Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
File: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft (raw, json)
Hash identifier: sJyAhHwFBAIeVGFFtXKdmynxIzock8aLKbvwFoPyNG4=
Subject key identifier: 21:3F:CA:F6:BF:55:4D:B6:39:3B:C8:D0:7A:40:71:AA:A1:77:96:67
Authority key identifier: 4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
Certificate issuer: /CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Certificate serial: 0194BC3C3963493DA80FD2EDDD996082CAB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl (hash: 9Pm2sKJuvPyB1nbveDvjYOUmGzHYDiLUQLjm8A44Ugo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:39:63:49:3d:a8:0f:d2:ed:dd:99:60:82:ca:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e489f66159f77bb58d2bbc7e4fc1dfd9ddcb034
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=213fcaf6bf554db6393bc8d07a4071aaa1779667
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:da:0d:da:c2:bd:cf:df:60:51:0f:0f:1c:3c:
4c:4e:ca:84:35:b8:3d:ad:1c:d7:12:d4:ee:e6:a7:
85:b5:80:70:a9:48:bf:e5:66:af:b7:75:52:65:89:
b5:d9:df:5c:43:a5:c0:f5:f8:44:cc:d4:92:34:cd:
cd:f0:07:a7:30:6d:ec:ce:bd:bf:d0:8f:a3:87:5a:
be:48:43:9d:9a:77:03:af:88:9e:21:dc:80:b5:48:
09:d6:11:bd:98:6c:b8:03:6d:e0:1e:d4:76:a0:e6:
0a:ab:da:9a:71:d5:94:0d:87:a3:e2:fe:aa:17:25:
6f:cd:ce:49:e9:64:7b:66:99:6f:58:c5:7b:b1:a6:
9a:87:d4:d7:f0:37:e9:2d:91:36:e7:d8:ed:61:9c:
70:95:12:3b:78:20:70:67:51:09:19:76:09:c8:b0:
11:a2:7b:af:43:19:63:71:ea:91:4c:57:4d:51:f3:
73:f5:32:66:28:b0:f4:e6:5c:e9:e1:54:2b:bd:8e:
ce:b5:93:60:30:1b:9c:89:69:68:f7:cc:d1:be:9c:
6f:5a:61:96:81:f0:ae:5b:ce:b2:0a:1b:52:00:3d:
2e:08:36:a6:bb:48:f7:46:10:54:9f:20:bc:33:c9:
70:64:02:df:7f:b3:da:52:d7:60:52:f2:f2:a6:30:
66:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3F:CA:F6:BF:55:4D:B6:39:3B:C8:D0:7A:40:71:AA:A1:77:96:67
X509v3 Authority Key Identifier:
keyid:4E:48:9F:66:15:9F:77:BB:58:D2:BB:C7:E4:FC:1D:FD:9D:DC:B0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a58197-eb09-4415-a61d-abd61aa82426/1/TkifZhWfd7tY0rvH5Pwd_Z3csDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:62:92:07:b6:29:a6:69:dd:2c:a6:b1:b7:f6:50:1b:32:ed:
b8:20:cb:86:34:55:fd:9d:00:31:64:6c:1d:1c:d0:76:d4:e7:
10:53:6e:0a:c6:5a:66:ff:5f:cf:ff:8e:2c:b4:01:cb:9f:6e:
05:18:3e:f0:e8:7a:a1:8d:48:ba:70:5b:51:91:19:49:a0:57:
58:14:97:2b:f2:c9:ec:2b:0c:4e:14:1e:50:fe:d0:47:37:6e:
4e:51:da:3c:e7:3c:68:e2:c8:60:b0:83:23:85:3d:c0:c6:b9:
59:92:0f:e0:69:0f:e6:45:cc:71:72:0e:0f:dd:1b:4c:0e:1a:
cc:b4:91:c5:03:0d:21:03:00:cb:01:1a:d5:24:0e:3c:05:2e:
d9:50:50:87:af:bc:0a:33:ce:ba:82:3d:0b:94:e1:cd:32:98:
7b:71:77:d7:cc:83:d4:4e:27:a1:11:f3:25:c8:ec:1c:81:6d:
7d:ec:c3:f6:6d:3a:f2:57:a9:55:d6:a1:78:ea:fd:2f:dc:2b:
20:38:ce:ce:46:55:0d:11:72:f8:7f:e8:68:61:16:02:4d:a9:
5a:12:fd:ed:d5:77:1c:2a:93:48:c3:0c:0c:6a:90:58:99:c9:
97:5b:99:7d:be:96:2c:01:98:2f:84:88:40:63:7f:9a:4c:cb:
11:39:7b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:47:02 2025 by rpki-client