Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
File: TVSL_7MhSZGpynyfD1tIVFiLl14.mft (raw, json)
Hash identifier: ebGz0C271lufp6VjmgFDmrP7c1c6Txl/6xPtOVHtNEI=
Subject key identifier: 04:AA:B0:20:1F:57:62:91:88:33:B8:0D:73:9B:0D:E7:F5:1F:C9:89
Authority key identifier: 4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E
Certificate issuer: /CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
Certificate serial: 0194BBCED5E6AE2AFF7B07C1514FF2138481
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
Manifest number: 050C
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: TVSL_7MhSZGpynyfD1tIVFiLl14.crl (hash: Gohswb5OINsgn6L2lzaoC0SLvJNGfmaKDKx8yLtm2KA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d5:e6:ae:2a:ff:7b:07:c1:51:4f:f2:13:84:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d548bffb3214991a9ca7c9f0f5b4854588b975e
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=04aab0201f5762918833b80d739b0de7f51fc989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:aa:67:1e:bc:8a:0d:1e:73:31:09:a5:76:fe:
0e:ee:73:8c:36:19:f7:cc:67:c3:85:96:99:fc:5f:
00:1c:55:f1:0c:d6:26:e0:60:fa:59:61:d0:2c:8d:
6a:55:d9:65:e7:d0:49:96:39:df:33:f7:ec:ea:52:
54:81:b3:86:8d:9d:8b:7f:69:51:9a:c4:e6:49:15:
56:a7:0e:78:02:35:9b:93:47:36:4b:d5:b4:fe:e4:
12:5e:95:a6:d4:dc:0a:85:36:05:14:c0:b8:b3:41:
20:8a:50:a4:8c:83:46:58:4a:01:df:bb:a8:d2:70:
62:8e:64:90:fb:fe:dd:9a:c6:45:e1:77:2a:65:5d:
31:b1:8b:58:f2:eb:39:39:48:a8:d5:79:98:c3:ed:
c2:81:85:24:c4:99:3f:40:e2:fd:b5:df:86:c5:9c:
fa:ca:6b:86:41:be:98:64:d7:dd:38:b4:b6:40:53:
4b:48:4c:82:d3:93:75:45:57:8d:1e:c9:1d:bf:c3:
c1:57:ca:59:47:ae:bc:ec:81:35:66:70:8f:42:7a:
20:40:27:ff:82:83:46:b0:37:60:c1:05:fb:3a:21:
04:9f:a9:8c:2d:47:a3:9d:3c:9a:7f:ad:f8:23:91:
44:4b:83:b5:b0:1a:74:50:21:b2:0d:36:46:c4:73:
8b:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:AA:B0:20:1F:57:62:91:88:33:B8:0D:73:9B:0D:E7:F5:1F:C9:89
X509v3 Authority Key Identifier:
keyid:4D:54:8B:FF:B3:21:49:91:A9:CA:7C:9F:0F:5B:48:54:58:8B:97:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TVSL_7MhSZGpynyfD1tIVFiLl14.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/7f49df-2722-45d1-9d9b-9759f9a79ace/1/TVSL_7MhSZGpynyfD1tIVFiLl14.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:99:de:0a:04:18:41:96:13:4d:eb:d1:4c:75:37:1b:a3:05:
b0:7c:c3:94:74:13:c6:78:36:d3:49:db:fd:13:bf:e0:40:8c:
fb:a4:0a:27:7b:2e:65:bc:53:e6:79:a3:61:f2:6a:8c:e1:c0:
4d:fd:f2:d1:68:41:87:f9:eb:3d:a1:b3:da:bb:71:f6:70:40:
12:fc:a8:af:cf:34:c1:93:c3:9b:5d:bc:5c:8c:fb:48:25:79:
ec:fd:04:fc:fd:92:bd:14:b4:16:8c:90:32:63:8b:9d:96:3a:
f9:7a:1b:82:1b:f7:c5:d3:6d:9f:82:e2:ac:fb:13:37:ef:e0:
3b:21:ab:c4:84:35:5c:50:e1:40:8d:22:bb:f4:4d:46:b1:1a:
8a:20:1b:9b:d8:c5:2f:b7:8b:d8:7d:79:b4:1f:da:cf:25:60:
d4:38:5d:e7:44:9c:f2:11:f2:20:0e:73:f5:e1:ea:bd:1a:93:
a5:a8:2d:7c:d5:bd:b6:97:c1:5f:75:0b:02:d1:c0:a3:e2:33:
76:d3:7c:6d:4d:a9:ce:56:d1:cf:06:9c:51:83:96:43:ad:64:
b2:7e:f4:73:99:20:50:89:cd:49:0c:82:51:91:84:7e:d9:12:
dd:28:59:8f:2b:a5:69:36:6e:6e:1f:44:d4:66:5e:ec:32:ae:
cf:07:ce:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:54 2025 by rpki-client