Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
File: TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft (raw, json)
Hash identifier: aSXTlcNRtk2zYqjpyIob79O6pwis2aIy9/5ahzRGOA8=
Subject key identifier: 02:D6:62:DF:32:37:E1:70:3A:37:CD:DE:46:65:2E:E5:84:CF:35:99
Authority key identifier: 4D:49:27:A1:41:FB:25:B7:58:24:C6:BE:AE:F0:67:9D:34:FC:49:BD
Certificate issuer: /CN=4d4927a141fb25b75824c6beaef0679d34fc49bd
Certificate serial: 0194BCAA267EAB2B8A0E4A58CDD02349E46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TUknoUH7JbdYJMa-rvBnnTT8Sb0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
Manifest number: 011F
Signing time: Fri 31 Jan 2025 14:00:54 +0000
Manifest this update: Fri 31 Jan 2025 14:00:54 +0000
Manifest next update: Sat 01 Feb 2025 14:00:54 +0000
Files and hashes: 1: TUknoUH7JbdYJMa-rvBnnTT8Sb0.crl (hash: BF647+ab+ljybL3XSViTWkw7CTSIMMJFNHYuitT7/As=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:26:7e:ab:2b:8a:0e:4a:58:cd:d0:23:49:e4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d4927a141fb25b75824c6beaef0679d34fc49bd
Validity
Not Before: Jan 31 14:00:54 2025 GMT
Not After : Feb 1 14:00:54 2025 GMT
Subject: CN=02d662df3237e1703a37cdde46652ee584cf3599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:70:71:10:de:90:9a:25:fc:57:32:63:71:0e:
04:c6:d3:a3:38:5c:2e:dd:8c:83:fe:35:86:e2:c6:
5a:56:6e:09:ee:4e:77:88:24:90:d8:3a:26:c4:ef:
64:b3:0a:8a:08:15:76:c7:de:0a:aa:f8:96:a6:98:
47:af:78:f6:2a:91:d0:37:52:a5:f3:35:e3:c9:15:
fb:35:9a:f4:a8:63:52:03:0c:0a:b4:f7:ff:4a:49:
4c:8e:a5:d4:b7:b7:38:e5:9b:48:81:09:8a:f1:d6:
f5:2f:92:25:5e:00:df:12:78:1b:6b:15:9e:f5:6e:
c8:5c:49:f4:45:66:58:88:df:ca:a4:c6:10:a2:63:
98:d8:8b:88:88:64:30:e7:af:c9:ea:5e:99:ad:ba:
fa:d4:2c:44:aa:15:6c:23:89:1e:cc:91:85:50:36:
82:a9:64:91:60:1e:48:5b:4b:dd:00:2d:38:f8:a3:
6a:20:7a:ae:94:69:0a:ca:50:55:b7:8f:17:cc:b7:
74:81:47:1d:84:f9:3a:f1:eb:fc:3d:65:87:8a:49:
6b:32:a9:59:ad:65:18:08:96:6a:da:dd:7b:68:46:
7f:54:f8:f7:f9:3b:c9:dc:41:15:e0:66:bf:cb:44:
a4:a7:54:08:1d:1f:8c:ff:df:d8:e1:b8:c7:d9:98:
5b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D6:62:DF:32:37:E1:70:3A:37:CD:DE:46:65:2E:E5:84:CF:35:99
X509v3 Authority Key Identifier:
keyid:4D:49:27:A1:41:FB:25:B7:58:24:C6:BE:AE:F0:67:9D:34:FC:49:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TUknoUH7JbdYJMa-rvBnnTT8Sb0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6a4b86-32b4-405f-bd65-68083709a4b5/1/TUknoUH7JbdYJMa-rvBnnTT8Sb0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:7c:85:8c:41:be:67:a9:20:10:c4:bc:f0:0b:da:81:61:3e:
5a:79:86:d2:5b:eb:82:d2:5d:f6:a2:4d:e6:d6:7f:2f:61:ab:
87:6c:7c:d6:bf:71:87:35:7e:43:18:a8:02:fc:40:c4:8f:db:
3d:20:ee:b1:5b:28:13:f5:8b:45:c3:68:51:5b:87:15:38:86:
f3:ae:89:13:8d:1c:79:c3:31:f0:63:44:d1:8e:f3:a2:c0:aa:
44:49:83:c4:41:f3:35:03:6d:81:0d:1b:fc:a1:13:80:98:3c:
08:39:bb:96:c9:fe:a1:f2:17:f4:99:c1:0e:44:f0:5f:31:29:
2c:12:2e:92:74:23:47:cb:b0:33:f7:a6:e0:70:df:ce:21:94:
a1:42:6f:fe:b7:2f:b0:2a:cb:b1:75:bc:50:33:a3:30:90:f8:
04:ce:96:98:e4:9f:e0:78:d3:ce:45:97:5e:cc:a9:81:d8:3d:
40:2a:e4:77:7e:ea:ca:fd:59:5b:77:11:4b:04:6c:d3:78:79:
31:aa:55:dc:7f:5f:91:31:74:74:e9:e6:f5:81:5f:47:ac:b8:
53:b5:b7:02:f0:37:d5:62:b9:7d:50:aa:b5:69:70:5b:8e:b2:
7e:84:dd:4b:3d:3b:6d:53:0e:d7:5d:36:d1:2b:e6:d1:31:4a:
0c:04:6e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:55:33 2025 by rpki-client