Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
File: tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft (raw, json)
Hash identifier: +nLhwbQU3dZ1jkbveuqQF/9qRmj9ag6c+PTf+xcF0t8=
Subject key identifier: 08:F3:6C:CC:9A:29:E8:26:E4:F9:19:3C:17:72:09:10:BA:2B:41:B7
Authority key identifier: B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41
Certificate issuer: /CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
Certificate serial: 0194BBCEA6A5B3DF370197A6FD4BB691E4A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
Manifest number: 0C12
Signing time: Fri 31 Jan 2025 10:01:09 +0000
Manifest this update: Fri 31 Jan 2025 10:01:09 +0000
Manifest next update: Sat 01 Feb 2025 10:01:09 +0000
Files and hashes: 1: tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl (hash: bs8MkfgbQqc+PJBRzHVM0LV+XOjjJIDxOsKlKevG7kc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a6:a5:b3:df:37:01:97:a6:fd:4b:b6:91:e4:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55cfe771cf284fee8d0c27bbcf11de1879ccc41
Validity
Not Before: Jan 31 10:01:09 2025 GMT
Not After : Feb 1 10:01:09 2025 GMT
Subject: CN=08f36ccc9a29e826e4f9193c17720910ba2b41b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:03:20:26:36:80:f0:d6:15:8d:db:cb:6a:9c:
19:11:a4:05:7e:f6:b7:c1:16:29:10:32:9e:79:6d:
e7:e5:b1:62:fe:36:7b:30:d3:da:a5:5e:71:cc:4a:
a1:b0:bb:64:b8:5e:da:88:c3:c2:2f:16:9a:e0:35:
f6:be:9d:1f:0b:9a:54:65:fa:ec:1e:bd:7e:03:93:
a1:6d:2e:2e:c7:d1:ad:26:b6:4c:67:7c:8b:fb:0d:
e0:68:94:40:c5:61:56:bf:c9:14:d6:66:7f:1a:82:
7b:2a:6d:4f:48:28:73:0b:01:bb:f5:da:c1:01:c0:
a9:47:35:52:cb:4c:ff:be:6d:5a:a8:8c:2c:36:bd:
e3:27:1c:6f:a9:ff:07:c3:74:42:c1:1c:9e:8d:83:
cc:84:ca:7d:b1:61:7b:ee:1c:89:47:07:fc:25:85:
33:ca:7c:25:40:a1:99:e9:23:c6:c0:ff:39:9e:d1:
a7:50:99:cb:61:49:c0:ae:8b:1c:79:87:ab:7c:e8:
29:56:df:ca:e0:89:b9:18:5d:3e:01:2d:ea:ed:5a:
d0:3f:9e:2e:4e:15:8d:8c:ed:ce:9b:7e:70:da:41:
fe:5d:23:3d:43:77:4a:31:58:de:db:dc:20:f7:df:
10:8d:cf:94:ff:56:5f:6b:82:2b:dc:e9:48:f5:c5:
db:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F3:6C:CC:9A:29:E8:26:E4:F9:19:3C:17:72:09:10:BA:2B:41:B7
X509v3 Authority Key Identifier:
keyid:B5:5C:FE:77:1C:F2:84:FE:E8:D0:C2:7B:BC:F1:1D:E1:87:9C:CC:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVz-dxzyhP7o0MJ7vPEd4YeczEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/844405-7a8f-4232-95b8-65c928c7b0bf/1/tVz-dxzyhP7o0MJ7vPEd4YeczEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:5b:b2:1c:0d:4f:5d:81:20:67:26:45:93:1d:0e:45:0d:29:
46:9f:8f:a3:b4:e0:a0:fd:4b:7f:ea:b3:15:82:0d:d4:d9:60:
9c:e5:56:da:14:aa:e5:26:2a:b0:ea:c9:41:97:7f:27:e9:74:
ae:37:33:43:e5:d6:15:a5:22:9f:8c:10:e1:5d:51:49:01:d3:
2e:8a:ce:5d:fc:70:48:70:78:5f:24:a3:48:eb:7a:e7:a6:ba:
b4:8d:d0:d8:24:1a:9f:46:a5:30:6f:53:8a:c3:36:d0:b0:53:
1e:b6:41:fd:76:8e:04:a2:0a:58:55:4f:3a:84:24:b8:fb:2d:
d8:53:71:88:30:29:e8:e2:c0:f4:d7:f7:4e:0b:50:c7:04:35:
3b:69:b3:8e:8f:17:6b:07:bc:09:fc:25:95:36:45:eb:71:4e:
1a:5e:98:fa:a6:f3:0b:9a:dc:1d:b7:46:1a:82:42:ef:13:b7:
d5:48:20:47:7f:76:e7:70:84:0a:58:92:f9:a3:21:96:79:5e:
ea:c7:62:dd:03:5b:12:fb:9f:17:b4:a9:01:54:86:0e:76:44:
b4:83:53:bd:82:4b:90:03:51:70:b3:31:78:8e:bd:20:3b:7a:
76:5e:62:71:81:f8:8f:38:9e:89:4d:f5:ac:09:00:de:28:2a:
33:4a:fb:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:36:06 2025 by rpki-client