Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
File: tj8U3_NUhamVlBKGMDe4XfqfE9g.mft (raw, json)
Hash identifier: Ci5C5dR1rYfkPeWQSRsJS6spyeLDVuP8h4q5jTOyoWk=
Subject key identifier: EA:1F:54:74:8E:E7:FF:CE:0A:B4:08:C6:8E:3F:D9:A6:35:1B:D1:DC
Authority key identifier: B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
Certificate issuer: /CN=b63f14dff35485a9959412863037b85dfa9f13d8
Certificate serial: 0194BD17AF3612D7A80DB2B03BF5C083C2E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
Manifest number: 0360
Signing time: Fri 31 Jan 2025 16:00:33 +0000
Manifest this update: Fri 31 Jan 2025 16:00:33 +0000
Manifest next update: Sat 01 Feb 2025 16:00:33 +0000
Files and hashes: 1: tj8U3_NUhamVlBKGMDe4XfqfE9g.crl (hash: PRNlXq0+X+I/7v9rAiQQpflCPXzHZNbTPeNypM8fmx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:af:36:12:d7:a8:0d:b2:b0:3b:f5:c0:83:c2:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b63f14dff35485a9959412863037b85dfa9f13d8
Validity
Not Before: Jan 31 16:00:33 2025 GMT
Not After : Feb 1 16:00:33 2025 GMT
Subject: CN=ea1f54748ee7ffce0ab408c68e3fd9a6351bd1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a1:db:33:a9:2f:49:f7:2e:7c:ff:10:c0:2c:
52:9c:6b:33:4f:93:cc:6e:b0:6a:16:2e:67:94:ef:
bf:49:a3:9d:80:9f:6f:92:9a:cc:27:a5:45:6d:e6:
3f:37:48:1a:7e:cd:a8:04:a9:61:ef:07:60:70:41:
58:6f:73:02:57:6a:5a:82:e9:a6:09:cb:57:de:dc:
bf:ff:75:e9:95:55:76:f7:ae:17:55:b2:0b:31:3c:
f0:fd:f1:20:cc:ac:aa:a5:19:a9:c7:76:73:b3:9e:
bf:d3:88:bc:c7:ac:48:2f:e7:27:dc:fc:40:84:86:
c3:67:26:63:cc:cd:05:42:24:e5:96:9c:f0:74:e4:
2e:4e:a7:5e:39:02:34:1e:f9:bf:51:4c:e1:4a:e1:
f0:aa:a8:93:c4:39:c8:2e:05:75:c4:56:70:ec:c0:
c7:d5:a1:69:ae:cc:05:91:9a:7c:29:b0:28:8f:f6:
8c:26:e7:cc:20:fd:9c:18:0d:05:e6:d3:a9:c9:56:
64:75:67:31:b5:64:aa:b2:98:46:eb:e7:04:2d:de:
73:52:fb:fe:4e:36:de:6e:de:ec:c7:2d:6b:a5:02:
cd:fb:3e:2e:ee:2d:76:e8:88:0b:7f:f2:2e:e3:fa:
c6:f4:8d:d7:ee:a8:94:00:55:82:02:4b:80:56:e8:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:1F:54:74:8E:E7:FF:CE:0A:B4:08:C6:8E:3F:D9:A6:35:1B:D1:DC
X509v3 Authority Key Identifier:
keyid:B6:3F:14:DF:F3:54:85:A9:95:94:12:86:30:37:B8:5D:FA:9F:13:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tj8U3_NUhamVlBKGMDe4XfqfE9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/3bc865-386b-4bea-aba0-66c98c01dfd7/1/tj8U3_NUhamVlBKGMDe4XfqfE9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:57:c7:11:cf:54:2f:ef:37:6f:27:30:4f:a2:e1:d7:fa:95:
99:40:d5:a9:83:83:ee:9e:b2:33:3e:3f:3b:b9:eb:62:e8:6b:
b5:90:c9:76:dc:a2:f5:8e:6b:af:3e:88:17:fa:6e:0b:b3:a5:
9b:43:77:61:2e:8b:7a:a4:9e:9a:5f:4c:a4:57:36:db:89:8c:
53:e5:19:90:d1:eb:a1:b1:7c:e5:ff:66:8d:94:51:12:ae:2f:
dd:33:f6:98:3f:e3:6b:79:d3:fe:43:21:58:ef:a0:88:33:fc:
ff:af:57:49:51:43:01:7b:37:98:d8:5c:38:03:7b:12:a3:13:
26:ac:87:8a:dc:f1:4d:75:7e:88:97:f6:89:2c:79:9b:ec:b8:
4c:64:31:99:d7:b0:3a:2a:6b:f8:be:8b:8d:e8:bb:08:63:32:
2c:0c:20:39:3f:ca:60:5e:98:35:c8:fc:ad:0b:33:cc:c9:c8:
d7:d8:d8:15:8c:8e:57:7e:2d:2e:d0:81:b4:bc:7d:92:12:f7:
ac:78:87:0a:56:4b:d4:2b:1b:9f:64:03:ea:f9:6c:8c:0d:c5:
af:d8:b3:42:5c:a6:c5:b5:15:af:1e:23:83:62:c6:52:5a:2d:
de:af:3e:94:96:85:d8:c5:3e:09:d1:d8:bc:38:97:24:a7:6e:
31:7d:7d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:02:41 2025 by rpki-client