Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
File: TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft (raw, json)
Hash identifier: +4z1RYC0s6ue1rCuYcHZ8G9MDqmAV1MF/99ZIhGY058=
Subject key identifier: BF:AD:19:80:BE:10:2F:65:68:8E:C5:56:69:1D:17:44:D0:B5:D4:53
Authority key identifier: 4E:F2:68:E1:43:D7:E4:4D:14:36:4D:1D:28:E8:6D:C3:E5:50:AA:B7
Certificate issuer: /CN=4ef268e143d7e44d14364d1d28e86dc3e550aab7
Certificate serial: 0194BBCEEF0C47A249CD8402BAAD4C9D6866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:28 +0000
Manifest this update: Fri 31 Jan 2025 10:01:28 +0000
Manifest next update: Sat 01 Feb 2025 10:01:28 +0000
Files and hashes: 1: TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl (hash: TyLvPnMAAsPfflQL2zQWWw5dvEly8iAKEtmHvKqawl8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:ef:0c:47:a2:49:cd:84:02:ba:ad:4c:9d:68:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ef268e143d7e44d14364d1d28e86dc3e550aab7
Validity
Not Before: Jan 31 10:01:28 2025 GMT
Not After : Feb 1 10:01:28 2025 GMT
Subject: CN=bfad1980be102f65688ec556691d1744d0b5d453
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c6:77:63:78:1e:be:78:d7:5b:61:2a:67:26:
b2:e2:8a:23:a6:9a:c5:f5:db:95:f9:72:33:5b:63:
78:01:b3:05:dd:da:75:a2:32:c5:9a:6c:f0:57:4b:
9a:72:71:fa:db:75:7a:a1:c3:a6:7a:6f:af:df:bc:
c4:3a:d0:59:50:e3:28:ee:5e:57:1b:44:ec:2f:59:
22:99:27:e8:da:81:ee:a0:eb:c4:c4:c1:30:d8:f4:
15:50:70:9e:2d:e9:8f:df:58:f2:73:45:3a:01:bd:
e9:ff:0e:e8:ea:df:ed:4d:a0:d3:7e:66:a7:13:e2:
0c:6b:ae:86:c8:dc:58:20:39:e5:14:ea:a0:c5:f5:
8a:9f:da:e9:61:07:0b:2d:90:a4:7b:5a:9f:2c:dc:
a2:eb:26:70:4c:87:71:24:6b:4a:c8:0a:53:2c:10:
2e:3b:d5:d8:76:dd:2a:48:9b:58:8d:ba:87:21:4c:
ef:c0:a7:75:3a:d6:a8:19:99:6e:83:6b:40:0f:a7:
7e:0a:f0:81:21:c1:28:7c:6a:94:4a:5e:b5:87:a4:
08:03:97:2f:db:d9:99:9c:14:96:45:fc:5f:ba:58:
50:24:cb:79:0d:da:8d:05:cb:9e:5d:f9:7b:0d:cb:
90:31:e6:98:9d:e0:15:8b:0e:bc:d7:9c:0a:49:42:
bf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:AD:19:80:BE:10:2F:65:68:8E:C5:56:69:1D:17:44:D0:B5:D4:53
X509v3 Authority Key Identifier:
keyid:4E:F2:68:E1:43:D7:E4:4D:14:36:4D:1D:28:E8:6D:C3:E5:50:AA:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TvJo4UPX5E0UNk0dKOhtw-VQqrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/7a011b-31a4-499f-a391-0329c78a4cfa/1/TvJo4UPX5E0UNk0dKOhtw-VQqrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:72:31:74:1e:60:50:78:06:8d:1c:5d:a4:01:55:e1:af:f1:
aa:e6:55:69:dc:40:de:f2:23:c9:fb:38:c5:5c:20:dd:d5:95:
c0:02:ac:a7:75:6c:4f:3f:56:11:ae:db:af:00:a5:4d:47:08:
a9:7b:f1:7a:9f:4e:fb:a8:f7:11:95:9e:78:50:78:1f:da:ed:
6b:c0:e2:55:ca:3b:d4:55:69:28:76:59:e2:de:d4:ed:04:db:
91:17:46:89:7a:58:b0:cc:fe:66:d7:73:77:2b:40:00:08:7a:
67:5f:b5:10:68:2b:28:5d:cb:01:cd:6e:77:7b:b6:0f:33:d1:
be:42:75:47:73:77:08:8d:fc:c3:ee:25:ea:d3:9f:de:02:1c:
58:fd:d9:20:67:71:71:ac:34:2e:ce:aa:05:fc:e2:db:8a:79:
95:eb:fa:9f:44:a1:55:3c:3b:f9:96:3a:ed:9c:84:03:97:49:
2b:c7:93:4d:cb:4e:3f:62:99:72:6b:28:0a:9e:61:b6:58:9e:
13:b4:66:15:c4:16:35:cc:b2:51:64:63:3c:ab:28:d6:5c:6b:
96:cd:5a:81:0e:6e:f5:08:b7:ad:6d:50:52:98:53:07:c6:50:
f6:ad:14:40:1e:03:5a:68:81:96:48:72:c2:5e:9a:10:e9:3c:
a3:36:21:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:47:51 2025 by rpki-client