Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft
File: T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft (raw, json)
Hash identifier: JkjEKc4/svTYmRaxABZ2uN61WY5WrnHn42fT42V8D4s=
Subject key identifier: 9F:EC:7D:CB:E0:5E:F3:2B:C7:6A:20:45:5C:41:2C:48:87:67:AF:3E
Authority key identifier: 4F:5B:CB:FB:D0:08:45:8A:09:BB:14:D1:AC:9F:03:21:72:E3:B9:00
Certificate issuer: /CN=4f5bcbfbd008458a09bb14d1ac9f032172e3b900
Certificate serial: 0194BCE08B8689DCEB141A2A6714FF45E42A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft
Manifest number: 03AC
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: T1vL-9AIRYoJuxTRrJ8DIXLjuQA.crl (hash: Q6J20BsoPjEkN8vI5vMS3spBJGmZSvFlNIuLlxOQ67U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8b:86:89:dc:eb:14:1a:2a:67:14:ff:45:e4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f5bcbfbd008458a09bb14d1ac9f032172e3b900
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=9fec7dcbe05ef32bc76a20455c412c488767af3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:76:6e:f3:e9:86:ba:4a:ee:f1:78:af:37:88:
dc:2f:1d:ca:af:34:1e:19:4a:a9:11:ac:1b:d2:65:
d2:f8:b7:c9:bb:d2:03:8f:f9:4f:63:4b:96:16:3b:
06:a0:2f:f4:d7:e1:f6:ba:8c:7d:20:6c:ef:62:c0:
3e:ee:1c:79:2c:07:66:72:40:8e:72:6c:dc:8b:d2:
7e:f8:ff:88:79:4e:02:a2:4b:cb:31:66:b6:9e:82:
95:23:54:4e:00:ee:e6:12:7e:21:00:84:24:dc:d4:
86:95:f7:d5:1e:6a:5f:f2:86:00:10:78:2f:7a:5b:
18:35:df:2b:98:a6:4d:84:95:ca:4f:d7:0c:7b:8c:
ff:07:01:8e:17:2c:ef:43:33:04:15:ba:01:33:af:
80:80:b8:d2:f0:bc:2a:0c:83:0a:37:9f:f5:0d:a1:
a6:fc:9b:7e:f6:dd:b1:2c:94:1a:5a:45:cb:02:60:
fc:2a:09:ea:41:e9:98:ff:e1:72:9d:c1:dd:be:06:
94:55:98:7c:f0:1a:71:fd:4c:98:4c:65:1b:0d:b4:
9f:02:64:b1:51:72:1d:dd:29:4a:4f:d8:30:b4:20:
fe:43:67:59:29:77:d7:9c:ac:3a:b7:bd:83:c1:54:
a3:22:7c:2f:27:ca:46:52:17:c1:82:10:22:96:71:
66:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:EC:7D:CB:E0:5E:F3:2B:C7:6A:20:45:5C:41:2C:48:87:67:AF:3E
X509v3 Authority Key Identifier:
keyid:4F:5B:CB:FB:D0:08:45:8A:09:BB:14:D1:AC:9F:03:21:72:E3:B9:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/c8ff34-e6d7-47b1-bc64-14a9081b477c/1/T1vL-9AIRYoJuxTRrJ8DIXLjuQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:55:0a:b9:32:08:6c:dc:1c:cf:c9:8b:17:7e:ea:4d:a6:39:
5c:c0:f4:a3:01:56:e0:d2:a5:c4:72:ec:53:fa:ba:10:b3:9c:
90:45:8a:b2:96:69:78:a3:f4:e7:a8:af:81:2b:d1:e3:4e:f7:
90:45:60:9c:6a:e9:e6:78:68:ab:75:16:8b:93:8c:94:cf:49:
6c:02:35:2a:f6:92:0e:a7:e9:ef:3e:85:c8:65:8d:f3:db:df:
ce:45:ca:51:50:15:e4:b5:51:07:f5:aa:de:b8:76:b8:05:e9:
cc:95:35:89:e4:7d:32:a4:9b:84:30:1e:89:c3:6b:fd:f5:02:
3c:18:7f:ac:2f:18:90:2d:9d:73:ab:cb:d9:d2:ed:29:49:53:
e3:1b:46:e7:65:51:35:0b:c9:6e:81:b0:b0:1b:f8:62:21:3e:
87:89:07:80:dd:0d:d9:4f:de:65:31:52:82:a4:c3:24:0f:c6:
2e:69:f9:a1:0a:ae:52:44:0b:da:9c:2c:ab:06:c5:e7:1f:a1:
cd:c3:ff:97:57:d2:53:d4:44:7d:51:3a:21:cb:1a:2c:bd:ef:
54:c3:1d:3d:83:10:a8:34:ba:2f:7a:e1:ed:9e:fe:7e:e1:eb:
4f:09:bf:29:c7:22:d9:fa:af:58:41:a5:d7:61:69:c6:a6:7a:
a8:fe:95:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:25:22 2025 by rpki-client