Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
File: TUQhxgZa4gAa_NgtotDbIRISRag.mft (raw, json)
Hash identifier: oiV0y1RwujuOH/tc+6Vt1q0wZopyXVMF8sqD6qv/f2U=
Subject key identifier: 48:AD:3F:58:49:43:80:1D:EA:0C:D6:B0:74:55:C4:5F:A1:6E:66:73
Authority key identifier: 4D:44:21:C6:06:5A:E2:00:1A:FC:D8:2D:A2:D0:DB:21:12:12:45:A8
Certificate issuer: /CN=4d4421c6065ae2001afcd82da2d0db21121245a8
Certificate serial: 0194BBCDEE633EA73FBC2AABEEFA35797EED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TUQhxgZa4gAa_NgtotDbIRISRag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
Manifest number: 01D5
Signing time: Fri 31 Jan 2025 10:00:22 +0000
Manifest this update: Fri 31 Jan 2025 10:00:22 +0000
Manifest next update: Sat 01 Feb 2025 10:00:22 +0000
Files and hashes: 1: TUQhxgZa4gAa_NgtotDbIRISRag.crl (hash: C+IhsIqlGRZywMik/qYGVInEHLUPBJaCk6SOSeEZgm0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:ee:63:3e:a7:3f:bc:2a:ab:ee:fa:35:79:7e:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4421c6065ae2001afcd82da2d0db21121245a8
Validity
Not Before: Jan 31 10:00:22 2025 GMT
Not After : Feb 1 10:00:22 2025 GMT
Subject: CN=48ad3f584943801dea0cd6b07455c45fa16e6673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:85:bd:18:e7:7a:a6:df:36:c6:29:bb:dd:b2:
f8:6b:af:20:08:7f:63:0c:11:bd:c7:ab:ba:c8:8e:
8b:c9:df:c8:9f:42:66:5b:82:d1:d8:34:14:71:eb:
85:43:4a:41:49:8f:86:90:c6:03:22:f1:bb:a4:af:
ad:e8:0d:23:29:50:d0:3a:57:91:93:9f:de:33:03:
0e:83:c6:df:a6:51:19:3f:ca:7f:08:6c:f2:25:cb:
93:14:1b:86:24:61:35:e0:41:4f:14:e0:52:2d:3a:
ff:bd:19:e6:7e:7b:15:0e:d5:1a:4e:c9:34:f2:b8:
a6:7f:71:c3:c5:01:b4:bd:21:20:4a:75:22:fc:1e:
b0:d5:ef:30:30:88:dc:f3:f7:c6:ea:de:f4:78:00:
7d:0a:21:0e:99:6a:b6:fb:45:ca:ea:ab:ec:bb:27:
8d:21:66:30:62:07:5d:0b:a0:84:1f:66:c6:2a:91:
3b:a3:41:19:76:0f:01:6c:05:53:70:22:a5:15:7e:
7b:cd:68:60:ef:71:cf:1d:b9:ef:96:4b:9f:47:36:
4d:8e:84:93:e4:76:e9:eb:82:a8:85:bf:be:b3:c8:
b1:d6:59:8d:eb:93:f9:d5:dc:7a:cf:ad:3a:44:82:
62:c3:3c:7b:e4:18:b7:fe:d5:e4:d0:ef:67:53:dc:
be:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AD:3F:58:49:43:80:1D:EA:0C:D6:B0:74:55:C4:5F:A1:6E:66:73
X509v3 Authority Key Identifier:
keyid:4D:44:21:C6:06:5A:E2:00:1A:FC:D8:2D:A2:D0:DB:21:12:12:45:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUQhxgZa4gAa_NgtotDbIRISRag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/80a53e-555c-4e5a-b527-3fc56c86f476/1/TUQhxgZa4gAa_NgtotDbIRISRag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:73:95:92:78:47:33:fc:02:1b:a2:61:05:da:4d:e9:4c:20:
36:f9:78:ec:53:45:46:12:7c:e4:5b:5b:64:79:c9:fd:9a:32:
4c:1e:ae:8c:09:b2:fb:75:c8:4b:d1:73:0e:8d:8c:15:a9:db:
96:62:e9:4f:2f:e4:e6:86:0c:ef:bd:f9:e2:23:dd:b3:1c:f0:
4c:9a:2c:8d:e7:cf:ac:53:0d:ce:a5:c6:86:c2:b7:64:c9:5d:
d0:38:8c:77:2c:2e:4c:12:7a:84:c0:e2:64:ad:db:23:8a:fe:
9a:06:6b:43:9d:04:9e:ad:a1:26:68:30:3c:d0:ac:b3:16:de:
5e:d5:31:fb:9f:87:52:e1:d3:0d:fb:e2:88:f7:f8:cb:b9:c5:
5c:3d:6a:e5:00:a2:12:82:26:b8:19:46:50:d4:68:11:01:06:
de:ff:99:59:44:f8:f4:c1:19:c7:34:86:85:b2:c8:6f:08:e6:
33:23:13:17:4d:2c:db:f4:3a:d8:1f:df:34:f7:20:52:f0:4a:
38:20:61:79:4e:58:ac:27:2d:0a:24:6f:a1:26:4b:f4:69:c6:
66:fe:3a:d4:0b:1d:12:f0:99:ac:1d:6b:fe:4a:42:4f:51:41:
c5:81:b9:0d:81:b1:0c:b0:7c:7b:ab:e6:46:02:85:d4:95:9c:
71:67:37:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:45 2025 by rpki-client