Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
File: tsaaSiFb3h0yk03chd6vj9nJRHk.mft (raw, json)
Hash identifier: MiI2tYw1fwGn697VXfs2zU3hnUIgUdVUImRRDb8YTCM=
Subject key identifier: 06:E6:8A:11:5E:B8:94:B4:AE:5A:15:5D:04:39:DB:12:FE:0E:27:86
Authority key identifier: B6:C6:9A:4A:21:5B:DE:1D:32:93:4D:DC:85:DE:AF:8F:D9:C9:44:79
Certificate issuer: /CN=b6c69a4a215bde1d32934ddc85deaf8fd9c94479
Certificate serial: 0194BC3C0EBE0DA9B267589F8DF2F9198250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
Manifest number: 0BD6
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: tsaaSiFb3h0yk03chd6vj9nJRHk.crl (hash: cn6d56plOl2Q4u8IJK0EURTRLeG3uOnbDx8mYwyYqmY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0e:be:0d:a9:b2:67:58:9f:8d:f2:f9:19:82:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c69a4a215bde1d32934ddc85deaf8fd9c94479
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=06e68a115eb894b4ae5a155d0439db12fe0e2786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:d7:24:90:8c:c5:01:cb:9a:72:ab:14:94:d4:
33:64:b8:0c:50:67:24:63:7c:31:ea:ab:62:e1:be:
1e:d1:ad:70:80:ea:d4:d0:b5:f9:18:71:2f:6d:64:
88:d9:b8:ee:7e:48:c9:99:d2:d2:f5:de:e8:42:48:
32:7e:30:3f:6e:96:3d:3c:f3:72:d1:48:12:c6:45:
16:87:8e:b0:be:91:e3:82:d3:4e:6c:a7:f4:ac:f7:
69:09:2e:29:ac:78:73:f9:5a:b2:49:6b:1b:32:45:
10:82:3d:51:c1:26:e8:07:45:fe:7a:4c:ad:c8:60:
77:0b:95:47:4b:32:53:eb:da:b4:ed:57:a2:8b:b3:
89:4d:d1:db:5a:1f:62:23:c7:f9:0a:2f:d6:40:21:
04:75:aa:04:1c:2e:89:97:4b:cf:f1:63:a5:c1:14:
a9:fb:dc:a7:63:a7:be:79:b2:e4:9e:e7:11:5d:29:
b0:52:cc:87:4f:1a:ac:9d:8e:c2:60:ac:41:3e:59:
c4:c1:e0:fb:e3:1d:aa:bf:72:69:4a:49:32:c3:d7:
bc:a2:c0:d2:67:84:e5:ad:cd:b6:bc:a5:ee:7e:b8:
c9:16:00:1d:d5:3e:7e:2c:e5:8f:43:8c:05:08:e6:
67:4d:5d:8e:e5:41:e2:f1:72:a4:81:00:54:e5:31:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:E6:8A:11:5E:B8:94:B4:AE:5A:15:5D:04:39:DB:12:FE:0E:27:86
X509v3 Authority Key Identifier:
keyid:B6:C6:9A:4A:21:5B:DE:1D:32:93:4D:DC:85:DE:AF:8F:D9:C9:44:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsaaSiFb3h0yk03chd6vj9nJRHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/577a7b-5dcc-43a7-a89c-e3bc6b499e7b/1/tsaaSiFb3h0yk03chd6vj9nJRHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:29:5c:7c:ab:05:4a:8f:e2:48:f5:95:56:c4:e3:3d:1a:17:
61:83:28:bf:0e:42:98:10:0a:82:ad:cc:23:92:78:9f:4a:a2:
55:8d:4a:13:cd:32:67:2b:fe:43:43:63:04:b2:1c:d4:f5:2a:
3e:08:a6:1c:02:9c:db:ed:66:ca:9b:cf:99:f0:15:b1:d2:1b:
6d:c2:ef:41:e8:58:ff:76:ee:b7:8d:d1:af:13:cf:ee:5c:23:
e4:62:bc:25:9d:42:de:b3:7b:79:e0:27:0c:fd:3a:46:2b:76:
94:5c:b3:c0:c8:74:88:79:36:a1:12:fa:79:ce:3c:8c:fe:56:
88:ed:6d:57:4d:bf:77:75:57:f2:93:00:72:85:49:7d:80:cb:
b5:4d:5f:ec:6c:29:30:41:e3:2e:bf:e6:0e:42:5d:4c:69:c3:
73:bd:f5:b0:84:1c:9c:2a:bd:4e:1e:78:96:88:dd:93:a1:31:
47:4b:74:0f:de:23:76:53:0f:8e:f2:da:51:fc:88:4b:3f:82:
a7:4f:b9:84:7d:1b:9d:4e:39:26:6a:5e:6a:d6:ea:44:e6:fd:
41:82:60:c1:61:47:5b:be:ca:fd:5c:da:c3:fb:ce:fd:d3:b1:
84:ca:c6:f0:8b:f0:44:cc:73:80:2a:60:30:8a:06:81:ca:d1:
4e:6d:c4:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:34:16 2025 by rpki-client