Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
File: TeztaXzW72A8kPgBiBg7zjAgQOE.mft (raw, json)
Hash identifier: JTiUK9z05UTVM/5UyrJdbWmja6syh/tmMrl/+oHbY74=
Subject key identifier: 0E:CD:67:C9:14:AC:83:46:ED:93:8C:A9:2F:00:17:4E:B9:64:AD:85
Authority key identifier: 4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1
Certificate issuer: /CN=4deced697cd6ef603c90f80188183bce302040e1
Certificate serial: 0194BC7289716FE9BCF939815809D48D9DA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
Manifest number: 03C8
Signing time: Fri 31 Jan 2025 13:00:10 +0000
Manifest this update: Fri 31 Jan 2025 13:00:10 +0000
Manifest next update: Sat 01 Feb 2025 13:00:10 +0000
Files and hashes: 1: TeztaXzW72A8kPgBiBg7zjAgQOE.crl (hash: w1bKn5Zn80TyroLWTzJ5nsGk9qLCC4NKtVJGafURmb4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:89:71:6f:e9:bc:f9:39:81:58:09:d4:8d:9d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4deced697cd6ef603c90f80188183bce302040e1
Validity
Not Before: Jan 31 13:00:10 2025 GMT
Not After : Feb 1 13:00:10 2025 GMT
Subject: CN=0ecd67c914ac8346ed938ca92f00174eb964ad85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c0:15:66:ad:1a:2d:d5:44:d1:2e:0e:df:01:
d6:6e:e0:99:91:11:19:ba:2f:6f:5f:fa:fa:ec:92:
33:ba:00:85:34:45:70:e2:63:dd:a2:66:0a:9e:33:
9b:4e:c6:9f:61:bb:20:29:15:82:03:b3:ca:06:ed:
92:41:11:67:a7:40:88:03:e5:d9:57:bd:03:97:27:
6b:9a:1e:91:d2:d1:c3:22:2a:63:8d:e6:28:17:83:
97:ae:1c:20:c9:bd:cc:c7:71:1c:a9:44:9a:fe:86:
34:36:81:d3:92:f6:7a:4c:88:31:02:12:df:fd:d1:
0e:96:44:bb:99:2a:ce:47:d7:c1:43:54:fe:0c:3f:
8c:9b:10:8c:b9:f8:57:75:e5:0e:9d:6c:de:5f:78:
9d:a8:25:fa:90:de:a1:0f:d0:17:10:eb:2c:15:05:
51:47:69:c8:d5:b0:91:0d:36:0d:50:15:7a:69:a7:
14:a9:2d:3d:37:37:25:d8:a4:fe:ff:db:bc:93:47:
a5:7d:ca:60:0e:33:87:d9:8c:eb:ef:4d:aa:02:0e:
9a:b8:02:59:2a:63:f2:42:d0:0f:f1:f7:fb:ac:3a:
53:85:ae:25:c6:f7:ae:bd:6e:b2:dc:ff:9e:b1:e6:
91:f7:d1:c0:24:97:c5:43:d4:2f:86:c5:e0:ba:ce:
50:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CD:67:C9:14:AC:83:46:ED:93:8C:A9:2F:00:17:4E:B9:64:AD:85
X509v3 Authority Key Identifier:
keyid:4D:EC:ED:69:7C:D6:EF:60:3C:90:F8:01:88:18:3B:CE:30:20:40:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeztaXzW72A8kPgBiBg7zjAgQOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/77ce38-402c-4cb9-8582-221449118309/1/TeztaXzW72A8kPgBiBg7zjAgQOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:16:b9:cb:38:87:b5:a9:eb:32:f6:7d:91:82:28:02:ff:27:
11:82:a2:ba:2b:a5:8b:2c:fe:a9:e1:f0:4c:4d:e9:82:aa:bc:
c8:ce:d5:06:d9:cf:d4:c0:5e:cf:8d:13:9a:7d:ba:d0:bb:7a:
85:35:6b:5e:40:c8:5d:6f:d9:32:ae:46:c3:5b:78:67:a4:4c:
05:e2:88:d7:e0:cf:23:38:73:d2:d3:d1:fb:a9:02:a6:e5:2d:
94:f9:a2:63:0f:56:2f:de:5e:46:56:01:fe:fc:e3:aa:9c:ab:
0d:b0:64:29:ad:1e:79:05:03:d4:69:50:2f:30:1c:8f:07:99:
fa:00:db:46:d6:53:01:37:e2:b3:85:8c:a4:d9:13:c4:50:b0:
12:48:ab:7b:73:7c:14:c9:bc:d5:1e:48:c4:1f:31:fd:58:89:
30:6d:f3:9d:4b:2d:69:cb:45:6b:67:de:39:41:08:62:1d:34:
b8:e7:96:bc:8b:75:70:bb:bd:4b:45:28:b3:e3:11:15:9c:6a:
40:95:91:cf:ed:39:c4:b9:84:4e:e9:b7:5f:22:e0:e7:63:27:
ec:c7:0a:64:0f:9d:13:0b:12:dc:41:9e:bb:1a:6e:3a:5c:61:
e6:34:5b:b8:96:fc:ee:cd:f0:26:62:1f:c6:91:38:3c:cd:47:
c8:1a:02:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:59:21 2025 by rpki-client