Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/dd4148-89ab-48f8-8d6f-33cfa511b0c7/1/tKOpvnfi2f3n_-H1Fin5TpjqPNg.mft
File: tKOpvnfi2f3n_-H1Fin5TpjqPNg.mft (raw, json)
Hash identifier: /Ez4kJ5q2aBphEGL9bUN4lOA+yCjpivYgFN+s3GRUqc=
Subject key identifier: 38:23:A2:3A:14:FD:92:10:FF:C6:60:DF:6C:F7:80:53:5C:2E:DB:D7
Authority key identifier: B4:A3:A9:BE:77:E2:D9:FD:E7:FF:E1:F5:16:29:F9:4E:98:EA:3C:D8
Certificate issuer: /CN=b4a3a9be77e2d9fde7ffe1f51629f94e98ea3cd8
Certificate serial: 0194BC3C49F95257ED9B664E137C1BF6B6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKOpvnfi2f3n_-H1Fin5TpjqPNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/dd4148-89ab-48f8-8d6f-33cfa511b0c7/1/tKOpvnfi2f3n_-H1Fin5TpjqPNg.mft
Manifest number: 063F
Signing time: Fri 31 Jan 2025 12:00:55 +0000
Manifest this update: Fri 31 Jan 2025 12:00:55 +0000
Manifest next update: Sat 01 Feb 2025 12:00:55 +0000
Files and hashes: 1: tKOpvnfi2f3n_-H1Fin5TpjqPNg.crl (hash: s5UbzPHLksmz8iua83m08CfUO0UEzjudQ23CbxIE2Kk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:49:f9:52:57:ed:9b:66:4e:13:7c:1b:f6:b6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a3a9be77e2d9fde7ffe1f51629f94e98ea3cd8
Validity
Not Before: Jan 31 12:00:55 2025 GMT
Not After : Feb 1 12:00:55 2025 GMT
Subject: CN=3823a23a14fd9210ffc660df6cf780535c2edbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:f2:4d:7d:ed:cb:7b:32:c7:5c:c2:17:8b:42:
7b:47:51:e6:9f:71:88:46:04:13:bf:9d:da:61:87:
7e:dd:49:bb:66:fb:f0:6a:6a:b8:af:21:84:7a:70:
98:52:4b:41:78:68:b5:9c:2c:ff:36:44:35:a1:ee:
e4:62:eb:e3:25:8f:cd:e1:04:97:2c:e7:b2:01:7c:
bc:2c:61:e2:ee:45:fe:51:27:d5:4b:5f:f6:1c:a0:
e2:55:fe:14:08:b9:a8:a9:8f:47:c2:30:00:02:bf:
91:4b:c7:44:26:52:5b:57:e2:a6:27:b3:41:29:a6:
cc:62:90:ea:9c:2b:38:35:72:52:f4:a0:36:60:c2:
b8:b0:f3:02:51:d2:3c:af:33:88:e4:f1:18:46:d0:
4b:64:aa:d8:ad:6d:4c:d2:5d:63:ea:83:19:9b:55:
e6:fa:b8:9e:3a:0c:10:05:be:44:ce:69:1c:7a:bb:
7b:44:d9:fa:3b:79:78:cd:b4:cd:bf:f3:55:b8:8c:
3b:bc:2e:9d:39:45:27:1e:4f:ac:1d:00:5d:6d:45:
2f:23:ee:a5:8b:4b:f2:3f:b3:f5:b6:17:6f:92:a6:
35:5f:97:fc:fc:e9:18:c8:8b:b2:a7:ee:c5:d5:00:
04:43:e9:76:8e:1b:6d:41:4b:53:0b:71:e6:51:37:
a7:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:23:A2:3A:14:FD:92:10:FF:C6:60:DF:6C:F7:80:53:5C:2E:DB:D7
X509v3 Authority Key Identifier:
keyid:B4:A3:A9:BE:77:E2:D9:FD:E7:FF:E1:F5:16:29:F9:4E:98:EA:3C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKOpvnfi2f3n_-H1Fin5TpjqPNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dd4148-89ab-48f8-8d6f-33cfa511b0c7/1/tKOpvnfi2f3n_-H1Fin5TpjqPNg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/dd4148-89ab-48f8-8d6f-33cfa511b0c7/1/tKOpvnfi2f3n_-H1Fin5TpjqPNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:da:b3:51:b9:c9:0f:7d:13:2a:23:8c:ac:3d:48:53:2d:d7:
c2:b9:2d:66:c2:78:86:d4:0d:51:50:22:a3:d9:19:94:fb:82:
1d:6f:ac:96:b7:2a:c6:84:71:fb:95:83:ca:fd:88:06:82:c8:
ac:c8:1d:5b:d4:a2:91:84:4a:84:11:63:ef:f8:b3:42:21:1b:
de:0f:f8:9a:61:a7:20:f9:28:a2:62:f9:de:36:dd:43:b2:13:
12:4e:07:e7:7b:05:06:cb:db:25:2c:98:c2:b5:8c:57:eb:42:
08:65:73:15:5f:98:b8:86:8b:df:72:8d:81:ea:18:92:0b:0f:
15:30:ce:36:1a:d1:b5:5a:06:6d:5f:23:11:19:d0:4a:98:a8:
c0:19:c7:c0:33:b0:9b:bf:69:d2:54:fb:43:ec:3a:c0:c6:ea:
23:f2:3c:6b:c1:2d:08:82:a6:4e:a7:8b:6b:61:30:0a:73:b2:
0b:e1:8e:74:7f:4a:65:cd:a8:cd:84:e8:12:7c:9d:5c:b5:4d:
52:95:78:35:bf:97:64:12:6d:04:e3:21:3c:6a:e5:e4:7c:e3:
81:1b:ac:91:3f:44:91:d2:6f:30:95:3f:3d:84:0d:d4:3a:de:
4f:9e:55:20:1d:59:d6:fd:ee:ee:8a:33:3a:1a:f8:e9:73:ea:
3c:23:a0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:02 2025 by rpki-client