Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
File: TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft (raw, json)
Hash identifier: 0XB70v0+HcXTI3xTqOestq8/1xM8sItlhniQbSavitw=
Subject key identifier: F8:FB:30:C5:45:DF:E6:21:60:A7:90:87:3A:A5:2B:EB:89:21:96:A6
Authority key identifier: 4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
Certificate issuer: /CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Certificate serial: 0194BC3BFCD8A7DB960CB6F844FD7B1782A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
Manifest number: 1380
Signing time: Fri 31 Jan 2025 12:00:35 +0000
Manifest this update: Fri 31 Jan 2025 12:00:35 +0000
Manifest next update: Sat 01 Feb 2025 12:00:35 +0000
Files and hashes: 1: TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl (hash: Gnpbpz/5UtZPgcQ/Y0R9l4HuPgdHDWZf0YD7AFbkFVk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:fc:d8:a7:db:96:0c:b6:f8:44:fd:7b:17:82:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd710b65373e0d910da70636fc143c06ba5ddac
Validity
Not Before: Jan 31 12:00:35 2025 GMT
Not After : Feb 1 12:00:35 2025 GMT
Subject: CN=f8fb30c545dfe62160a790873aa52beb892196a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:15:bd:2e:a0:03:fc:9f:19:09:bc:47:f1:5b:
b4:74:8e:63:8d:b3:66:1a:f4:97:c8:9f:6b:cb:a1:
d6:db:d8:f1:e3:47:eb:a1:7b:7d:5f:d5:cd:0f:25:
ce:03:af:0a:82:7e:56:2d:b2:76:d8:f4:48:78:04:
c8:36:1d:c7:4f:24:cf:82:bb:61:bd:a3:7f:d4:79:
a3:5d:cf:e3:59:93:76:e5:2b:76:3a:e3:55:c8:a0:
c1:ab:16:9f:c9:b5:ea:7f:e3:f4:70:3d:ff:8d:1e:
4e:4d:c8:6f:a8:30:cb:a8:d8:ad:0f:b2:82:db:82:
dc:ef:12:a8:fd:b2:3e:48:36:09:8d:49:e5:c1:bd:
24:e2:7a:8a:ce:89:85:23:22:b2:d6:20:3a:f5:14:
d9:cb:9e:7c:04:9a:45:a2:12:d1:f2:15:cf:92:ed:
01:1c:8c:7c:ef:cf:46:27:ac:06:ae:2a:01:c6:5f:
31:42:ed:b1:e9:4d:88:96:7d:30:90:f0:f9:86:87:
cf:07:4e:2c:68:6c:74:04:ab:b9:73:da:b5:78:73:
e5:c1:be:e5:75:cd:33:f8:23:76:b1:b2:11:02:94:
28:73:94:3f:eb:1a:74:06:30:b7:6d:84:a4:bc:f9:
cd:24:db:a4:ed:0d:c1:be:93:18:e0:17:87:1b:d2:
46:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:FB:30:C5:45:DF:E6:21:60:A7:90:87:3A:A5:2B:EB:89:21:96:A6
X509v3 Authority Key Identifier:
keyid:4C:D7:10:B6:53:73:E0:D9:10:DA:70:63:6F:C1:43:C0:6B:A5:DD:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNcQtlNz4NkQ2nBjb8FDwGul3aw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6f40dd-4c07-405b-a042-f9250dd79fe9/1/TNcQtlNz4NkQ2nBjb8FDwGul3aw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:1e:4b:dd:5b:a5:f7:e1:d6:b7:2a:00:fe:cb:72:77:38:d9:
4d:28:37:1c:36:e4:a1:b4:8d:35:c1:4b:2e:61:4e:8d:b3:4b:
08:0f:36:e6:7b:8a:ad:ec:cc:28:4f:0d:f4:b3:a3:72:06:f5:
a1:29:a2:57:49:cf:9f:c1:b5:85:8e:14:5b:3e:99:02:1f:00:
d1:11:10:70:2b:c9:25:08:7a:87:8d:f3:e8:14:9b:03:29:25:
7a:36:e4:ae:7f:d6:2a:ce:b4:ec:65:3f:48:c9:d7:ff:c1:07:
38:5e:32:86:99:a6:3a:8c:7b:e8:72:09:ae:54:9d:3f:35:84:
dd:06:e6:0d:7b:e3:45:bf:51:59:9e:a0:9b:2d:27:cf:3e:eb:
a9:c3:4f:e8:63:59:33:3b:c1:96:39:a9:5b:66:db:7a:c5:e7:
d2:4f:c1:a5:86:70:c3:fb:f5:3e:34:e5:c2:c5:47:09:fb:4d:
cb:0d:52:93:aa:a7:2d:a4:42:70:26:be:5a:f7:30:e0:46:99:
4c:83:1d:be:b2:b8:ba:2a:87:6f:5a:2b:55:62:6f:7e:64:d6:
6f:0e:3d:9d:c5:7c:6c:6d:32:63:48:0e:97:b7:0c:ff:50:9e:
bd:63:e5:06:19:87:a2:47:94:b8:44:6c:bd:d0:9c:ab:77:ba:
47:bf:21:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:25 2025 by rpki-client