Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
File: Tle6dst9bSrsBSA89BuOZxbufqA.mft (raw, json)
Hash identifier: psO32E+c84Pvng6YSLu+O9dJ1jx2KvhJE/k823iFLvQ=
Subject key identifier: 42:7B:64:55:C1:70:ED:67:BB:1C:20:43:86:60:C1:88:EE:02:BE:63
Authority key identifier: 4E:57:BA:76:CB:7D:6D:2A:EC:05:20:3C:F4:1B:8E:67:16:EE:7E:A0
Certificate issuer: /CN=4e57ba76cb7d6d2aec05203cf41b8e6716ee7ea0
Certificate serial: 0194BBCE6ECE6316284AC7247408AD1D9220
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
Manifest number: 0D4F
Signing time: Fri 31 Jan 2025 10:00:55 +0000
Manifest this update: Fri 31 Jan 2025 10:00:55 +0000
Manifest next update: Sat 01 Feb 2025 10:00:55 +0000
Files and hashes: 1: Tle6dst9bSrsBSA89BuOZxbufqA.crl (hash: /njnAk5qbmBtQ852SIRcqwhht3lpPgkyC38IU+/QMp0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:6e:ce:63:16:28:4a:c7:24:74:08:ad:1d:92:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e57ba76cb7d6d2aec05203cf41b8e6716ee7ea0
Validity
Not Before: Jan 31 10:00:55 2025 GMT
Not After : Feb 1 10:00:55 2025 GMT
Subject: CN=427b6455c170ed67bb1c20438660c188ee02be63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:43:38:11:6e:06:22:9a:16:77:55:8b:c7:17:
f5:0b:e1:09:eb:7e:b8:d6:34:03:0f:36:1d:ca:c3:
27:ba:31:4c:7a:f7:23:42:d5:34:65:f1:f1:7b:2f:
ad:73:0b:67:c8:a6:43:30:10:5e:54:48:08:0f:01:
17:9c:68:eb:9b:39:9b:37:27:70:7c:8e:b2:0b:37:
f7:79:6c:f5:24:76:b6:21:7e:bf:ec:1f:54:29:37:
1b:d8:c1:54:46:d8:7e:a0:43:a1:3e:dc:5c:5f:e4:
e6:97:83:d1:13:0e:4b:31:d4:f8:aa:13:be:5a:26:
c8:cf:9e:60:4e:a6:43:fc:d3:f1:42:d8:f6:96:ab:
86:62:8b:3c:bf:99:82:dd:64:9b:58:fa:5b:1e:5d:
e3:55:78:1d:0d:c0:41:c5:bb:a9:e0:9c:d7:47:0c:
b5:12:c7:7f:cd:eb:aa:52:c6:25:99:2a:0e:08:55:
76:32:bf:8a:72:52:4f:52:ff:63:1d:b0:fe:39:8a:
1e:6c:27:f5:29:5c:09:3f:52:fe:2c:0b:c0:75:fa:
82:88:d4:c0:da:54:4c:af:cc:8a:73:1f:11:69:a0:
d4:4b:ec:ae:bf:97:2e:b2:7b:65:61:c2:2d:07:5c:
ca:0c:21:55:e6:6b:e5:3e:88:d1:09:de:57:63:73:
5e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:7B:64:55:C1:70:ED:67:BB:1C:20:43:86:60:C1:88:EE:02:BE:63
X509v3 Authority Key Identifier:
keyid:4E:57:BA:76:CB:7D:6D:2A:EC:05:20:3C:F4:1B:8E:67:16:EE:7E:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tle6dst9bSrsBSA89BuOZxbufqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/69e7fe-40c0-45c2-b2b1-b72d7adbfb96/1/Tle6dst9bSrsBSA89BuOZxbufqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:1e:69:ca:86:e9:68:d5:94:4d:a5:60:cd:ec:6a:b0:de:2b:
39:ac:19:1f:5d:ca:39:8b:d7:72:68:ec:88:0d:e2:79:47:bd:
5d:a0:4d:ab:50:56:d9:2a:e6:b4:ed:5f:ed:4a:c2:36:d7:ab:
ce:e3:c7:27:df:10:b6:82:5c:37:2e:b3:01:40:e2:02:91:00:
21:48:7f:be:4b:de:5a:43:3f:06:f6:82:aa:4e:b1:56:cc:9e:
e3:ea:de:45:c3:9a:ce:14:a8:fb:87:41:2a:a8:43:5c:b4:c6:
47:94:e4:21:76:c4:60:f2:8a:eb:c7:98:4e:db:c8:bf:78:4b:
1b:95:f3:9f:0a:01:00:60:43:e6:91:e6:fb:20:31:c5:1e:d2:
8a:55:90:2d:79:e1:2e:72:c4:65:8a:8a:c8:15:e5:ed:b9:0c:
56:93:c2:62:d2:12:bb:55:83:04:dc:9d:cb:00:2e:aa:63:41:
d2:c3:e3:50:50:d7:ed:44:97:41:54:86:54:97:c7:fd:94:1d:
79:e4:63:3d:96:f6:4f:b4:c6:54:30:67:e5:d9:96:04:e9:02:
86:5e:76:d6:2b:19:d8:b2:95:52:cf:18:ea:e8:67:01:52:9e:
68:2b:d3:d0:17:c8:a2:96:c9:80:8e:14:c2:3e:6f:41:eb:26:
6e:97:f7:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:51 2025 by rpki-client