Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
File: tPtrTEeRZokREVxp4mlk89XsovQ.mft (raw, json)
Hash identifier: KXzXTNCgGSCcI0Vsniv/d7QOmkkrTJQd/5Jo6CM3s6I=
Subject key identifier: 71:E6:50:55:97:33:27:D1:4D:AA:0B:94:D7:EB:55:D3:03:DC:A5:45
Authority key identifier: B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
Certificate issuer: /CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Certificate serial: 0194BD4E762F1732CA32021193B56EB38832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
Manifest number: 0185
Signing time: Fri 31 Jan 2025 17:00:23 +0000
Manifest this update: Fri 31 Jan 2025 17:00:23 +0000
Manifest next update: Sat 01 Feb 2025 17:00:23 +0000
Files and hashes: 1: tPtrTEeRZokREVxp4mlk89XsovQ.crl (hash: MZk72J58HZX0pNHHLP0D3RAtJTa3S6Z92ysi0gJBhdc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:76:2f:17:32:ca:32:02:11:93:b5:6e:b3:88:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fb6b4c4791668911115c69e26964f3d5eca2f4
Validity
Not Before: Jan 31 17:00:23 2025 GMT
Not After : Feb 1 17:00:23 2025 GMT
Subject: CN=71e65055973327d14daa0b94d7eb55d303dca545
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ca:46:fc:85:2b:6d:e7:c9:38:e6:b0:a4:21:
bf:86:ef:ef:6f:bd:c4:5c:f7:56:17:66:96:e6:40:
a6:5d:f9:7e:ef:a7:1a:91:44:03:68:e2:60:ab:5f:
be:b1:0a:08:9d:4e:ed:e3:30:45:cb:ce:f6:ab:9f:
9d:c4:6c:15:05:08:fa:a2:16:74:b8:4f:f4:30:24:
ba:76:aa:a1:60:d3:00:81:59:19:f9:35:9e:4e:69:
11:5d:56:e1:c0:55:7b:9a:29:dc:3d:4a:92:0d:b8:
09:9a:ec:ba:96:c8:21:35:a3:71:bf:d9:c0:32:02:
75:2e:ec:79:60:6b:02:af:b0:12:d6:58:72:e2:c7:
68:b6:9a:17:84:77:28:07:d5:60:b6:43:d1:91:78:
5a:31:6b:ce:66:06:0b:57:9b:b9:29:ea:d0:7f:b7:
44:d1:bf:f5:47:c0:3a:9a:8c:28:06:70:c5:92:1f:
06:bc:74:90:0d:b1:99:15:1f:68:3c:b4:c3:65:65:
95:0d:c7:63:48:9b:df:42:c5:01:c5:41:39:61:d2:
8e:04:60:f8:b8:89:16:ee:db:8a:b4:37:bf:35:3c:
21:9c:ff:65:ee:b9:66:86:1b:ab:77:94:03:b8:02:
09:78:a9:53:16:ee:79:17:f0:54:08:2f:c7:8c:91:
0f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E6:50:55:97:33:27:D1:4D:AA:0B:94:D7:EB:55:D3:03:DC:A5:45
X509v3 Authority Key Identifier:
keyid:B4:FB:6B:4C:47:91:66:89:11:11:5C:69:E2:69:64:F3:D5:EC:A2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPtrTEeRZokREVxp4mlk89XsovQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/901607-b1ee-49f0-bde2-7cba35cb6b81/1/tPtrTEeRZokREVxp4mlk89XsovQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:76:34:be:ce:1b:05:fc:71:17:82:8d:30:51:89:af:fe:c2:
79:98:97:ef:bf:59:67:1d:5c:4e:f2:8d:df:f8:da:20:d8:c8:
75:42:85:79:b4:8d:73:88:82:9f:31:38:d2:b7:a1:ee:d5:a2:
94:29:96:10:aa:cd:48:8c:e4:9b:ac:2d:00:c9:6f:f9:15:71:
f5:a8:4a:9f:78:97:91:c1:5a:85:ea:e4:f1:0a:ad:3a:bb:94:
c1:88:13:4c:e5:77:d2:88:dd:df:e9:4d:69:96:48:ba:f6:cd:
03:08:41:15:e2:67:09:c9:e8:93:de:c9:06:47:a3:d0:09:66:
af:e6:9a:ff:21:fd:83:13:4f:82:f6:fa:32:66:e1:1b:7f:d0:
5e:70:3c:a4:5d:33:4f:7e:4c:0d:d6:6d:a1:62:11:25:07:b1:
9e:fb:1e:05:c0:f3:03:fe:c2:f2:f4:40:cb:d9:4f:ca:ec:4c:
23:c8:7b:0e:9e:f3:c6:26:d4:78:e3:2c:af:ef:ef:9c:4f:0e:
ec:a5:bd:7e:f6:20:67:19:22:61:9f:66:6c:f9:89:5e:bd:51:
39:c4:ce:ff:c5:35:47:9a:b1:8a:de:73:00:cb:71:ef:5a:f0:
a3:11:d9:01:26:56:35:02:52:4c:fc:63:98:75:82:a0:bc:0a:
fe:01:12:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:41 2025 by rpki-client