Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
File: T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft (raw, json)
Hash identifier: lq9Kk1BvhFrINWxBIhK1ZuC6fU5q5ScXQrjhGUpPQtE=
Subject key identifier: CA:7C:0A:DD:41:6C:4C:CF:D6:40:D0:2E:77:3D:58:9D:DB:DF:C6:B1
Authority key identifier: 4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E
Certificate issuer: /CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e
Certificate serial: 0194BCAA069D8859FACB1608B8A60FB6544B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
Manifest number: 050F
Signing time: Fri 31 Jan 2025 14:00:46 +0000
Manifest this update: Fri 31 Jan 2025 14:00:46 +0000
Manifest next update: Sat 01 Feb 2025 14:00:46 +0000
Files and hashes: 1: T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl (hash: HesW0HBdN58vhy29KHCO0rSZv3AQvE+ajTrh0yC5Hmw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:06:9d:88:59:fa:cb:16:08:b8:a6:0f:b6:54:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fa893e33a821ff66d38f0ebce49911f3a5f964e
Validity
Not Before: Jan 31 14:00:46 2025 GMT
Not After : Feb 1 14:00:46 2025 GMT
Subject: CN=ca7c0add416c4ccfd640d02e773d589ddbdfc6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bc:43:3d:1a:d1:48:0c:69:9b:22:a1:3b:dc:
34:51:44:8e:55:7a:e8:a7:5d:f7:03:ec:bb:fd:3a:
3c:a5:1a:0c:06:0f:83:90:a6:88:2d:c1:ca:ee:78:
fb:be:b3:99:18:81:bf:8c:2e:92:1d:21:07:e6:1f:
ab:e6:78:32:e2:68:45:95:bc:6d:70:fa:bd:ad:ef:
21:55:6a:4f:53:6f:d3:fd:a6:0a:ff:df:53:95:db:
00:95:7a:d5:7f:39:84:c6:84:6b:ee:da:ba:22:c7:
e1:56:73:f0:6c:b7:17:15:e6:90:9a:01:8c:70:8c:
28:d2:21:e1:c8:78:ab:dd:12:b0:99:c7:14:94:20:
e2:78:9d:72:23:c8:52:2c:d3:db:96:23:17:cd:18:
6e:d4:38:68:24:d0:3e:8e:5d:4a:37:5d:0b:4b:08:
05:2e:91:54:d7:99:eb:1b:91:10:25:34:ae:b5:96:
13:e1:96:da:4e:14:9b:6c:73:71:e6:26:5e:7e:31:
19:18:d7:9e:9a:f1:70:9c:22:0d:c0:06:51:ba:12:
9f:eb:08:82:b1:65:36:68:e7:5e:35:54:44:c7:8a:
08:b4:66:e6:67:6c:77:c1:42:28:58:26:12:02:f9:
1b:b8:19:f1:d0:26:2e:fd:7f:76:48:6d:d4:36:bb:
8a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:7C:0A:DD:41:6C:4C:CF:D6:40:D0:2E:77:3D:58:9D:DB:DF:C6:B1
X509v3 Authority Key Identifier:
keyid:4F:A8:93:E3:3A:82:1F:F6:6D:38:F0:EB:CE:49:91:1F:3A:5F:96:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T6iT4zqCH_ZtOPDrzkmRHzpflk4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/b85caf-f20e-4b67-98a0-ff7f48f93f01/1/T6iT4zqCH_ZtOPDrzkmRHzpflk4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:98:73:ed:03:c7:0f:f8:17:fb:3b:b8:08:0a:8a:6d:17:2c:
ca:e8:f1:d8:48:6b:bb:75:57:74:e0:06:28:b7:4e:74:1e:21:
9c:80:45:f7:a7:e2:83:89:29:2f:be:a1:5d:fa:e6:f1:10:86:
f0:d3:7d:2f:fc:d4:5e:03:99:47:78:22:c2:ae:ae:50:9f:62:
46:61:ac:5b:40:84:77:e5:a7:23:cd:8f:1b:f5:c8:cf:d5:a5:
89:4a:86:27:03:6c:48:a7:32:f5:c0:28:bc:ce:2d:f4:d0:b1:
43:a1:26:ff:83:b2:4c:ff:a8:1b:66:21:94:94:ed:91:98:7c:
ea:11:1d:bd:92:7e:16:62:d0:3d:7a:8f:16:b6:f3:d0:99:b7:
06:56:b4:c6:6e:86:50:14:3b:0f:86:31:9b:c2:9f:62:58:49:
2e:02:d7:2b:15:2f:bc:35:24:9c:b3:b6:61:c2:03:aa:a3:ba:
8d:43:ca:0e:2c:20:dc:47:bf:12:eb:bd:89:5d:28:3b:b8:cd:
e2:7f:2d:c9:a4:ad:b3:dc:eb:15:36:7f:aa:9b:43:a2:67:c4:
72:ff:29:49:66:31:43:75:90:22:2e:57:22:23:e6:d6:db:a8:
13:45:f7:3f:4e:26:bf:f5:e7:40:7b:23:5d:a6:ff:2b:96:42:
8b:e9:4b:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:51:41 2025 by rpki-client