44:6a:09:5c:49:70:ac:21:1a:b4:b2:fa:bb:9b:
f4:1a:50:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 19 01:10:13 2025 by rpki-client