Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/be8143-a408-49ab-a147-cda117fe830d/1/TATgEjGx24ILH11UKDSrBfaT_Xg.mft
File: TATgEjGx24ILH11UKDSrBfaT_Xg.mft (raw, json)
Hash identifier: 8tl303/BMtzK5ZVgjCSGjb3St2ef4fHqqSoFFmMckWU=
Subject key identifier: 7A:1E:C7:20:4E:68:BA:76:23:CA:59:E4:93:9C:C6:A8:72:FE:E6:46
Authority key identifier: 4C:04:E0:12:31:B1:DB:82:0B:1F:5D:54:28:34:AB:05:F6:93:FD:78
Certificate issuer: /CN=4c04e01231b1db820b1f5d542834ab05f693fd78
Certificate serial: 01941995D6684BB3430EB366ECA76C7030FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TATgEjGx24ILH11UKDSrBfaT_Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/be8143-a408-49ab-a147-cda117fe830d/1/TATgEjGx24ILH11UKDSrBfaT_Xg.mft
Manifest number: 13D8
Signing time: Mon 30 Dec 2024 22:00:37 +0000
Manifest this update: Mon 30 Dec 2024 22:00:37 +0000
Manifest next update: Tue 31 Dec 2024 22:00:37 +0000
Files and hashes: 1: TATgEjGx24ILH11UKDSrBfaT_Xg.crl (hash: S2kaLRve5wD8vquU6SjN974SxqHuZbD9zcEAMenk51w=)
2: YOGFlmlV2_WJqXJipmKxo-UT7Fs.roa (hash: yldbSa1BsIMdKFPk5mMeltr1Ebyxjw7wj9onkWkP/p8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:19:95:d6:68:4b:b3:43:0e:b3:66:ec:a7:6c:70:30:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c04e01231b1db820b1f5d542834ab05f693fd78
Validity
Not Before: Dec 30 22:00:37 2024 GMT
Not After : Dec 31 22:00:37 2024 GMT
Subject: CN=7a1ec7204e68ba7623ca59e4939cc6a872fee646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:dd:b0:81:a6:63:b9:ed:66:d7:28:b3:06:60:
a2:4b:74:45:95:94:7e:20:df:2e:80:87:4c:d6:ab:
81:de:d1:99:b0:43:b5:af:39:63:0d:3c:8e:9e:71:
69:3d:de:8e:88:27:3e:bf:92:af:9b:e5:8c:f3:38:
55:e5:d7:90:59:22:f7:16:12:b7:bf:84:10:ac:c7:
fc:09:6d:5d:3d:aa:34:5a:02:c3:6b:e1:9f:a2:5a:
44:f4:b8:fe:05:0c:9e:44:fc:2a:c2:26:f7:1f:1d:
4d:8a:04:50:0f:1b:a7:04:eb:b5:09:cc:13:5a:3d:
fb:99:00:ee:8f:0d:ee:b8:0d:f4:0d:27:ff:a6:16:
a7:ad:c9:62:0e:79:3a:06:45:9c:54:11:5c:d9:cd:
57:c5:64:30:6b:40:b3:04:bd:d7:a4:58:d5:fc:ed:
5f:1c:ac:48:d7:b5:75:a4:e1:c1:58:e0:e5:34:65:
d4:2d:6e:b8:05:03:36:df:22:83:a9:79:91:0f:68:
1d:bc:58:06:87:e9:de:a5:98:af:8c:c8:c8:bd:85:
f1:a2:15:4a:46:dc:0d:16:43:08:03:ab:2f:da:93:
61:52:c8:bf:0d:3a:b2:7f:11:98:de:e1:bf:10:bf:
1b:e8:9c:3c:80:c7:7e:ca:c2:00:06:7a:80:c1:aa:
42:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:1E:C7:20:4E:68:BA:76:23:CA:59:E4:93:9C:C6:A8:72:FE:E6:46
X509v3 Authority Key Identifier:
keyid:4C:04:E0:12:31:B1:DB:82:0B:1F:5D:54:28:34:AB:05:F6:93:FD:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TATgEjGx24ILH11UKDSrBfaT_Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/be8143-a408-49ab-a147-cda117fe830d/1/TATgEjGx24ILH11UKDSrBfaT_Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/be8143-a408-49ab-a147-cda117fe830d/1/TATgEjGx24ILH11UKDSrBfaT_Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:4a:ac:f5:be:df:58:4d:58:2f:82:89:88:cd:3d:04:b1:07:
c8:ee:cc:76:4e:4c:64:7c:72:08:52:f2:98:f0:86:85:d4:a7:
4d:5b:51:1b:23:bd:78:b8:de:b1:1c:f6:ac:f5:e5:30:32:6a:
4e:db:90:5e:77:d4:4c:64:7c:8a:66:7b:d8:7c:b3:f0:68:0a:
ee:89:2d:98:ed:4c:a0:97:83:2d:da:7d:1e:8f:c0:ee:30:63:
3b:b6:b4:d3:f3:a8:08:bf:54:c8:e8:c9:18:4f:f3:64:a0:66:
88:ac:9a:f4:e5:d2:93:f3:56:b5:cd:ba:bd:36:3b:98:98:64:
ff:15:11:a5:c1:bd:78:7f:08:3d:07:aa:26:71:f0:9a:6c:98:
39:42:96:1a:a9:08:ee:2e:b6:33:e9:b8:c8:69:2a:46:6e:78:
e4:f2:ab:bb:fa:7f:53:89:3e:3d:3f:ab:56:d2:dc:97:2d:7a:
e9:8e:20:b7:ea:24:ce:86:6c:d2:f2:bc:e7:e6:25:76:ab:32:
42:09:ae:b5:c5:4e:25:2c:58:49:b4:73:52:1b:bf:7e:ae:71:
7f:82:6c:19:2a:e6:7a:d7:65:9e:e9:dc:dc:06:22:89:b2:cb:
c5:27:65:ab:6d:4d:93:a3:3b:5d:d0:71:26:9d:3f:8f:7e:e6:
f8:b2:55:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 15:55:46 2025 by rpki-client