Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
File: tpQiR24a5eoNWOT4_fkfBfEC_vs.mft (raw, json)
Hash identifier: 0XYDWDleKQmDHtCIFuJwXP27wxzk+h1O39m+QfI7MG0=
Subject key identifier: 6F:0C:48:23:09:A4:53:41:A9:7C:8C:4E:D4:D9:C0:CC:D9:5F:40:EC
Authority key identifier: B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
Certificate issuer: /CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
Certificate serial: 0194BCAA2F28E68D215BE6997782F7BCE5A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
Manifest number: 1427
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: tpQiR24a5eoNWOT4_fkfBfEC_vs.crl (hash: 653hynGXdxzg4pCiphY48kJTf7eq880IRWuYqzK2KeY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2f:28:e6:8d:21:5b:e6:99:77:82:f7:bc:e5:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69422476e1ae5ea0d58e4f8fdf91f05f102fefb
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=6f0c482309a45341a97c8c4ed4d9c0ccd95f40ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:11:97:aa:96:42:2f:ca:86:2e:ac:26:8a:44:
b2:6d:c9:26:2d:d0:7d:7c:9d:86:3b:22:5e:c2:4f:
ad:4f:1d:20:71:15:84:ae:58:a4:c5:4d:5b:97:a0:
2a:7f:5a:54:56:b6:89:19:0f:7d:50:5f:ed:e8:94:
b3:88:fb:2f:27:b9:74:1c:3f:63:0f:c1:ad:fe:c8:
66:c0:24:ea:26:bb:13:0c:31:2d:a9:4f:37:1a:86:
82:83:83:12:63:f7:e2:c4:de:59:80:a3:bb:63:39:
7d:58:71:a0:2d:93:3b:b7:45:50:aa:9b:29:ff:ee:
cb:b6:e2:bd:71:09:fb:02:ca:1d:0b:1f:f4:01:87:
9f:9b:2e:e8:73:b5:e8:cf:f4:d5:e2:a6:3a:76:c6:
02:3a:69:ca:40:1c:9f:70:c2:ee:b9:5e:85:56:08:
06:e8:44:60:10:45:fc:d9:b7:c4:2f:5e:65:3b:c1:
50:17:ce:dc:2b:50:3f:a6:2a:bd:a4:28:ba:56:8f:
de:28:fd:b0:9a:6d:18:5f:ca:8a:18:55:23:33:65:
a3:56:07:d7:4d:2b:58:19:4d:5d:c6:13:58:b6:5c:
b9:f1:49:23:1d:a3:81:3b:dc:8e:41:e4:1e:a1:dd:
ae:a2:11:25:eb:12:31:90:e6:7d:21:95:4e:dd:06:
69:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:0C:48:23:09:A4:53:41:A9:7C:8C:4E:D4:D9:C0:CC:D9:5F:40:EC
X509v3 Authority Key Identifier:
keyid:B6:94:22:47:6E:1A:E5:EA:0D:58:E4:F8:FD:F9:1F:05:F1:02:FE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpQiR24a5eoNWOT4_fkfBfEC_vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e49afe-15ae-485a-af76-66516ffce750/1/tpQiR24a5eoNWOT4_fkfBfEC_vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:bb:54:de:01:26:4e:cd:19:88:cd:9b:35:15:39:b8:3b:2c:
6c:2a:69:1f:a8:81:51:46:ee:c9:21:d3:a0:62:cf:48:84:21:
50:a6:b0:34:1c:07:14:74:52:41:9c:9e:e9:d3:30:6a:0f:84:
d1:ef:af:c8:cc:c7:ab:28:9a:7b:05:00:94:af:85:dc:92:ac:
8c:dd:92:24:f5:2f:f0:9c:4f:bf:96:b9:70:ac:cf:f7:11:c6:
c2:ea:59:cf:cf:70:e4:55:aa:c0:3c:53:1a:a7:c6:e7:25:60:
07:f6:15:b3:bd:df:9c:6d:ca:14:ee:40:7b:26:ae:7c:bb:a9:
41:e1:30:7b:2b:ac:13:9c:97:ca:99:b4:d4:45:7c:1a:cf:c3:
92:54:69:c4:13:6e:9a:32:45:38:26:07:ac:77:83:7c:54:13:
90:f8:a9:53:a3:8e:0e:08:83:1e:3f:5c:0a:84:b4:a8:a1:03:
4c:c5:a1:d4:80:0c:87:1e:f0:b2:94:20:1d:7d:0e:51:51:b1:
91:ee:b3:b8:9e:0c:74:39:1f:24:74:94:4e:a3:f9:87:f0:d5:
58:9d:68:18:7b:e0:1b:57:4e:b0:29:d6:c1:f6:db:99:ee:35:
0d:24:f2:1c:d3:1b:c3:10:18:a2:a4:08:c5:29:df:a8:87:2a:
ef:c5:22:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:11 2025 by rpki-client