Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
File: TOCCAEkieEhNbIj1OGuns5aWy5Y.mft (raw, json)
Hash identifier: Y2qyo0xTZ3CTT439VGRv7L1mZNcVe5dI1FnhbuMuIp8=
Subject key identifier: D4:E6:C8:B2:5F:79:A7:2A:39:ED:F1:C8:09:FE:AD:F1:1B:FD:D7:7A
Authority key identifier: 4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
Certificate issuer: /CN=4ce08200492278484d6c88f5386ba7b39696cb96
Certificate serial: 0194BC3C177D594CC6165D9764730BC729F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
Manifest number: 0AFD
Signing time: Fri 31 Jan 2025 12:00:42 +0000
Manifest this update: Fri 31 Jan 2025 12:00:42 +0000
Manifest next update: Sat 01 Feb 2025 12:00:42 +0000
Files and hashes: 1: TOCCAEkieEhNbIj1OGuns5aWy5Y.crl (hash: q0qiaZWwIV2zPEj8vcvkSUMEE2fQ2+KuzxPFw9e83o0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:17:7d:59:4c:c6:16:5d:97:64:73:0b:c7:29:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce08200492278484d6c88f5386ba7b39696cb96
Validity
Not Before: Jan 31 12:00:42 2025 GMT
Not After : Feb 1 12:00:42 2025 GMT
Subject: CN=d4e6c8b25f79a72a39edf1c809feadf11bfdd77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:23:45:53:93:24:5b:c1:16:34:c2:93:a2:9a:
a1:4b:75:6c:16:8d:8c:fb:c7:23:a4:77:e8:ee:a0:
a8:d5:20:91:b7:c6:83:bb:a6:1d:4a:ca:23:d0:02:
20:82:2b:92:e2:b5:21:d6:87:94:5f:ed:aa:6a:bc:
ba:3d:31:2f:ef:38:90:4b:c6:61:7b:b0:58:21:0f:
0c:e4:68:18:ad:ab:c5:73:77:a0:17:25:33:87:6b:
7d:af:70:a6:e5:d4:19:b3:c6:4d:19:bb:ea:b1:23:
f8:ba:f1:92:65:5e:c2:3d:93:34:89:45:5a:2b:26:
2e:c7:78:c0:d3:a7:dd:4d:8e:94:6e:76:5c:ac:ca:
a9:7c:f0:51:d6:0e:ad:da:ce:a7:29:d1:f1:44:6e:
ef:c4:ec:8a:18:61:18:e9:0b:d5:5b:53:76:44:7d:
00:3b:c5:5f:90:b3:15:c6:be:f3:2e:d7:83:d4:66:
e9:19:24:0e:52:37:f2:30:c0:2a:48:f0:db:6f:0a:
88:d9:4c:79:88:fd:9e:34:0b:da:38:4c:12:14:72:
8f:bc:28:66:d5:38:02:1d:71:39:74:63:9a:82:05:
fb:16:b3:e1:18:fd:5b:13:a0:2f:4f:ca:49:2f:f5:
50:d7:5e:19:bf:41:59:76:29:72:d1:c2:9a:ab:79:
c4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:E6:C8:B2:5F:79:A7:2A:39:ED:F1:C8:09:FE:AD:F1:1B:FD:D7:7A
X509v3 Authority Key Identifier:
keyid:4C:E0:82:00:49:22:78:48:4D:6C:88:F5:38:6B:A7:B3:96:96:CB:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TOCCAEkieEhNbIj1OGuns5aWy5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2d542d-1ec5-4943-b63e-915120b63093/1/TOCCAEkieEhNbIj1OGuns5aWy5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:6e:4d:53:39:64:93:82:66:db:a2:b8:83:ef:26:ea:e2:37:
6b:90:22:d2:31:36:c7:0f:11:39:fa:2c:6e:e6:ec:fb:a9:20:
c5:03:da:8d:6e:58:b6:d7:ec:0c:cb:19:71:7f:aa:85:16:61:
de:87:71:d7:f7:7d:1e:7c:12:4f:d4:45:29:e8:f0:7b:91:b5:
39:c5:21:b6:91:84:4b:b6:bf:01:36:f7:26:e6:5e:c3:79:dd:
a4:b1:2b:e8:a5:4a:45:3c:19:a4:69:fa:df:59:e5:9d:b7:cc:
61:0f:95:b0:7f:f1:1a:20:c9:f8:12:37:81:cc:59:48:ef:23:
08:c1:ae:5c:b3:4e:60:88:16:43:79:5f:74:79:d5:f6:92:a3:
04:3b:26:ce:a5:5e:c3:f8:e8:72:a7:ef:9f:3f:ad:9f:a9:2a:
4f:fe:53:21:84:9c:6b:70:99:52:4e:46:d8:09:88:98:78:59:
68:7d:4d:3b:f2:69:41:36:a2:6d:5b:17:d0:78:74:b4:c0:68:
a8:1b:4c:2a:a8:b7:1c:94:97:e3:8f:6c:b2:7b:8e:eb:33:71:
ce:63:0a:bf:37:a4:af:72:09:70:86:c2:ef:de:5f:62:cc:48:
28:3f:15:54:8d:8f:4f:2c:7d:b5:b4:b7:77:32:d9:82:53:9e:
e8:d2:5a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:50 2025 by rpki-client