Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
File: TM6YuMJCaF3bYPTiEJwr01GmQn8.mft (raw, json)
Hash identifier: WXE4hQ5wNJ51jPGqIGrANRk6Qk5Zj3IW2D7CdJlIUPM=
Subject key identifier: 4C:34:D1:9E:DA:FF:DA:BE:AC:D1:48:7A:36:C4:AD:4F:F4:1C:14:1B
Authority key identifier: 4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F
Certificate issuer: /CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
Certificate serial: 0194BBCEADD37D13D6FBE9A8C2B7D986E37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:01:11 +0000
Manifest this update: Fri 31 Jan 2025 10:01:11 +0000
Manifest next update: Sat 01 Feb 2025 10:01:11 +0000
Files and hashes: 1: TM6YuMJCaF3bYPTiEJwr01GmQn8.crl (hash: VYD+RProksp+IuEVQAJHtoFiaDqtGcFuw6MqOb/JGMs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ad:d3:7d:13:d6:fb:e9:a8:c2:b7:d9:86:e3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cce98b8c242685ddb60f4e2109c2bd351a6427f
Validity
Not Before: Jan 31 10:01:11 2025 GMT
Not After : Feb 1 10:01:11 2025 GMT
Subject: CN=4c34d19edaffdabeacd1487a36c4ad4ff41c141b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:ea:98:8b:73:3d:f4:09:4e:ea:59:78:a4:
8d:9b:b3:a4:71:92:b9:d5:ae:df:5f:81:ca:1a:10:
28:c6:7b:ea:2f:57:17:90:d5:53:8e:f1:73:12:70:
dc:a6:d6:89:bb:5d:5b:9b:c5:02:f8:43:a9:95:88:
49:2c:5b:eb:3f:aa:e6:27:8a:39:17:ee:58:0a:7c:
43:f4:a1:71:9e:21:cd:b6:f3:9c:ee:24:4c:0d:21:
3b:b5:9b:31:92:35:c3:88:cb:2c:cb:8c:12:12:f7:
21:ce:75:a3:70:bb:ba:bf:04:0f:35:b9:dd:5d:a9:
ba:1b:09:95:47:47:8f:4c:99:ad:84:49:1d:8f:6a:
74:15:12:b7:9e:60:79:e5:21:24:19:f5:da:d7:1b:
f1:df:44:1a:4d:af:44:85:1a:0e:16:15:3d:59:a6:
ed:59:6a:9d:e4:fb:2e:5d:1b:3f:9e:e1:92:fa:33:
16:d8:2e:1f:7b:96:49:01:ee:e7:3f:34:86:b6:74:
4f:5d:60:ea:0d:58:ca:38:8a:31:a5:8a:39:51:f4:
e8:26:52:0b:3d:87:0c:51:df:e2:e8:51:29:f9:28:
9d:42:19:0e:54:42:72:55:59:53:f3:4f:10:2f:10:
d2:67:67:f1:63:1f:62:36:ad:3c:e5:2b:57:4e:be:
41:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:34:D1:9E:DA:FF:DA:BE:AC:D1:48:7A:36:C4:AD:4F:F4:1C:14:1B
X509v3 Authority Key Identifier:
keyid:4C:CE:98:B8:C2:42:68:5D:DB:60:F4:E2:10:9C:2B:D3:51:A6:42:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TM6YuMJCaF3bYPTiEJwr01GmQn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/e79d38-a8ea-47c2-95dc-d194a7b05dda/1/TM6YuMJCaF3bYPTiEJwr01GmQn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:55:d3:f5:9e:31:1f:a1:ba:e3:3f:a2:7a:54:21:28:e4:dd:
b7:74:64:83:45:9c:c6:cc:31:2e:97:bd:7b:a5:c2:37:47:80:
7b:27:33:8c:70:2a:53:eb:4f:f5:de:c5:0c:8c:86:56:ba:e3:
b7:40:66:aa:e0:67:5b:1e:c0:6b:db:7d:6e:5b:5b:f8:7b:df:
c0:c8:c7:bb:f1:20:62:49:99:aa:60:aa:65:1a:8d:5c:ca:eb:
32:45:2f:b4:5e:cb:bf:f8:7f:0e:0c:43:17:84:e8:ef:7c:da:
78:6d:ea:95:45:f6:f6:b9:2f:b4:4a:ac:4c:ad:aa:d7:e4:af:
77:5d:aa:05:bd:20:78:64:96:fd:24:11:47:d8:4e:8b:cd:31:
6a:1a:ac:fa:0a:7a:3b:62:aa:96:73:07:47:08:bf:bc:30:b6:
5f:6c:67:92:3c:e0:d7:ae:f1:81:fc:0e:c4:81:10:e6:52:8f:
f4:71:eb:86:57:62:07:94:3d:b9:68:5e:e5:dd:e7:9d:64:2c:
c5:63:9d:dc:4a:b3:8a:21:80:78:15:e1:04:12:ee:e8:18:5b:
1e:89:f7:4f:e8:a1:11:36:4f:79:e9:c4:37:bc:4c:a8:00:52:
8c:6c:40:70:aa:33:3d:0e:a5:4b:46:82:cd:7f:a8:84:21:36:
3c:6d:0d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:57:26 2025 by rpki-client