Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
File: Th1cISsoF0fIw-xuhm4Vs5TFu98.mft (raw, json)
Hash identifier: HisBEOyIypsIhFzp7pWiLe38pqqyvCeGFRRpFqhldhw=
Subject key identifier: 4D:5C:F1:DB:12:52:90:0A:90:F9:0B:5D:14:B0:30:1F:11:6C:C0:B9
Authority key identifier: 4E:1D:5C:21:2B:28:17:47:C8:C3:EC:6E:86:6E:15:B3:94:C5:BB:DF
Certificate issuer: /CN=4e1d5c212b281747c8c3ec6e866e15b394c5bbdf
Certificate serial: 0194BCAA1F700F6004A08E70915791BD71A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
Manifest number: 0B62
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: Th1cISsoF0fIw-xuhm4Vs5TFu98.crl (hash: iz7Og9OlWFb1rBpwcYW7KbhQk8n8wU5xfzIuFVnMQ6M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1f:70:0f:60:04:a0:8e:70:91:57:91:bd:71:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e1d5c212b281747c8c3ec6e866e15b394c5bbdf
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=4d5cf1db1252900a90f90b5d14b0301f116cc0b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:8c:96:c6:38:d5:23:97:db:31:ec:1e:80:e6:
78:22:6d:a4:b3:99:70:c3:cf:90:e1:60:95:c4:1d:
34:73:68:b1:f8:ed:6f:53:07:5a:25:4c:65:d4:c9:
16:88:a2:f3:66:a1:59:26:c5:24:40:1b:b5:d1:9e:
5b:a7:00:68:7d:fd:08:81:16:e7:69:c4:79:80:6d:
a5:09:0b:66:a6:d7:48:d3:47:57:c6:30:77:ac:bc:
ec:f8:95:3b:64:a3:95:2b:eb:02:53:4f:96:a2:8c:
4f:96:74:d4:d2:ad:71:28:70:60:68:8f:2e:8b:35:
51:7a:7c:f6:e0:04:27:d0:1f:57:d0:3b:46:e0:e1:
d7:42:a1:fe:3e:fd:1e:34:aa:64:4a:75:3f:c5:b9:
f0:12:09:ac:07:d5:d5:ed:0d:ff:34:c7:5d:30:27:
37:96:8f:2d:cc:07:d6:14:30:67:2c:66:bd:0f:05:
76:7c:ee:92:76:24:33:1e:de:bc:6e:d2:76:06:9c:
d9:35:44:a9:dd:10:82:bf:b2:29:d0:6c:6a:66:21:
24:cd:cb:49:ef:42:36:8f:7a:aa:c6:ea:b5:2d:de:
e5:9c:96:f1:a9:ae:ad:a5:37:fb:c7:71:a4:13:24:
29:b6:09:4b:69:be:05:e6:3f:4f:56:67:90:72:32:
ad:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5C:F1:DB:12:52:90:0A:90:F9:0B:5D:14:B0:30:1F:11:6C:C0:B9
X509v3 Authority Key Identifier:
keyid:4E:1D:5C:21:2B:28:17:47:C8:C3:EC:6E:86:6E:15:B3:94:C5:BB:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Th1cISsoF0fIw-xuhm4Vs5TFu98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/277503-82e3-4c17-9699-712e2761daf5/1/Th1cISsoF0fIw-xuhm4Vs5TFu98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:65:68:de:7a:d7:b0:b5:d6:a5:67:e9:24:33:26:83:04:ec:
ed:c4:83:7f:97:9f:8c:92:6b:0b:0b:18:bc:69:5a:63:cd:4e:
2e:64:43:78:f6:b1:37:98:c1:95:f2:1a:5a:b9:6d:0f:fb:e9:
7e:80:fb:26:23:d8:f2:ff:90:45:52:db:c6:dc:f6:8d:fe:1a:
dd:e1:cc:c1:6d:75:cc:0a:61:39:b8:9e:e2:b2:ea:59:26:0a:
9b:96:94:6d:90:0f:da:5f:7f:c0:1e:f2:53:c7:50:59:14:09:
dc:37:fb:80:af:2c:cf:85:a8:28:fe:ad:23:1b:da:9b:6c:44:
b5:ce:34:5c:be:28:df:e7:69:eb:16:d2:46:b2:98:e9:75:18:
eb:d9:cf:bd:14:43:dc:66:c6:cf:a3:36:48:72:42:60:ae:12:
37:ed:b6:e7:96:0b:07:70:ae:a9:d6:12:05:11:99:d6:24:bf:
bc:21:55:a2:54:1b:79:9a:80:1b:7d:58:13:2c:16:55:9f:7d:
c9:79:c5:42:79:67:4d:a4:3f:33:be:9d:e2:58:c0:7b:4b:8e:
5c:77:91:8e:10:c2:8e:d7:1b:8e:cf:e4:a2:14:00:8c:97:cb:
90:56:fa:1f:1e:6e:d6:ec:b3:27:8b:e9:b7:b6:f0:df:1f:f2:
27:65:77:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:20 2025 by rpki-client