Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
File: TO1MeGdCnuAvXNwa--qlunEzYAg.mft (raw, json)
Hash identifier: nMr8T19YHVBewjsQ8wvVLYpZ8m4RlrmIri0k5SIOAMQ=
Subject key identifier: 50:0A:53:F5:EF:09:2B:3E:B1:95:9A:5A:03:6B:EB:56:0C:9B:41:0D
Authority key identifier: 4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
Certificate issuer: /CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Certificate serial: 0194BBCE7FEB754795C8824172250B3B26BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: TO1MeGdCnuAvXNwa--qlunEzYAg.crl (hash: xdoxltKCFfqFLlV43vGcKuRgX/XwnNbcUGqDjloWBKE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7f:eb:75:47:95:c8:82:41:72:25:0b:3b:26:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ced4c7867429ee02f5cdc1afbeaa5ba71336008
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=500a53f5ef092b3eb1959a5a036beb560c9b410d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:71:b2:25:4c:8a:42:98:42:5e:8a:61:bb:eb:
93:d2:cd:b0:65:e8:eb:46:63:f0:2e:a9:9e:ec:4c:
b6:ac:0b:7f:00:23:62:f0:32:3f:d7:c7:de:6d:fe:
90:0d:56:3d:84:0f:a7:29:79:ed:dc:d0:4c:27:c6:
4a:68:54:ac:4a:9e:3f:70:4a:39:b1:95:27:40:5a:
30:e1:07:03:d9:e0:41:fa:4e:55:33:21:ce:89:19:
5b:12:83:32:7e:ed:83:5f:c4:8d:07:96:ed:e7:3e:
5a:e4:f1:a9:44:bf:97:98:a7:a2:b8:2c:c9:29:aa:
a9:8b:d0:9a:8b:a5:66:fe:c3:f8:e3:bb:e2:ea:f1:
19:4b:ee:d2:95:cb:d1:42:21:6b:ba:e1:1b:a3:b5:
d8:b3:a8:2f:cf:82:0a:6a:70:d1:2a:9b:82:dd:14:
e0:1c:05:fe:86:56:19:62:fb:18:14:1d:cb:d7:a4:
ba:24:3e:7c:a6:c3:5e:34:fc:76:26:09:62:eb:52:
d0:96:25:6a:d6:2e:a9:12:1d:14:67:fe:af:89:58:
ef:ca:0b:26:88:2f:75:62:a0:53:5c:42:0b:76:de:
3f:ed:f5:17:61:43:c5:25:63:b2:3f:1b:6b:cd:05:
0a:ed:ed:85:eb:5f:9f:31:eb:cc:06:6c:7f:68:1a:
d1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:0A:53:F5:EF:09:2B:3E:B1:95:9A:5A:03:6B:EB:56:0C:9B:41:0D
X509v3 Authority Key Identifier:
keyid:4C:ED:4C:78:67:42:9E:E0:2F:5C:DC:1A:FB:EA:A5:BA:71:33:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TO1MeGdCnuAvXNwa--qlunEzYAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/76d6f1-7ffb-4301-9310-160cde88ed3f/1/TO1MeGdCnuAvXNwa--qlunEzYAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:fc:c7:ce:02:1a:82:5f:ec:46:45:49:b4:c1:ff:a7:3e:b5:
7c:8d:26:2e:a2:7d:c3:17:5a:cf:a5:26:af:25:bd:62:85:0a:
92:fb:c4:81:4d:7d:a5:0e:e4:16:9f:17:91:35:cc:50:63:34:
03:5d:17:f6:e6:57:74:bf:e5:09:9c:51:60:3e:58:72:7a:ab:
a0:c7:7d:40:3a:2f:2e:67:e5:89:2d:d6:9f:05:84:d1:e9:c2:
fb:99:f5:88:ee:e2:5f:f4:e1:cc:b4:1c:4d:ca:38:73:65:b9:
bf:b9:c9:cb:0a:8c:af:bb:6f:a8:e0:9e:ca:c9:a0:2b:a0:c6:
d8:61:ac:57:84:85:0d:fe:b2:aa:c5:08:b9:ca:21:ad:8c:c3:
9c:8f:b8:0a:78:2a:34:28:ca:19:6f:61:b5:09:29:0f:41:6e:
d6:f0:42:81:0f:b9:10:16:ae:15:0c:ca:ba:13:b9:e4:3b:2b:
0a:14:23:69:ae:92:a4:f6:69:a1:02:79:b3:f9:9a:a9:a7:dc:
d3:bb:3f:6d:49:79:16:08:03:aa:ec:ed:7d:c9:d4:a6:0f:bd:
c0:c4:63:e5:41:6d:c0:f4:a0:b8:80:0d:43:b3:43:7c:ed:5e:
c3:b5:44:8d:18:66:d8:68:7c:25:62:4c:c4:08:c9:c0:dd:f8:
90:69:f2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:28 2025 by rpki-client