Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/TgWhR5BmUWnAnlyUPv9dgl5sj_M.mft
File: TgWhR5BmUWnAnlyUPv9dgl5sj_M.mft (raw, json)
Hash identifier: ajzXYU4Kza1g9iUQ+i/u2b43eROurSoTCiRSuJNNlsk=
Subject key identifier: 60:59:1A:59:E0:5A:BF:FB:3D:09:1E:ED:2D:48:DE:0C:23:68:67:20
Authority key identifier: 4E:05:A1:47:90:66:51:69:C0:9E:5C:94:3E:FF:5D:82:5E:6C:8F:F3
Certificate issuer: /CN=4e05a14790665169c09e5c943eff5d825e6c8ff3
Certificate serial: 019512B616C3416A6BE54202C0B2D638D02A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TgWhR5BmUWnAnlyUPv9dgl5sj_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/TgWhR5BmUWnAnlyUPv9dgl5sj_M.mft
Manifest number: 07C1
Signing time: Mon 17 Feb 2025 07:01:18 +0000
Manifest this update: Mon 17 Feb 2025 07:01:18 +0000
Manifest next update: Tue 18 Feb 2025 07:01:18 +0000
Files and hashes: 1: TgWhR5BmUWnAnlyUPv9dgl5sj_M.crl (hash: c12PCOtVO/l/n61hc3VbLHeOujwsP0Zjleu+NxAaV9w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:12:b6:16:c3:41:6a:6b:e5:42:02:c0:b2:d6:38:d0:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e05a14790665169c09e5c943eff5d825e6c8ff3
Validity
Not Before: Feb 17 07:01:18 2025 GMT
Not After : Feb 18 07:01:18 2025 GMT
Subject: CN=60591a59e05abffb3d091eed2d48de0c23686720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:35:4a:40:42:64:84:06:e7:c0:15:96:f3:76:
b4:1c:76:4e:5d:bd:31:7b:d8:ae:0a:21:07:2d:d3:
aa:ca:73:aa:c5:43:7f:6c:af:b5:dc:84:e5:64:22:
92:02:b7:20:75:aa:84:ad:ed:99:f4:8d:25:db:c9:
e0:e2:39:d1:67:c1:c3:67:b5:24:c3:8c:b2:0d:e1:
7e:d1:41:3a:23:3b:20:f9:cb:c9:90:96:21:b6:b4:
8f:c5:29:68:f5:34:df:9c:96:3a:8f:29:d9:6d:97:
59:43:62:7a:44:49:95:d6:44:fe:a4:e7:94:2f:6d:
46:76:87:96:ca:ac:69:2a:c6:71:7e:be:bf:6d:89:
8d:19:d1:5a:53:54:3a:05:53:ba:15:44:3a:6d:c7:
b5:7f:23:eb:bc:fa:11:65:00:87:b1:a0:c2:ef:56:
44:ae:42:9f:08:3e:70:d0:ea:3f:ab:6c:4b:72:e3:
8b:cf:8f:cc:2a:56:2e:49:04:bc:fc:5c:30:75:ae:
32:9d:bd:67:fc:76:cd:27:99:29:55:23:f5:24:29:
d0:70:5d:5f:a9:aa:b4:cb:df:46:c8:ca:95:3b:da:
59:ba:f6:e8:f5:09:2c:44:8c:f3:a9:f2:06:77:13:
43:1f:6c:7c:1b:71:44:3a:c8:88:34:30:df:eb:b5:
a2:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:59:1A:59:E0:5A:BF:FB:3D:09:1E:ED:2D:48:DE:0C:23:68:67:20
X509v3 Authority Key Identifier:
keyid:4E:05:A1:47:90:66:51:69:C0:9E:5C:94:3E:FF:5D:82:5E:6C:8F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TgWhR5BmUWnAnlyUPv9dgl5sj_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/TgWhR5BmUWnAnlyUPv9dgl5sj_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/0a54e8-1c71-4ebc-b99e-60ec78be02d5/1/TgWhR5BmUWnAnlyUPv9dgl5sj_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:99:a9:29:c7:e8:93:33:62:72:cd:7e:42:c2:2d:99:e3:a2:
99:4c:09:a5:0f:fb:31:53:a8:92:0d:d1:36:29:38:24:b5:51:
2d:b7:7a:2d:42:b5:34:4f:57:79:51:08:bf:eb:28:75:36:cd:
ee:97:25:19:aa:65:17:8a:62:cf:41:12:6f:dd:da:9a:cb:18:
14:25:18:be:68:06:48:00:bf:bf:50:44:15:01:b2:c3:49:17:
b6:1c:d8:d1:e8:bc:78:1c:6f:07:66:7d:c4:f8:fb:88:1e:36:
26:f8:b7:9b:4d:f6:8c:e9:c9:60:67:fc:b6:80:6c:5f:28:a2:
0b:e1:b2:57:7f:00:1a:91:bf:dc:90:8c:71:05:2b:25:fe:9e:
24:fb:19:f6:d3:96:f8:3e:d2:69:c6:25:b5:be:9c:cf:98:55:
e9:7c:62:e6:a8:bf:70:09:4d:6f:3b:c0:1d:68:b6:88:17:f4:
ed:c1:cc:27:0b:76:17:21:2e:f7:dd:a8:9b:4d:a5:1c:d4:43:
c7:1c:4d:87:20:71:e1:14:3f:e7:a5:5a:9e:e4:a5:c7:c9:c2:
09:7e:8b:f4:3a:c6:da:6d:6a:d8:71:88:39:49:e6:33:82:40:
be:e2:d5:aa:6a:1a:a6:57:53:30:1f:7c:67:fc:67:29:f7:04:
d5:53:85:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:54 2025 by rpki-client