Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
File: TEYfg3hoy-rKF670hnhPYfSSQ-0.mft (raw, json)
Hash identifier: Ql8G69cWohceIBQ1oBB6mdYBJRbDv5qdwAAT1hY66Tw=
Subject key identifier: D4:94:B4:7A:A3:3D:8E:FC:0F:16:91:33:73:01:2D:19:12:59:93:33
Authority key identifier: 4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED
Certificate issuer: /CN=4c461f837868cbeaca17aef486784f61f49243ed
Certificate serial: 0194BC3C090BB043DE599021AFDBF7CE2140
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 12:00:38 +0000
Manifest this update: Fri 31 Jan 2025 12:00:38 +0000
Manifest next update: Sat 01 Feb 2025 12:00:38 +0000
Files and hashes: 1: TEYfg3hoy-rKF670hnhPYfSSQ-0.crl (hash: rt1PKU4mAUgRp1K1ZdNNBcNEExX2OoDvbg+8F4b6Py4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:09:0b:b0:43:de:59:90:21:af:db:f7:ce:21:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c461f837868cbeaca17aef486784f61f49243ed
Validity
Not Before: Jan 31 12:00:38 2025 GMT
Not After : Feb 1 12:00:38 2025 GMT
Subject: CN=d494b47aa33d8efc0f16913373012d1912599333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:8c:a8:34:07:1b:d1:df:f9:24:03:3a:f1:3b:
88:c8:a3:4d:79:50:ec:d7:d2:92:03:29:c8:33:52:
a4:70:98:5d:2d:7b:1a:ac:cf:bc:23:e0:c5:f7:08:
3f:b0:f0:da:49:34:1d:eb:da:bf:da:08:ee:e8:dd:
bb:47:27:74:66:95:f3:7e:b5:66:79:45:a1:de:d1:
20:ae:bb:2c:e9:59:b5:90:e8:56:ed:7a:77:73:84:
62:fc:44:6d:82:10:f6:d9:a4:4b:f0:3c:ab:93:a7:
19:7f:03:cb:18:aa:7d:a7:74:e0:18:ce:13:42:aa:
c6:ce:79:77:ae:5c:01:a6:e7:50:b3:82:7c:eb:83:
f3:e4:9a:b3:04:7d:d1:12:72:c3:40:ba:33:c5:6e:
fa:11:f6:f6:b5:aa:42:71:7d:aa:a4:46:08:1f:db:
ab:b2:38:1b:76:19:e5:22:f3:92:06:b6:79:19:8c:
63:e0:c1:f4:2f:ed:3f:0e:d6:78:5a:fe:ae:97:1b:
79:d8:d2:3e:f1:ec:63:90:19:ac:22:df:40:d1:6e:
ee:8b:82:39:53:ea:ac:e7:f6:ca:d8:9d:06:1c:b3:
5c:3c:ec:cf:8d:a0:e9:18:6c:5b:a7:e9:4b:5c:6b:
e7:5f:9d:1b:c2:7b:1e:2f:91:7f:21:3d:d3:ea:b1:
1e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:94:B4:7A:A3:3D:8E:FC:0F:16:91:33:73:01:2D:19:12:59:93:33
X509v3 Authority Key Identifier:
keyid:4C:46:1F:83:78:68:CB:EA:CA:17:AE:F4:86:78:4F:61:F4:92:43:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEYfg3hoy-rKF670hnhPYfSSQ-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/e4c319-7223-4246-b66b-f9d096524c13/1/TEYfg3hoy-rKF670hnhPYfSSQ-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:cb:d3:e3:1f:3a:cb:b1:7f:9c:66:46:db:a1:34:0a:17:02:
d9:54:ab:02:8c:d7:0b:ef:d1:7a:97:99:8d:2f:9c:d1:42:a3:
b1:8e:a8:4a:7c:dd:bc:6f:d6:a9:5b:d6:2a:6e:e0:5c:46:a5:
a3:90:a6:db:32:2b:2c:ff:2d:af:5e:3d:c6:69:c0:bc:ba:ef:
b5:f7:e1:a6:66:5e:52:cb:07:0f:24:f0:09:c5:40:d5:5b:f4:
db:6d:71:5f:22:13:bd:bd:b7:4e:76:8c:1f:58:e4:0d:1d:79:
6a:a6:3b:7e:3e:7b:76:2f:f6:d0:3e:de:94:b3:4a:df:da:30:
c4:0a:32:29:d7:0b:30:a2:89:94:cf:bc:27:ff:5a:bb:c6:32:
77:bf:5a:7c:73:e9:0e:91:e9:e7:ee:01:d5:12:bb:be:67:f0:
8a:a9:42:b4:db:fb:9d:54:8d:92:51:76:84:6c:4b:87:ac:61:
a9:42:a0:32:cb:30:d2:67:81:96:d0:d5:68:c4:2f:bf:98:08:
96:8f:56:63:2f:04:90:a1:4c:ef:c0:44:34:e7:21:93:82:95:
93:f4:35:9a:9b:0d:20:19:46:79:5b:b8:a1:9a:a2:8c:7e:67:
0f:79:61:e5:1b:3b:88:d1:2f:e9:06:b3:66:cf:6a:3e:65:7c:
5d:a3:6e:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:10 2025 by rpki-client