Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/cccce0-dccd-435b-8eac-72cee2f02858/1/Tl9iSkBfo_nKfLNHngbSUDyerFo.mft
File: Tl9iSkBfo_nKfLNHngbSUDyerFo.mft (raw, json)
Hash identifier: uZ3wgVOxP/Nj0t5A4C1Dg/ongSKsmlFAyIo3gyDqup0=
Subject key identifier: BC:29:FD:CC:E9:FC:30:C0:34:F9:B2:00:8F:75:91:31:56:95:21:01
Authority key identifier: 4E:5F:62:4A:40:5F:A3:F9:CA:7C:B3:47:9E:06:D2:50:3C:9E:AC:5A
Certificate issuer: /CN=4e5f624a405fa3f9ca7cb3479e06d2503c9eac5a
Certificate serial: 0192D3A4EC5F616D065A177163157E5BC3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tl9iSkBfo_nKfLNHngbSUDyerFo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/cccce0-dccd-435b-8eac-72cee2f02858/1/Tl9iSkBfo_nKfLNHngbSUDyerFo.mft
Manifest number: 54
Signing time: Mon 28 Oct 2024 15:00:53 +0000
Manifest this update: Mon 28 Oct 2024 15:00:53 +0000
Manifest next update: Tue 29 Oct 2024 15:00:53 +0000
Files and hashes: 1: Tl9iSkBfo_nKfLNHngbSUDyerFo.crl (hash: fa5DxD7LvK9TGHV0K9lREKG5ts9+JODmylKakBTL5CE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d3:a4:ec:5f:61:6d:06:5a:17:71:63:15:7e:5b:c3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5f624a405fa3f9ca7cb3479e06d2503c9eac5a
Validity
Not Before: Oct 28 15:00:53 2024 GMT
Not After : Oct 29 15:00:53 2024 GMT
Subject: CN=bc29fdcce9fc30c034f9b2008f75913156952101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:34:c6:55:a8:3a:af:0f:c9:d3:ce:7a:20:ad:
4c:f2:db:55:63:57:82:9d:71:9e:31:e4:03:04:74:
84:95:c4:fc:93:b7:d4:f6:4f:45:9d:ad:68:a4:86:
e4:c9:5f:cc:5d:00:6f:20:4e:ac:15:89:d1:a9:29:
33:04:a6:9a:73:95:e3:07:67:10:a8:ef:cb:be:1e:
87:65:f2:96:0e:15:49:ed:c5:da:68:3c:8c:de:bc:
98:fc:c4:21:ec:7b:b5:aa:84:98:d2:0b:aa:22:22:
78:72:20:e3:06:7b:c9:77:44:10:9a:21:0a:8c:02:
6a:45:4e:8f:e3:96:7a:a2:b7:29:99:53:48:c3:83:
d2:a9:aa:ba:22:12:4b:57:83:92:44:d9:78:93:80:
24:54:52:a9:e3:ef:5a:49:70:fc:6e:cc:09:94:f0:
14:a9:e3:eb:3f:85:1f:5f:aa:0b:f2:6b:2b:41:b0:
25:7a:ae:e4:d5:c8:3e:15:26:67:96:80:b4:ec:e6:
34:f1:b0:26:8b:91:48:f0:24:86:1b:db:a4:d2:d1:
1d:a4:cd:9e:60:03:81:a3:17:d5:66:49:0f:58:5a:
d2:84:1c:62:89:22:3b:56:9e:e4:3d:e2:a8:5d:28:
ea:c5:6f:b7:de:ef:09:bb:77:a3:67:84:84:47:54:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:29:FD:CC:E9:FC:30:C0:34:F9:B2:00:8F:75:91:31:56:95:21:01
X509v3 Authority Key Identifier:
keyid:4E:5F:62:4A:40:5F:A3:F9:CA:7C:B3:47:9E:06:D2:50:3C:9E:AC:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tl9iSkBfo_nKfLNHngbSUDyerFo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cccce0-dccd-435b-8eac-72cee2f02858/1/Tl9iSkBfo_nKfLNHngbSUDyerFo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/cccce0-dccd-435b-8eac-72cee2f02858/1/Tl9iSkBfo_nKfLNHngbSUDyerFo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:c9:d1:21:94:0e:03:c3:6a:22:7c:82:d4:a1:fc:b8:85:c8:
20:52:fe:12:43:1a:66:b4:bb:6b:43:23:ff:7d:28:21:87:36:
20:92:b1:e5:15:20:e0:9a:cd:f7:9a:68:59:57:af:6a:49:e6:
71:cd:1f:8e:bd:3b:a8:4d:6a:f4:c0:66:32:d8:1f:b3:fa:57:
ab:d2:9d:c1:d1:4c:63:5b:46:fa:70:4d:1f:21:57:4a:15:ec:
9f:91:03:d7:57:db:cf:71:1a:90:79:ea:93:9c:64:ac:67:e1:
91:df:a0:ff:c6:60:c0:a5:36:f4:36:be:0e:b6:ee:b5:ab:67:
19:ea:91:cb:df:d7:07:fb:36:11:38:ed:35:e6:ba:4f:64:af:
2a:4e:4e:c0:e3:9c:42:37:ac:31:e5:89:f8:a8:b1:e8:9b:f8:
a8:2a:1b:36:bb:b8:64:29:13:55:6e:5f:a8:69:dc:7b:ac:fb:
7d:b0:f8:a9:9e:98:3c:42:e9:05:45:c1:2c:2a:08:b8:22:d7:
4c:80:f4:12:f3:6c:8f:da:7d:28:46:c8:3b:16:ad:c7:8d:19:
11:83:6e:a3:3e:1b:8a:d6:c7:9e:2d:1b:ad:aa:64:18:80:a0:
22:df:c6:25:56:3a:56:3c:d3:90:b9:bb:52:5b:ff:3a:59:6c:
87:fa:fb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:55:48 2025 by rpki-client