Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft
File: TON2ekBU9IaN4L2fsjpcx2kP_tU.mft (raw, json)
Hash identifier: Nmy9LnXQ+q6MKXgXs1DngZDEt7OLrTiZAJkI6dBGb+8=
Subject key identifier: 1B:78:DB:0C:5C:BB:DC:3A:43:18:30:83:A8:B4:12:87:08:B2:94:63
Authority key identifier: 4C:E3:76:7A:40:54:F4:86:8D:E0:BD:9F:B2:3A:5C:C7:69:0F:FE:D5
Certificate issuer: /CN=4ce3767a4054f4868de0bd9fb23a5cc7690ffed5
Certificate serial: 0194BD17A14A14C2CD68247330B36FAFA1C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TON2ekBU9IaN4L2fsjpcx2kP_tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft
Manifest number: 0BC9
Signing time: Fri 31 Jan 2025 16:00:29 +0000
Manifest this update: Fri 31 Jan 2025 16:00:29 +0000
Manifest next update: Sat 01 Feb 2025 16:00:29 +0000
Files and hashes: 1: TON2ekBU9IaN4L2fsjpcx2kP_tU.crl (hash: VlbrrodR+kyLJxh1qyMtr//d/auEk6YQprhZG8f3Yao=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a1:4a:14:c2:cd:68:24:73:30:b3:6f:af:a1:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ce3767a4054f4868de0bd9fb23a5cc7690ffed5
Validity
Not Before: Jan 31 16:00:29 2025 GMT
Not After : Feb 1 16:00:29 2025 GMT
Subject: CN=1b78db0c5cbbdc3a43183083a8b4128708b29463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b4:40:28:34:71:4e:86:27:cb:56:a1:77:c6:
c8:cf:be:0b:e4:10:c5:fe:4e:40:9e:e1:5a:9e:52:
43:86:3e:ff:d1:59:6e:c4:45:2b:2b:e9:53:05:9f:
4d:9a:38:2b:15:18:38:cc:5a:8a:51:f8:3b:7e:02:
c9:0e:ed:ac:bd:e8:09:0c:4d:5b:b3:e2:1d:73:dc:
47:b1:e2:f0:51:05:a6:37:6d:33:d1:aa:e3:0d:87:
6b:65:85:8a:3c:6d:8b:45:6d:74:5d:89:0c:73:d2:
2c:53:6d:3b:8b:57:ff:3a:90:32:a3:42:f8:44:58:
2b:b8:9d:bc:fd:1e:cd:bf:7f:98:e7:79:ba:65:9b:
17:fc:8e:24:e9:08:16:56:56:a8:de:50:75:ed:a5:
bc:b6:20:24:98:b6:ff:e7:e8:be:7e:bc:e3:5b:9f:
17:b1:6f:25:f3:77:aa:e7:09:fa:5c:ac:eb:5f:73:
06:36:8a:ad:b7:15:4a:c3:de:b7:af:73:01:d0:dd:
fb:8c:df:0e:a9:70:f2:54:b1:3c:8f:8b:21:b4:90:
09:42:fc:04:11:dc:f5:14:11:89:04:ec:99:9c:9e:
ef:66:62:42:2c:20:19:0a:d3:64:e7:31:6d:22:1b:
a2:37:19:80:8c:f8:61:57:37:c3:ed:62:b2:34:4b:
1c:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:78:DB:0C:5C:BB:DC:3A:43:18:30:83:A8:B4:12:87:08:B2:94:63
X509v3 Authority Key Identifier:
keyid:4C:E3:76:7A:40:54:F4:86:8D:E0:BD:9F:B2:3A:5C:C7:69:0F:FE:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TON2ekBU9IaN4L2fsjpcx2kP_tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f7baf4-d266-4fe5-a6ff-a00667f4cf71/1/TON2ekBU9IaN4L2fsjpcx2kP_tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:9a:19:9a:63:73:ab:68:38:44:86:42:24:93:db:17:96:34:
0a:1a:7b:b4:c4:dc:b6:7c:ee:10:7f:cd:2d:bd:3d:d5:08:43:
99:b9:39:ff:41:cc:c0:2f:bc:5e:e5:d7:79:35:8f:83:98:ad:
5d:4a:10:72:30:97:f6:35:71:75:40:7f:7d:07:7f:4d:ea:1b:
c4:38:9a:d9:ff:fd:51:a3:be:2d:80:4e:e0:0d:a5:79:a2:15:
53:04:b9:55:f3:9e:42:6f:10:68:63:6c:d5:33:60:37:bc:e0:
f9:86:98:85:89:7b:31:8a:88:22:3d:a4:9d:a6:90:e2:11:58:
3b:86:54:a6:75:7b:90:6e:00:ca:84:d6:5b:0c:5f:06:5a:fc:
a6:95:34:0b:ad:40:c4:e3:47:0b:1a:42:7e:99:51:c8:a8:92:
fd:41:71:78:1f:42:48:aa:31:ff:d3:7b:76:89:0a:45:52:02:
14:fb:62:e6:75:9e:c8:b8:48:cc:af:e8:b0:81:6a:e3:9a:b3:
74:01:28:97:7a:0a:d7:b3:34:fd:6d:6d:7d:25:2f:e2:e7:5a:
51:2f:f8:18:04:85:b8:56:ed:06:03:db:07:a4:61:18:51:f0:
39:e2:59:b3:d9:d4:58:72:bb:b6:7f:a7:b4:ea:cf:0d:2a:94:
8a:ea:27:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:28 2025 by rpki-client