Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/deae33-d6e6-413d-80b9-31ebd8ff4a10/1/tfaNwgTWi-AyolQmKOszpT9ZZZs.mft
File: tfaNwgTWi-AyolQmKOszpT9ZZZs.mft (raw, json)
Hash identifier: qX3NyNhRQGMSWAT4abZfpWlHBs/a3JOMzXKgj9tlOd8=
Subject key identifier: 6C:82:5F:2A:67:DF:D3:D2:15:A5:47:C0:DD:68:57:9A:3D:99:BF:6F
Authority key identifier: B5:F6:8D:C2:04:D6:8B:E0:32:A2:54:26:28:EB:33:A5:3F:59:65:9B
Certificate issuer: /CN=b5f68dc204d68be032a2542628eb33a53f59659b
Certificate serial: 018FDC43C9EFE1802C227D8F3403C10480F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfaNwgTWi-AyolQmKOszpT9ZZZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/deae33-d6e6-413d-80b9-31ebd8ff4a10/1/tfaNwgTWi-AyolQmKOszpT9ZZZs.mft
Manifest number: 0735
Signing time: Mon 03 Jun 2024 04:03:01 +0000
Manifest this update: Mon 03 Jun 2024 04:03:01 +0000
Manifest next update: Tue 04 Jun 2024 04:03:01 +0000
Files and hashes: 1: tfaNwgTWi-AyolQmKOszpT9ZZZs.crl (hash: fG5iQKtti7f8qBsdmCttbgwYh0xzbkmJ9HpiVEICFps=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:dc:43:c9:ef:e1:80:2c:22:7d:8f:34:03:c1:04:80:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5f68dc204d68be032a2542628eb33a53f59659b
Validity
Not Before: Jun 3 04:03:01 2024 GMT
Not After : Jun 4 04:03:01 2024 GMT
Subject: CN=6c825f2a67dfd3d215a547c0dd68579a3d99bf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:7f:f4:e0:74:bb:db:30:f4:8e:7f:56:37:c8:
a5:54:b7:51:5b:16:a6:32:2d:db:f1:4a:37:ce:32:
20:8c:74:be:33:41:1a:b1:7d:7c:9d:77:0c:e8:bc:
71:10:6c:fa:12:4a:55:8c:40:73:e2:5a:5e:dd:ac:
6c:3c:6a:59:0b:27:24:d3:f4:6b:fb:d4:f9:e6:a7:
24:f4:22:d8:69:6b:3f:69:9a:db:1d:b6:3b:95:15:
85:fa:98:3b:b0:02:ee:e2:5a:a9:dc:19:ec:f2:89:
1f:9a:15:53:b8:26:9f:69:3d:a6:4d:4b:a0:5f:11:
42:2b:ac:c0:d4:c6:14:ac:d7:66:5e:1a:06:5f:4e:
b3:23:19:4b:24:4f:e4:25:3d:a5:f1:17:2f:39:a4:
31:84:4f:9a:9b:2c:77:6e:30:66:ad:7f:70:ac:e8:
9e:bc:c7:d0:aa:54:a2:b0:6d:db:e8:34:47:26:ba:
97:75:b7:94:b9:21:d9:06:02:91:e1:75:c6:b9:32:
0a:02:d6:b3:11:fb:1e:71:04:1f:af:f6:82:6b:b9:
73:aa:f6:1a:bc:1c:6e:a9:52:3d:b2:2d:94:a4:9b:
95:10:35:6f:71:58:72:41:10:d4:03:b8:db:bb:83:
24:13:a4:37:5b:73:83:b5:78:00:e4:15:ef:e6:18:
c0:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:82:5F:2A:67:DF:D3:D2:15:A5:47:C0:DD:68:57:9A:3D:99:BF:6F
X509v3 Authority Key Identifier:
keyid:B5:F6:8D:C2:04:D6:8B:E0:32:A2:54:26:28:EB:33:A5:3F:59:65:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfaNwgTWi-AyolQmKOszpT9ZZZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/deae33-d6e6-413d-80b9-31ebd8ff4a10/1/tfaNwgTWi-AyolQmKOszpT9ZZZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/deae33-d6e6-413d-80b9-31ebd8ff4a10/1/tfaNwgTWi-AyolQmKOszpT9ZZZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:3f:32:f7:94:3d:d1:21:eb:a7:be:dd:f9:c7:6c:16:94:4a:
17:58:dd:e5:37:3f:61:57:c3:7d:49:90:44:21:03:c5:13:0f:
b7:c4:3b:9d:fc:6a:78:47:5a:ee:36:fd:d3:5e:3a:5d:95:ff:
cf:dd:6a:1e:48:b7:dc:a5:c5:e9:b1:9c:36:ee:4e:2d:3a:ba:
9a:ce:96:88:70:75:23:ee:c6:dc:0b:aa:d3:ba:a4:c2:26:d6:
49:92:13:52:f2:8b:4b:67:d2:5f:22:6c:84:e0:33:97:f1:b5:
cf:20:3f:75:73:62:62:bc:81:2d:02:c1:69:a1:04:7b:dc:74:
0f:c6:e7:07:ee:e4:88:87:fb:4d:20:b6:81:1a:7d:b6:7a:db:
2a:aa:71:3b:a8:db:4f:17:d5:f3:27:95:2d:0a:8a:07:82:e5:
55:f8:51:04:11:97:9b:e5:cb:c1:a7:17:6a:78:51:21:33:a8:
eb:c5:dc:a1:31:8c:6e:50:8c:a9:c5:c6:3d:80:72:3f:dd:7d:
07:5b:9c:00:e2:8e:e0:d4:f0:89:d2:fc:92:1d:5f:b3:46:8b:
6a:9f:92:e8:88:5e:fe:2c:c9:83:ae:0e:b3:fb:fa:9a:64:9e:
49:71:f8:7c:df:b4:87:e7:89:b7:28:e9:37:e6:0f:e0:f3:ee:
e4:40:7d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:29:44 2025 by rpki-client