Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
File: TgyY_GY_7jZUpy9MCBRhxBYc84E.mft (raw, json)
Hash identifier: 42vjfHIt6jfx39BCiMduPIhljBunGn9yj0ujMV/cIng=
Subject key identifier: 67:84:43:2D:39:06:A9:98:E5:6A:59:3A:CD:3A:67:1F:DD:F9:C0:88
Authority key identifier: 4E:0C:98:FC:66:3F:EE:36:54:A7:2F:4C:08:14:61:C4:16:1C:F3:81
Certificate issuer: /CN=4e0c98fc663fee3654a72f4c081461c4161cf381
Certificate serial: 0194BD17C3A36662055DCCE72362B90A1F46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
Manifest number: 11E8
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: TgyY_GY_7jZUpy9MCBRhxBYc84E.crl (hash: gfMdUEZg3fZVtqGn7kxm6CfDyS9wpSY4yolbjdQb3ns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c3:a3:66:62:05:5d:cc:e7:23:62:b9:0a:1f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0c98fc663fee3654a72f4c081461c4161cf381
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=6784432d3906a998e56a593acd3a671fddf9c088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b7:63:39:bf:b0:ca:a1:75:c9:64:73:5d:1b:
76:58:f4:a2:c7:87:70:ef:55:71:e4:85:a6:5f:58:
04:72:ed:7b:34:42:21:e7:11:05:ac:5e:d3:2e:23:
2f:1a:c8:c5:ff:1e:50:93:43:95:eb:91:7e:48:3c:
ad:70:87:8a:4f:ed:0f:63:1c:29:d9:53:91:13:0b:
1f:f2:c3:5d:02:b2:1e:fc:56:8b:e9:5d:55:5c:f7:
64:4d:1b:c5:24:2c:eb:df:9d:99:5f:a0:2a:20:48:
9c:a8:48:f7:37:3b:64:5b:0e:8e:a5:6e:da:8a:10:
7f:91:6d:0b:d1:bd:f0:11:d6:af:17:18:f2:e8:cc:
cf:51:fb:df:bb:ba:17:74:20:28:40:55:2c:60:42:
ab:df:5d:51:ea:b1:08:c3:0a:5d:90:59:35:db:f0:
9c:d6:30:b0:b7:09:99:53:ef:e8:56:70:4a:21:ab:
8e:83:f0:7f:a8:67:fc:e6:d4:47:d7:d7:5a:b6:0d:
e3:d7:90:b5:c4:36:c4:b7:d7:9c:d7:80:c9:8d:3f:
6d:11:6d:20:59:48:b5:ab:5d:33:43:ee:9f:cb:13:
44:b1:18:4e:30:4c:fb:2c:ee:f9:46:aa:b2:d8:35:
e5:63:90:cb:cb:50:51:85:9a:e7:07:7c:fa:a9:1d:
dc:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:84:43:2D:39:06:A9:98:E5:6A:59:3A:CD:3A:67:1F:DD:F9:C0:88
X509v3 Authority Key Identifier:
keyid:4E:0C:98:FC:66:3F:EE:36:54:A7:2F:4C:08:14:61:C4:16:1C:F3:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgyY_GY_7jZUpy9MCBRhxBYc84E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b39e52-87e6-44fa-a566-89fcaf69acc7/1/TgyY_GY_7jZUpy9MCBRhxBYc84E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:7b:d4:67:6f:4d:39:24:20:71:55:4e:1f:49:e6:06:8b:04:
be:92:b6:3f:11:5a:a1:95:78:7a:96:e0:96:6a:cc:e9:f7:c8:
a9:36:6e:3b:83:17:65:6f:36:47:5d:d6:2a:28:5f:52:75:80:
09:f7:cb:73:17:e3:0e:35:46:98:d7:50:46:5b:da:74:9c:e7:
0e:b9:ee:03:2f:ec:f4:84:4a:48:6a:37:1f:a8:76:d6:68:e2:
03:99:06:51:04:2b:90:4c:bd:48:24:67:6d:61:80:dc:c8:c8:
2c:13:74:3f:23:c2:df:4d:4a:e9:2b:b4:00:f0:e9:29:e0:01:
75:61:25:5e:73:98:50:84:82:d3:44:58:d9:53:c1:6a:f2:ef:
ad:8d:f4:0e:49:65:d6:45:ae:47:19:78:31:7d:85:f9:0b:9b:
e7:65:28:68:b3:d2:e7:37:d8:d8:a7:6b:d6:67:87:cb:86:e5:
d3:e5:9a:3d:38:9a:8d:4b:07:7e:11:98:51:fa:0b:34:9f:8b:
f6:5c:17:64:1e:cf:48:af:2d:4b:e6:b2:98:8b:a8:2c:7b:4e:
bd:cc:37:8e:8f:f8:26:9d:b2:74:55:1c:f8:7e:4e:b9:d0:8d:
f1:bf:83:0a:17:00:25:31:67:76:fa:55:10:f0:bc:2b:33:c9:
75:f7:83:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:06:30 2025 by rpki-client