Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
File: TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft (raw, json)
Hash identifier: vcPlK0fTv4rHNlHMfjuAF6M7Y/QdvJkF6eqSxMuI2DQ=
Subject key identifier: 45:F7:DC:2A:1D:06:EB:E5:74:39:72:0F:E6:91:CD:0E:57:F0:55:4F
Authority key identifier: 4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
Certificate issuer: /CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
Certificate serial: 0194BC3C6F884DE24886BB2E24C34751EBD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
Manifest number: 1387
Signing time: Fri 31 Jan 2025 12:01:04 +0000
Manifest this update: Fri 31 Jan 2025 12:01:04 +0000
Manifest next update: Sat 01 Feb 2025 12:01:04 +0000
Files and hashes: 1: TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl (hash: CX6nWLyu0lgjEtteKjOdEqRA6NndQRQFZj4zxQY5qKI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:6f:88:4d:e2:48:86:bb:2e:24:c3:47:51:eb:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c0006e05896f6ffb30161e7c8dda2f9ad05b561
Validity
Not Before: Jan 31 12:01:04 2025 GMT
Not After : Feb 1 12:01:04 2025 GMT
Subject: CN=45f7dc2a1d06ebe57439720fe691cd0e57f0554f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:96:41:66:b6:07:7c:4a:55:57:0c:af:65:98:
81:20:39:3b:2a:f8:af:2f:bc:ef:be:ad:e1:ed:8b:
41:88:39:3b:06:8c:c1:b3:08:2f:95:b9:a1:fd:58:
c8:69:21:81:fb:f4:32:47:10:c8:76:96:64:e1:ea:
72:bf:e1:3e:c4:50:ab:c7:e5:25:4a:d3:7b:94:6a:
d2:b6:22:93:b9:52:73:2a:9c:6c:a3:f7:ca:80:ab:
6d:a9:a1:04:38:fa:c1:33:c3:13:d7:2c:81:59:72:
b5:f9:0b:b6:44:ab:06:0f:d6:7d:65:f5:7d:c3:53:
38:7c:8d:f0:95:b9:3e:9e:f2:f9:67:b9:a3:49:bc:
88:bd:f3:1f:8d:24:73:0a:77:0b:38:4e:c6:c5:9e:
1f:37:02:44:66:58:ca:c6:46:dd:52:f9:61:b6:b5:
5f:5c:5b:a6:a1:ec:67:c9:cb:fd:4f:0b:a6:0a:e0:
4a:dc:b2:22:00:06:01:c2:0d:20:0d:af:0b:7c:c3:
c6:9d:e9:e7:f1:be:ba:d1:90:eb:61:89:27:00:09:
bb:d1:40:dc:42:3b:f0:77:a7:54:0b:e9:8d:b0:a0:
17:4a:d9:8c:ba:3e:e6:3e:2d:88:7b:c5:3a:d8:9c:
c8:cd:a3:75:72:67:0f:88:10:43:4f:eb:09:b5:0b:
95:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F7:DC:2A:1D:06:EB:E5:74:39:72:0F:E6:91:CD:0E:57:F0:55:4F
X509v3 Authority Key Identifier:
keyid:4C:00:06:E0:58:96:F6:FF:B3:01:61:E7:C8:DD:A2:F9:AD:05:B5:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAAG4FiW9v-zAWHnyN2i-a0FtWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/b7f839-c680-45ea-a8ee-13087bebd1e4/1/TAAG4FiW9v-zAWHnyN2i-a0FtWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:12:84:ba:ae:a2:38:5e:1b:d1:f7:2f:9d:3f:88:91:15:fe:
69:66:31:19:bc:6e:2c:68:cd:e1:11:a6:66:d1:3a:bb:6d:82:
6d:98:e2:99:c4:94:04:28:c4:e1:d4:df:35:cf:30:a0:40:77:
3c:cb:8c:86:b8:30:70:df:af:c0:a6:2c:45:55:64:f6:2c:48:
d3:44:b9:0a:a7:b0:cd:b8:00:3c:06:3b:14:a2:60:fe:87:a2:
3d:f5:3f:2c:cc:ce:6a:e3:65:f9:83:a0:8f:1a:ea:e3:1f:92:
42:b7:e4:91:08:12:8b:6a:b9:aa:c0:5f:91:e2:f3:71:92:17:
bf:0f:33:9c:a4:52:0a:32:f9:a2:2a:34:5e:96:2c:c7:ef:83:
24:95:8a:0a:a9:7f:47:1d:a5:51:a2:ea:d4:43:83:81:ea:99:
02:ac:8c:9e:a2:f0:b2:28:a8:49:8d:da:cc:84:9b:9f:b4:78:
ae:eb:29:c2:bf:d7:93:43:91:e8:ec:c6:62:12:ca:37:b7:74:
28:2d:46:af:95:18:54:75:86:38:40:78:f1:93:3b:10:68:b4:
84:c5:97:13:99:22:ac:01:d6:75:57:ca:02:41:e5:e8:ab:ae:
de:fb:d1:8d:34:1a:c1:6d:5b:96:1c:99:1c:dd:3b:95:70:d4:
d0:86:5e:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:24 2025 by rpki-client