Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
File: TzLUClO7YLhnWebsClIHMAtBr3A.mft (raw, json)
Hash identifier: HcLXd6HZBUjmhmov0HbAczfTu9gxY8jGrxJJxdm7SFg=
Subject key identifier: 81:94:DF:16:03:64:C5:6B:5B:18:4E:07:0D:DA:4F:1F:F1:48:CA:7C
Authority key identifier: 4F:32:D4:0A:53:BB:60:B8:67:59:E6:EC:0A:52:07:30:0B:41:AF:70
Certificate issuer: /CN=4f32d40a53bb60b86759e6ec0a5207300b41af70
Certificate serial: 0194BBCE00288C104E46E93EE427F12A9230
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 10:00:27 +0000
Manifest this update: Fri 31 Jan 2025 10:00:27 +0000
Manifest next update: Sat 01 Feb 2025 10:00:27 +0000
Files and hashes: 1: TzLUClO7YLhnWebsClIHMAtBr3A.crl (hash: fO5MR/S742Yb7ze6p/iayU3IDgt0Lvd3lzcOrlMokO4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:00:28:8c:10:4e:46:e9:3e:e4:27:f1:2a:92:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f32d40a53bb60b86759e6ec0a5207300b41af70
Validity
Not Before: Jan 31 10:00:27 2025 GMT
Not After : Feb 1 10:00:27 2025 GMT
Subject: CN=8194df160364c56b5b184e070dda4f1ff148ca7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:88:7e:46:7d:3e:60:d8:65:d0:86:e7:27:
70:c1:b3:5b:bd:55:86:c8:8b:7b:1d:48:3a:a9:6b:
6c:97:04:1f:40:be:d5:58:f5:9e:88:c5:70:c5:19:
52:85:da:7d:8d:2b:dd:7f:ba:77:00:80:0a:a0:69:
eb:ea:0c:ee:19:51:9a:cd:43:3e:e1:88:f1:2b:f3:
2a:1a:81:37:5c:61:56:ae:a0:5f:22:34:07:f6:75:
ff:cd:e1:9c:d8:f1:7f:b9:14:18:39:cc:40:48:2b:
b1:5b:b9:0f:cb:45:a5:64:e2:0c:cc:0b:63:65:1b:
69:57:85:aa:d5:8e:7d:7f:97:d1:96:4a:42:fa:5b:
b6:15:c7:37:b0:65:17:1e:38:85:a5:65:1a:02:ef:
5c:59:40:52:39:16:da:d2:1e:cb:cd:00:46:91:6f:
b5:da:80:60:af:8c:d5:5c:bf:f3:36:7a:a7:34:20:
b8:25:d7:7f:d8:5e:08:e8:6a:bc:fc:f6:8d:04:1a:
9c:1f:62:f1:7e:f2:21:ec:09:21:ef:58:83:e5:4a:
69:0a:a4:66:85:df:b6:d1:81:cc:cf:a6:7e:aa:67:
72:3e:05:a5:fe:6f:95:e6:55:2a:87:9b:da:02:27:
39:95:05:21:a3:4b:63:86:7d:30:21:11:f6:6b:a3:
f2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:94:DF:16:03:64:C5:6B:5B:18:4E:07:0D:DA:4F:1F:F1:48:CA:7C
X509v3 Authority Key Identifier:
keyid:4F:32:D4:0A:53:BB:60:B8:67:59:E6:EC:0A:52:07:30:0B:41:AF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzLUClO7YLhnWebsClIHMAtBr3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/a75e63-8149-49c6-939f-c6bf2ffb7253/1/TzLUClO7YLhnWebsClIHMAtBr3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:cc:17:4e:1a:4c:0a:87:ba:51:ca:ef:a0:af:f8:58:3e:16:
76:37:f3:cd:22:07:b0:d1:60:77:68:a9:8e:51:b3:9b:ea:61:
3d:16:2a:71:69:15:a1:02:6c:6c:30:f6:da:61:55:a7:8f:5c:
ff:e5:d2:05:70:fc:95:19:5a:c6:5f:ce:89:7e:7e:0c:06:8c:
b9:da:74:dc:26:3f:cc:5e:45:36:19:57:48:79:87:eb:18:f7:
2f:6e:7e:5c:32:83:b6:36:a5:e7:1a:01:22:12:40:fe:cb:f9:
88:87:55:19:28:26:46:4c:64:7f:47:20:14:67:44:a7:a3:31:
74:cc:fb:e7:8b:6d:c4:68:6d:a4:1e:94:8b:c8:5a:20:6b:0c:
a9:14:7b:c9:7e:91:5f:f6:fa:51:e1:4e:0e:22:34:67:aa:6a:
a3:af:4b:fd:56:02:80:ad:4b:aa:ec:a5:43:81:1c:80:7c:46:
b0:34:c6:ca:85:e9:b0:79:bc:7b:5e:9b:71:ac:8f:ed:85:aa:
62:9a:63:e6:27:74:28:09:7a:6c:12:d8:ae:a1:56:ef:ed:45:
6f:d7:b7:54:3e:83:ac:c4:1f:85:03:8e:5f:2a:2a:d3:58:5e:
57:9a:e8:80:ef:f8:43:ad:45:96:74:90:bf:0e:93:c9:16:13:
73:ae:0c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:27:34 2025 by rpki-client