Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
File: Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft (raw, json)
Hash identifier: /vvzOMdGADh64n2sA9teaJ0ptyJ5fQXbIE5CbH5V8NA=
Subject key identifier: 9E:EF:57:1E:15:C7:CC:00:99:F6:91:89:4D:F3:C2:45:1D:6F:4C:88
Authority key identifier: 02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
Certificate issuer: /CN=029f93002d78e8e40da560c4291fb830d92dff66
Certificate serial: 0194BC3C296D3C678160949B446D24C94B74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
Manifest number: 13B9
Signing time: Fri 31 Jan 2025 12:00:46 +0000
Manifest this update: Fri 31 Jan 2025 12:00:46 +0000
Manifest next update: Sat 01 Feb 2025 12:00:46 +0000
Files and hashes: 1: Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl (hash: WWHFHEVu9uykSF/iGVcIFOCmVbq4rRGljVV67/N/Tg8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:29:6d:3c:67:81:60:94:9b:44:6d:24:c9:4b:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=029f93002d78e8e40da560c4291fb830d92dff66
Validity
Not Before: Jan 31 12:00:46 2025 GMT
Not After : Feb 1 12:00:46 2025 GMT
Subject: CN=9eef571e15c7cc0099f691894df3c2451d6f4c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:26:71:49:4f:8c:7b:5c:07:34:92:00:95:
74:e0:63:a3:ef:1f:ff:17:54:b7:e3:74:48:05:0a:
3a:84:e5:1b:ea:24:95:cc:70:21:3a:0d:55:24:d7:
33:db:57:34:80:61:29:c1:7f:29:1e:99:25:ea:8a:
d2:fa:c4:d9:5f:0a:51:bd:5d:38:a7:71:91:57:a8:
20:6a:f8:a7:eb:99:d5:7e:2e:b0:3f:8e:04:6a:7b:
33:4d:cc:67:48:e1:ba:5b:e4:80:9c:30:cc:b4:d1:
20:a0:b2:1d:f6:82:87:a3:66:ca:c3:29:65:06:7f:
18:ce:59:93:2a:cb:25:fe:bc:da:ec:12:f8:bc:94:
17:df:c5:c0:88:96:ab:58:ce:6a:d4:45:6f:25:d2:
99:1a:6d:ce:98:2a:88:5f:0b:d1:3a:a2:e5:fb:35:
b6:38:25:f3:b2:9d:46:81:e0:ee:69:25:c7:38:e4:
64:b4:b3:f9:7b:ad:07:5d:c6:10:3b:ba:5e:40:78:
25:ee:f9:9b:26:8f:45:c9:e1:73:8d:f7:c2:52:91:
96:fe:2e:b3:c9:fe:10:15:45:79:41:e0:f5:e7:de:
26:3d:4e:83:0f:ae:7d:21:5e:8d:06:c8:db:22:8e:
d8:df:be:c1:51:b9:6f:28:da:f9:2a:f0:12:f8:f9:
19:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:EF:57:1E:15:C7:CC:00:99:F6:91:89:4D:F3:C2:45:1D:6F:4C:88
X509v3 Authority Key Identifier:
keyid:02:9F:93:00:2D:78:E8:E4:0D:A5:60:C4:29:1F:B8:30:D9:2D:FF:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ap-TAC146OQNpWDEKR-4MNkt_2Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/78637e-072d-4700-857f-5f26355c8a74/1/Ap-TAC146OQNpWDEKR-4MNkt_2Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:60:36:4e:31:dd:ff:fc:d8:a0:5d:7d:6f:26:69:12:67:6c:
c7:16:35:32:13:b2:10:bc:dd:d8:6a:4e:39:9b:fa:da:c6:19:
4a:fe:47:ee:3c:f1:25:46:36:c0:40:f1:89:be:94:69:a4:d8:
3f:1c:de:2e:72:f6:2a:d9:aa:31:65:31:ff:8a:e9:8e:03:a8:
4b:03:f9:23:50:db:b5:13:03:de:07:dd:3a:16:6f:3a:b5:95:
25:22:8b:10:75:ec:d6:3b:77:fa:86:76:60:97:9e:3a:c3:5b:
0c:84:e5:f1:ed:e8:c2:33:04:ea:a6:52:56:4e:8c:6e:67:18:
1c:80:b4:ca:e6:8a:e4:03:b5:a4:48:74:35:40:6d:b1:e6:13:
eb:b0:47:df:ab:7f:aa:83:d9:8e:bd:7f:53:19:65:7d:c6:9b:
e8:f3:79:6e:41:15:80:d1:9f:70:79:4b:aa:39:b4:58:69:b6:
92:6f:6b:26:bb:4b:99:53:97:e2:57:86:a3:b7:fe:33:28:a2:
0f:6a:e2:d0:1f:6c:5d:e5:80:4d:3d:ca:0a:d3:0e:1c:6c:ce:
46:9f:e6:c3:be:1d:00:a3:b3:a9:23:16:3f:60:b9:44:a9:57:
bf:81:8f:67:f0:94:78:d8:44:80:78:14:73:5a:bd:dd:c7:1a:
59:3c:2a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:48 2025 by rpki-client