Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
File: tRm7YH6Ot267nMsgIsxkbDzOC2A.mft (raw, json)
Hash identifier: LUCfrjBEKZJWZ6maBGuFlQMxUywjBE+s5oLVXa8jsdg=
Subject key identifier: 46:7C:69:18:45:37:E7:2A:B6:53:D8:AF:06:5C:D5:D4:08:5B:F5:A9
Authority key identifier: B5:19:BB:60:7E:8E:B7:6E:BB:9C:CB:20:22:CC:64:6C:3C:CE:0B:60
Certificate issuer: /CN=b519bb607e8eb76ebb9ccb2022cc646c3cce0b60
Certificate serial: 0194BBCEF1A82C19186857D6FD2D28A0FF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
Manifest number: 1426
Signing time: Fri 31 Jan 2025 10:01:29 +0000
Manifest this update: Fri 31 Jan 2025 10:01:29 +0000
Manifest next update: Sat 01 Feb 2025 10:01:29 +0000
Files and hashes: 1: tRm7YH6Ot267nMsgIsxkbDzOC2A.crl (hash: PByAgqFwufusl/XvJbcx344NZWk+zU3Y3p9kl2ihHGU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:f1:a8:2c:19:18:68:57:d6:fd:2d:28:a0:ff:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b519bb607e8eb76ebb9ccb2022cc646c3cce0b60
Validity
Not Before: Jan 31 10:01:29 2025 GMT
Not After : Feb 1 10:01:29 2025 GMT
Subject: CN=467c69184537e72ab653d8af065cd5d4085bf5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:94:44:2b:92:83:7a:c8:05:b4:8d:c7:6f:2f:
73:f4:af:be:f1:d4:5e:31:13:1e:d3:f4:5a:58:f7:
32:69:97:22:02:b1:5e:a3:32:e4:42:b2:54:38:fe:
4c:5c:27:5d:c5:b4:83:11:01:c8:a0:90:60:f3:65:
4c:66:d0:1d:c1:19:1e:30:1e:4d:9a:69:ed:ea:5d:
77:60:a5:cc:0d:0a:33:bf:ff:d1:02:1f:eb:1e:df:
86:ea:0f:48:0c:64:57:eb:6a:84:8d:d5:d6:51:ce:
63:30:d7:f8:67:3c:30:2c:28:f3:db:71:5b:15:6e:
3b:d5:50:d2:15:1c:83:7f:ca:df:e2:27:36:25:a7:
c7:ca:70:74:06:5d:fe:10:6f:56:2d:ec:47:f3:ff:
f0:03:18:40:7b:a1:86:50:f9:53:ab:5f:39:ce:b1:
8f:1a:b5:f9:67:0a:d4:b3:c6:06:40:77:cf:b0:a1:
b6:fd:c5:b5:dd:d3:5e:46:df:cf:29:b3:a0:a7:4b:
de:07:70:2c:4d:6a:3c:8e:45:07:f6:56:46:7f:2b:
cf:12:02:14:cd:38:74:7f:aa:20:88:61:0e:80:8f:
9d:33:5b:d2:d9:2a:c8:91:82:07:fe:dc:56:d0:88:
3f:4c:f2:b6:5c:42:d6:5b:ec:d2:88:6c:72:77:a8:
5e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:7C:69:18:45:37:E7:2A:B6:53:D8:AF:06:5C:D5:D4:08:5B:F5:A9
X509v3 Authority Key Identifier:
keyid:B5:19:BB:60:7E:8E:B7:6E:BB:9C:CB:20:22:CC:64:6C:3C:CE:0B:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tRm7YH6Ot267nMsgIsxkbDzOC2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/4e5049-856d-4c07-8556-e18184e80258/1/tRm7YH6Ot267nMsgIsxkbDzOC2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:53:7e:c5:d1:72:3f:20:fa:f3:10:5c:be:b0:26:03:7d:f3:
73:9c:f3:59:da:27:63:7a:a7:9d:61:d6:f5:ce:f5:c6:48:90:
16:1d:e2:ea:46:75:df:9a:49:66:7b:5a:ba:0e:ba:f9:99:7d:
ef:60:2a:52:1b:1e:9f:7f:95:15:d3:28:da:14:a8:61:db:bf:
65:b3:c3:43:0a:f8:6a:7d:d3:e9:d8:2c:d9:0a:7d:cc:c2:fe:
9e:b0:3f:4b:cc:10:72:db:16:67:99:05:c6:71:ef:3a:02:c4:
84:90:db:16:7c:ae:91:15:b5:66:c6:c9:43:47:9a:73:7c:6b:
44:f6:b8:2a:d6:9a:67:15:1a:74:82:b7:65:4a:07:28:d6:15:
f4:f7:6c:60:33:6b:f8:0b:05:56:55:b8:45:5d:d2:b0:f4:52:
9c:ca:0f:f0:93:78:20:7f:0b:57:91:6b:22:de:f5:16:d3:69:
b0:01:a4:90:50:3d:b3:80:7c:36:38:33:88:2d:b3:d0:f2:19:
e9:39:2f:dc:7e:ba:9f:f6:11:26:ac:8d:ca:4d:f0:95:29:0f:
5f:f5:23:fa:32:0d:de:68:e7:c8:89:f7:89:c9:8b:fd:bf:f6:
ea:d1:eb:7e:be:41:79:38:18:e1:9f:85:de:31:f2:c7:5d:07:
b1:30:50:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:59:07 2025 by rpki-client