Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.mft
File: tgLHVGpnwMWYp0_yv1w5IyU079U.mft (raw, json)
Hash identifier: 0nxeO5+McehPvVpnXmsGOf2fgNKiclRpMPNgK+dgunY=
Subject key identifier: 44:BC:24:03:84:BD:3D:50:A7:8A:04:5D:6F:77:BF:32:C7:D0:08:95
Authority key identifier: B6:02:C7:54:6A:67:C0:C5:98:A7:4F:F2:BF:5C:39:23:25:34:EF:D5
Certificate issuer: /CN=b602c7546a67c0c598a74ff2bf5c39232534efd5
Certificate serial: 0194BC3BE46E25D1E01281A42FFEA4936A5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgLHVGpnwMWYp0_yv1w5IyU079U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.mft
Manifest number: 12D6
Signing time: Fri 31 Jan 2025 12:00:29 +0000
Manifest this update: Fri 31 Jan 2025 12:00:29 +0000
Manifest next update: Sat 01 Feb 2025 12:00:29 +0000
Files and hashes: 1: tgLHVGpnwMWYp0_yv1w5IyU079U.crl (hash: CpmTjgETsj9wZX70D776ArWOGhzlzVb9V/SYAKuX5aY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e4:6e:25:d1:e0:12:81:a4:2f:fe:a4:93:6a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b602c7546a67c0c598a74ff2bf5c39232534efd5
Validity
Not Before: Jan 31 12:00:29 2025 GMT
Not After : Feb 1 12:00:29 2025 GMT
Subject: CN=44bc240384bd3d50a78a045d6f77bf32c7d00895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:11:ac:9d:c4:84:36:cc:9d:14:74:ba:9b:4f:
c5:c2:3e:b3:62:ea:ff:5c:8e:0d:5e:34:cd:f6:4a:
e5:79:9f:50:c0:16:e0:cc:a0:1b:bc:35:00:d7:10:
d0:a6:57:a6:26:e6:18:af:00:23:36:1b:93:d4:9f:
3b:10:42:0d:c7:b7:c3:eb:c5:3d:0f:b1:98:c8:2f:
26:42:26:a1:8f:ab:c6:4c:e0:21:ae:92:30:e4:d2:
21:d0:82:1b:87:4e:32:a9:4b:ec:3b:94:77:3e:9f:
ba:dc:57:79:75:f7:f3:dc:6e:6c:28:26:05:3c:8d:
5e:2d:b6:c5:4e:8d:0c:2c:78:2d:5d:ec:29:19:8d:
7c:d1:63:e6:18:cd:0c:c4:34:52:df:fd:fc:4a:dd:
13:ab:84:22:f1:60:32:ff:16:f2:90:fe:fe:55:6c:
42:7e:2b:db:0a:1a:91:1a:31:b6:76:57:b1:2b:5f:
cd:b6:d3:8f:4a:af:7e:95:03:d0:37:e9:51:2e:8e:
bb:78:65:24:a1:43:48:c6:6c:9c:57:1d:2b:bf:1a:
a6:b3:59:1d:ec:81:cd:1e:7a:b2:87:ff:4a:44:f8:
30:b8:50:12:1f:99:be:62:e2:f6:d4:51:13:ba:d4:
1e:ba:da:13:10:d9:a4:3a:cd:11:22:8f:2a:57:bc:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:BC:24:03:84:BD:3D:50:A7:8A:04:5D:6F:77:BF:32:C7:D0:08:95
X509v3 Authority Key Identifier:
keyid:B6:02:C7:54:6A:67:C0:C5:98:A7:4F:F2:BF:5C:39:23:25:34:EF:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgLHVGpnwMWYp0_yv1w5IyU079U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8dd52e-6d5d-4d37-bf0e-720e86525dd2/1/tgLHVGpnwMWYp0_yv1w5IyU079U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:5c:8f:76:2f:32:3e:e0:33:19:b2:b8:7d:82:aa:fa:0e:3b:
3d:45:45:18:15:bd:34:35:06:a6:5a:60:b7:8e:88:e1:8b:a9:
cb:31:c7:be:25:a0:76:67:53:72:4f:99:cb:88:89:eb:11:87:
1f:ea:61:3c:b7:6c:5e:bc:cf:c4:32:f1:76:bb:d1:63:49:6c:
50:2a:f8:04:c0:14:ad:a6:cb:f6:4f:85:03:6d:b8:0d:5a:0f:
86:b4:e7:3c:cc:7c:08:6e:e3:ae:79:78:76:2c:60:f1:86:dc:
48:f1:47:b3:c1:2c:1a:ef:7e:79:2d:09:df:25:ef:d4:cc:cc:
0d:2f:c3:9a:e8:10:4a:05:d7:da:3a:13:25:03:2e:c3:f5:b3:
85:6c:17:c0:f2:6d:12:0f:cb:e4:d9:a1:16:c6:82:24:35:c2:
0d:e2:0b:72:7a:a5:7b:46:fb:1d:24:47:a8:92:33:1c:5e:ef:
38:74:bb:bc:ee:da:21:83:6b:7a:50:47:fa:aa:01:3f:2f:ba:
13:41:46:4d:e6:64:39:75:32:bd:19:5c:38:e0:17:35:92:d0:
f6:06:8c:97:23:04:c5:1a:f6:5c:ee:51:19:b8:ee:47:dd:e6:
74:7b:c4:a8:d4:f0:d3:78:13:22:13:8b:7b:bf:62:12:b6:d0:
54:48:1e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:10 2025 by rpki-client