Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
File: TGD9CUHz0veinDVh5WMYbvd1oeU.mft (raw, json)
Hash identifier: ue63o1BiSk2hOhXm028ZvWg+lbqjvXISgDefJIG0UTI=
Subject key identifier: 93:9E:A2:7C:70:CC:AD:9D:6C:DA:D5:1F:BD:17:7B:80:29:98:E0:9C
Authority key identifier: 4C:60:FD:09:41:F3:D2:F7:A2:9C:35:61:E5:63:18:6E:F7:75:A1:E5
Certificate issuer: /CN=4c60fd0941f3d2f7a29c3561e563186ef775a1e5
Certificate serial: 01965FF2898424BA85938D9D4E927A4E9C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
Manifest number: 04B0
Signing time: Wed 23 Apr 2025 00:00:52 +0000
Manifest this update: Wed 23 Apr 2025 00:00:52 +0000
Manifest next update: Thu 24 Apr 2025 00:00:52 +0000
Files and hashes: 1: InvlOQlXHysCNzw0ls55YDrBMiI.roa (hash: w/RbbXLN25pr436QWg9t/JqUqj+z8QTi6SAzMiRWMFM=)
2: TGD9CUHz0veinDVh5WMYbvd1oeU.crl (hash: os/Sb6p7hmPkte62d4+X7JTx1r7QDe7msDtamlgfJLA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:5f:f2:89:84:24:ba:85:93:8d:9d:4e:92:7a:4e:9c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c60fd0941f3d2f7a29c3561e563186ef775a1e5
Validity
Not Before: Apr 23 00:00:52 2025 GMT
Not After : Apr 24 00:00:52 2025 GMT
Subject: CN=939ea27c70ccad9d6cdad51fbd177b802998e09c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:dd:ac:99:e1:88:40:58:3c:c7:1c:a0:e4:41:
e6:57:87:6f:77:2d:ae:82:a8:d4:c7:fb:f1:1b:4f:
e8:4f:53:f3:81:8e:ff:6b:0e:42:8c:70:80:e7:a8:
e9:a1:b9:34:e1:a3:b6:ce:01:9f:98:b9:54:a5:ca:
72:21:0b:d9:a8:60:a8:66:93:95:60:ee:ae:ad:57:
de:c3:e9:23:6a:b9:6c:71:10:c8:74:0c:ef:24:41:
8d:89:b6:08:b2:94:1f:e0:58:1c:7e:30:19:83:0a:
78:0e:8f:5a:b4:b3:93:b2:91:d4:ee:b3:ee:df:fa:
cb:bf:e1:c4:8b:7a:13:dd:0e:e5:b5:e2:7f:cf:ce:
dd:84:49:cc:2d:c0:77:f9:f8:30:f1:7d:ae:be:7c:
5f:e4:c9:33:4e:55:d2:6f:39:f5:a9:2c:d3:32:bd:
d0:98:c2:2e:69:f9:5d:ae:42:c4:ed:93:ab:c1:91:
05:16:94:20:65:53:77:3f:02:54:51:4d:26:be:0c:
78:46:7e:d8:9e:77:d1:5b:fe:0a:9c:af:2d:d5:68:
ad:07:e2:dd:1f:03:04:ea:58:c3:c0:a3:35:37:ac:
f8:f4:83:e3:93:06:7f:07:ac:77:df:a0:31:2a:6c:
e6:07:f5:00:df:1a:9b:24:e6:13:99:a0:eb:14:f0:
b5:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:9E:A2:7C:70:CC:AD:9D:6C:DA:D5:1F:BD:17:7B:80:29:98:E0:9C
X509v3 Authority Key Identifier:
keyid:4C:60:FD:09:41:F3:D2:F7:A2:9C:35:61:E5:63:18:6E:F7:75:A1:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TGD9CUHz0veinDVh5WMYbvd1oeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/055c8b-04a4-412b-8bda-1f5d6f56cf72/1/TGD9CUHz0veinDVh5WMYbvd1oeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a6:9d:f0:80:69:30:37:3b:11:32:d0:ca:7c:bb:80:f4:ed:
54:38:60:1b:ca:02:40:46:b2:18:42:c1:f9:1c:d6:ed:b1:13:
cf:fd:f8:84:67:e0:93:9c:39:9b:4d:9f:84:ec:24:a8:4a:0a:
12:e3:4c:cf:fa:70:60:80:eb:0f:cb:4e:13:17:d4:28:12:a5:
bd:ab:11:c9:06:c2:c7:0b:2e:e9:72:8c:86:ba:f6:5b:e7:ae:
e2:27:48:16:ca:53:e9:f9:9e:0d:ba:db:b8:ff:66:e5:48:44:
12:37:44:b7:c4:fd:67:1d:54:04:3f:62:4e:ba:3c:c1:06:db:
28:9b:50:5e:f0:10:32:99:8a:1f:6d:21:26:b7:24:5d:8b:9c:
fd:d0:24:fb:7b:38:eb:ba:93:86:e0:91:1c:2e:a0:07:a2:4e:
63:04:15:62:a0:38:f6:fc:97:88:c9:93:24:6f:0d:fa:5a:f7:
6b:65:f9:65:27:0d:d1:4d:86:33:30:2a:f0:e4:85:6b:75:51:
57:23:bf:b6:0d:c0:d3:13:c9:33:f9:f6:e5:da:41:91:9c:d8:
4c:d4:ea:e1:51:c9:f5:e8:3f:f1:7b:96:44:79:d6:31:56:5a:
c8:c4:86:0f:70:6e:ca:eb:90:f1:19:46:88:bb:44:f1:7e:f0:
3f:20:f1:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 01:27:09 2025 by rpki-client