Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
File: TSE3TacxMU8KBRddJbDYmnb24IE.mft (raw, json)
Hash identifier: xnlpe9LGeotMNVMQQU1mIFDU7Dpp+sq2qpBkK4PaCDY=
Subject key identifier: 50:09:84:07:AE:50:AD:2D:0C:E8:13:FA:09:9D:AE:B2:30:93:3B:3B
Authority key identifier: 4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81
Certificate issuer: /CN=4d21374da731314f0a05175d25b0d89a76f6e081
Certificate serial: 0194BC72B321E38887AB0A202A28A851D154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
Manifest number: 0399
Signing time: Fri 31 Jan 2025 13:00:21 +0000
Manifest this update: Fri 31 Jan 2025 13:00:21 +0000
Manifest next update: Sat 01 Feb 2025 13:00:21 +0000
Files and hashes: 1: TSE3TacxMU8KBRddJbDYmnb24IE.crl (hash: uhbPDpCjGKxzZL19dxOUDmlX8yvFBEW47AWRQBSkmWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:b3:21:e3:88:87:ab:0a:20:2a:28:a8:51:d1:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d21374da731314f0a05175d25b0d89a76f6e081
Validity
Not Before: Jan 31 13:00:21 2025 GMT
Not After : Feb 1 13:00:21 2025 GMT
Subject: CN=50098407ae50ad2d0ce813fa099daeb230933b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bf:cd:82:47:81:d2:c5:07:7f:db:40:57:57:
82:43:4c:81:cd:ed:1f:d4:29:04:9c:6d:9d:45:64:
c8:2e:72:92:32:ed:df:7c:17:da:9f:11:cd:1c:e0:
78:35:38:3c:4a:c2:e0:dc:66:bb:b2:24:29:5a:46:
2b:06:73:4b:0a:29:ff:b0:15:77:59:6f:ac:9e:59:
c3:10:91:60:7c:20:18:1e:e8:63:44:f3:c2:1e:37:
eb:21:3d:36:e5:63:7a:c3:b6:8e:6c:7b:3a:47:dc:
10:11:7f:c4:f8:fc:9f:94:a1:15:8e:fd:63:e3:24:
11:7f:ce:1e:a4:76:20:c8:64:d5:3b:5d:3d:b8:0d:
40:af:73:4c:e3:74:35:d3:8c:9f:2f:a4:31:97:a3:
c3:45:b4:99:1a:b1:af:f2:de:4c:d9:63:24:d5:ec:
14:3b:8d:1c:ac:47:d4:3b:3d:0f:7b:a3:c8:7a:2e:
44:90:3e:0b:b1:87:80:97:4e:96:57:33:e1:53:de:
46:eb:b6:94:4d:54:4f:5f:47:13:95:e3:86:bc:0b:
65:21:59:66:f8:b3:61:bd:84:e0:8a:7c:18:64:08:
8a:fd:7b:7a:fa:49:03:be:a0:c1:02:0c:b3:20:3e:
44:89:f6:a8:af:7a:33:68:3b:e8:05:6d:28:30:27:
9d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:09:84:07:AE:50:AD:2D:0C:E8:13:FA:09:9D:AE:B2:30:93:3B:3B
X509v3 Authority Key Identifier:
keyid:4D:21:37:4D:A7:31:31:4F:0A:05:17:5D:25:B0:D8:9A:76:F6:E0:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSE3TacxMU8KBRddJbDYmnb24IE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9b2fc1-ba58-4957-8540-eb1ed0b487b1/1/TSE3TacxMU8KBRddJbDYmnb24IE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:27:d6:44:df:77:b8:89:8f:56:1c:8b:e6:24:9a:d4:86:76:
18:ad:01:d1:0e:cf:67:7c:d1:5b:8c:3e:63:c1:d6:e7:32:db:
d3:a3:06:6d:67:e6:08:cd:3a:c7:ab:73:84:bf:69:48:dc:a7:
43:da:82:57:8c:e2:11:3d:bd:0b:20:9b:ee:95:fd:d1:98:fe:
ac:2f:2c:93:0b:a1:38:a7:89:d9:e3:df:11:98:09:b1:c6:fc:
00:6c:50:90:9f:b7:01:c7:1c:00:29:8f:90:2c:74:df:0c:1e:
16:89:41:f4:d8:e7:e8:ea:f1:d8:1b:82:32:1b:18:76:9d:0b:
43:5e:44:7a:8f:c4:1e:8d:31:2d:04:55:07:d0:fd:27:25:24:
e1:7f:2c:71:c2:dc:47:03:e6:0c:7d:46:a6:ae:8a:8d:46:61:
77:9e:c2:86:ac:69:16:1f:20:d8:f1:78:bb:4d:7e:b1:02:8f:
5f:98:9e:30:c2:eb:6e:f3:f6:47:ae:7e:78:12:64:fe:fc:74:
0d:d0:21:c4:1c:1b:1b:cf:9f:9f:5d:88:33:96:92:12:d6:39:
78:5f:2b:74:f9:09:e7:69:f4:fe:35:1e:d8:a4:a9:1f:4f:33:
45:78:e3:be:fa:19:fd:4e:a8:0f:7b:f4:4d:5c:ca:45:2e:53:
32:d4:0e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:28:08 2025 by rpki-client