Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
File: TE6QpGzZL4_8sZJLk7cdG60xMBI.mft (raw, json)
Hash identifier: VO8aPk0dVAwP40J+qILizG+swbwnisv4yHpPrtt+cbo=
Subject key identifier: B7:41:FF:53:0A:F1:E1:90:6A:56:D5:CC:86:8F:D0:23:83:CB:8D:A0
Authority key identifier: 4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12
Certificate issuer: /CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
Certificate serial: 0194BCA996CFC810360D57EECE4EE9FFEE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
Manifest number: 0C28
Signing time: Fri 31 Jan 2025 14:00:18 +0000
Manifest this update: Fri 31 Jan 2025 14:00:18 +0000
Manifest next update: Sat 01 Feb 2025 14:00:18 +0000
Files and hashes: 1: TE6QpGzZL4_8sZJLk7cdG60xMBI.crl (hash: JZ/ooyhExGMDsqDJblRzJ6EdrzBC5+L04YR251Tv3rE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:96:cf:c8:10:36:0d:57:ee:ce:4e:e9:ff:ee:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4e90a46cd92f8ffcb1924b93b71d1bad313012
Validity
Not Before: Jan 31 14:00:18 2025 GMT
Not After : Feb 1 14:00:18 2025 GMT
Subject: CN=b741ff530af1e1906a56d5cc868fd02383cb8da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0a:b1:c9:8d:1b:6c:44:84:7d:f8:c0:c4:d2:
44:62:e8:f5:7a:e5:2a:a5:2b:51:07:0d:f8:98:6d:
93:4e:e4:40:d9:5e:f1:51:66:ae:0e:ac:0f:1e:1f:
d8:bd:63:c0:e6:68:4b:5f:83:26:d5:ab:2a:5d:5a:
9c:1a:44:b9:50:4d:da:5e:26:08:5a:f9:4a:f6:dc:
7d:70:67:5d:06:be:82:ec:f9:4c:1f:47:f0:33:01:
8f:83:e5:7c:8c:e1:ab:9e:de:81:a2:e9:67:90:a5:
29:c0:25:9f:d6:d7:e4:09:e4:c1:03:e8:5a:18:0b:
80:58:26:f7:8e:d2:00:4d:b8:23:e7:69:03:49:a1:
ac:b6:22:1a:43:9f:54:7d:5f:a7:b4:63:f8:22:50:
a2:b3:51:01:24:2a:93:67:d8:fe:dd:b2:0c:ae:b5:
34:95:51:f4:29:90:fb:9d:34:b8:cc:1b:9c:89:d0:
30:fe:a1:08:43:e8:d4:03:38:45:03:25:27:5f:11:
9f:09:b5:09:8b:be:8b:45:e5:e7:e8:02:c2:47:38:
35:ca:f7:78:f2:85:3e:9b:3b:b9:f3:82:45:16:d9:
f3:4b:39:af:41:c6:98:c4:0c:95:05:8d:cc:1c:16:
46:be:94:d2:63:93:04:7a:9f:8b:62:0d:ce:9e:51:
a8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:41:FF:53:0A:F1:E1:90:6A:56:D5:CC:86:8F:D0:23:83:CB:8D:A0
X509v3 Authority Key Identifier:
keyid:4C:4E:90:A4:6C:D9:2F:8F:FC:B1:92:4B:93:B7:1D:1B:AD:31:30:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TE6QpGzZL4_8sZJLk7cdG60xMBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/c27eec-7141-4575-9a6f-c45728c56f3b/1/TE6QpGzZL4_8sZJLk7cdG60xMBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:4a:49:ac:8f:70:07:8d:71:ab:99:85:9e:0f:09:7f:b8:20:
7a:62:71:10:86:fd:1c:92:09:23:8d:77:32:41:ba:0f:d6:94:
51:d9:94:32:cb:30:01:bc:01:c8:52:d3:81:d6:fd:b8:58:d3:
84:82:03:b5:e0:5a:11:c8:75:60:49:38:17:43:be:d0:31:0e:
ed:60:13:48:8b:44:b4:f9:04:16:c4:c8:a7:37:6b:28:e5:80:
51:97:d5:cc:34:97:a7:21:5e:90:10:d8:4a:32:34:32:8e:f4:
33:17:07:2d:32:1c:91:e1:51:b0:55:27:1a:dd:45:bd:76:fb:
bc:0f:6b:6e:c4:2f:37:14:d2:9d:d3:04:f8:7e:8a:c0:7d:f2:
53:33:eb:a4:b8:41:0c:6c:d0:c4:e7:54:4a:bc:7f:57:c8:44:
80:8d:a7:38:fd:d3:72:9c:98:9e:27:f8:39:bc:bc:cc:4d:5d:
d2:58:9e:a9:b2:0e:b4:b8:aa:bb:e9:bc:1d:f8:71:d5:7b:17:
73:36:65:2f:7e:38:c7:12:59:e0:60:ea:0b:4e:2f:a9:78:1d:
19:51:83:9c:8e:9e:02:7c:fe:2d:e0:83:7e:98:8d:18:f2:5b:
68:46:dd:a5:1e:67:43:42:c9:ce:7c:4a:82:30:69:53:24:b8:
eb:c1:80:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:02:01 2025 by rpki-client