Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.mft
File: TqcPEdltXfB9x3s-04WTOZ0_Uao.mft (raw, json)
Hash identifier: 0aPTR5uwuDuB2PMJJHBvEW76HEy4r3VbtuxKUKzVX24=
Subject key identifier: 5D:7B:BA:48:FA:DC:4F:82:BD:9E:C7:3C:84:98:B1:EB:0B:9C:1C:BA
Authority key identifier: 4E:A7:0F:11:D9:6D:5D:F0:7D:C7:7B:3E:D3:85:93:39:9D:3F:51:AA
Certificate issuer: /CN=4ea70f11d96d5df07dc77b3ed38593399d3f51aa
Certificate serial: 0195E159E4D78824322917D0526B8209929D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqcPEdltXfB9x3s-04WTOZ0_Uao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.mft
Manifest number: 10C9
Signing time: Sat 29 Mar 2025 10:01:59 +0000
Manifest this update: Sat 29 Mar 2025 10:01:59 +0000
Manifest next update: Sun 30 Mar 2025 10:01:59 +0000
Files and hashes: 1: TqcPEdltXfB9x3s-04WTOZ0_Uao.crl (hash: oB88JrYEHO0Tajtb40DiGBej2Ash9Po8LodbwAPyFlk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e1:59:e4:d7:88:24:32:29:17:d0:52:6b:82:09:92:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea70f11d96d5df07dc77b3ed38593399d3f51aa
Validity
Not Before: Mar 29 10:01:59 2025 GMT
Not After : Mar 30 10:01:59 2025 GMT
Subject: CN=5d7bba48fadc4f82bd9ec73c8498b1eb0b9c1cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:df:d2:ca:b9:c4:59:39:e9:fb:a7:b8:d8:33:
c9:83:87:17:59:e1:57:76:13:69:11:07:c2:69:40:
f5:9e:d6:99:4c:21:59:a5:80:bf:c4:06:fd:32:35:
e5:c3:c7:e4:a8:af:19:af:94:a9:45:32:38:2a:94:
68:68:b3:57:5c:29:94:61:e9:1b:78:19:a2:f9:51:
a4:6e:9c:e8:33:0e:92:80:c9:1e:35:73:7c:f9:8d:
5b:b9:4e:03:6f:0a:cb:12:35:6a:6c:37:50:9f:d0:
17:a8:6a:94:e6:7b:a2:35:4d:09:04:82:3b:24:fa:
d5:42:96:a5:8f:bf:91:ca:c3:70:e2:23:27:84:09:
97:a7:b2:b7:82:48:2c:cc:6b:bb:f3:07:12:ad:ef:
2b:76:40:13:d7:ff:c8:ca:3f:03:db:e8:26:e2:10:
44:8e:ee:4c:f0:4e:c0:af:21:e7:bc:59:73:b6:5b:
bf:f1:ae:55:19:18:31:64:6c:52:14:cb:44:0c:b2:
d4:13:02:c8:e1:90:d2:7d:00:82:c7:65:5c:fe:46:
4b:53:25:de:dc:89:c7:a7:bc:78:77:c3:ac:8d:f4:
46:9d:b7:d3:13:99:ef:a7:5d:b6:ff:5e:86:5d:5a:
a1:d1:91:5c:3c:93:38:c7:6d:fc:90:b2:7d:f7:f3:
db:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7B:BA:48:FA:DC:4F:82:BD:9E:C7:3C:84:98:B1:EB:0B:9C:1C:BA
X509v3 Authority Key Identifier:
keyid:4E:A7:0F:11:D9:6D:5D:F0:7D:C7:7B:3E:D3:85:93:39:9D:3F:51:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqcPEdltXfB9x3s-04WTOZ0_Uao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4a0384-adff-4e40-8ef1-30c0c9847676/1/TqcPEdltXfB9x3s-04WTOZ0_Uao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9f:24:56:ae:6d:ce:1a:ea:4d:99:14:69:71:df:4f:b8:93:
67:cd:69:f3:d4:9e:44:65:54:f2:ac:4e:96:53:9d:e4:21:c8:
2e:5e:5d:07:ff:76:8a:1c:82:17:43:b3:df:8f:05:cb:62:f1:
c6:25:6b:2f:e8:0f:2c:0b:5e:49:68:33:6d:54:8d:d0:77:7d:
5e:d4:b9:e9:8c:46:bf:e5:e6:df:3a:a3:a9:b5:03:2c:3a:f8:
d8:a8:e4:74:61:bf:67:db:24:90:6b:08:66:a4:6c:40:ce:7c:
e4:a1:1f:15:97:75:52:43:58:7b:9c:7c:63:76:52:87:79:ed:
05:79:85:ea:75:9a:f3:e0:09:98:73:6f:4a:1a:6b:20:5b:0f:
a8:86:7c:e0:f7:0d:2f:53:7f:c0:35:1d:ba:bb:b5:a3:eb:1f:
75:0e:8b:94:34:08:d3:5c:52:0a:e7:c1:5b:97:aa:6a:ec:69:
77:82:49:29:ac:5f:23:b3:54:d5:c1:36:0d:68:99:1c:bb:4c:
42:34:8d:9f:e8:c3:f2:31:18:0f:d6:66:bc:6f:2f:c1:09:a1:
aa:d4:84:67:53:13:5b:f9:c4:88:13:cd:5d:03:6a:d3:2b:68:
b8:00:2f:4c:05:a2:5b:4f:65:cc:89:99:b7:5c:f0:35:eb:86:
e4:bf:fe:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:30:23 2025 by rpki-client