Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3ca360-2d61-4b32-90d0-1568c37f2b99/1/tkGHdrlK1_-vLBc7FQaqBWuZHlU.mft
File: tkGHdrlK1_-vLBc7FQaqBWuZHlU.mft (raw, json)
Hash identifier: clbYiTAgFeTLbZFwCgXLUfuAkitb73jY7hCLiy7jJfQ=
Subject key identifier: 8C:31:0A:4A:B1:40:23:C0:78:C0:6C:73:94:E1:FE:72:0D:19:EC:1E
Authority key identifier: B6:41:87:76:B9:4A:D7:FF:AF:2C:17:3B:15:06:AA:05:6B:99:1E:55
Certificate issuer: /CN=b6418776b94ad7ffaf2c173b1506aa056b991e55
Certificate serial: 0184CBF3F281FF786AAF0BA57B0A90A7CA1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tkGHdrlK1_-vLBc7FQaqBWuZHlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3ca360-2d61-4b32-90d0-1568c37f2b99/1/tkGHdrlK1_-vLBc7FQaqBWuZHlU.mft
Manifest number: 0B9C
Signing time: Thu 01 Dec 2022 04:31:12 +0000
Manifest this update: Thu 01 Dec 2022 04:31:12 +0000
Manifest next update: Fri 02 Dec 2022 04:31:12 +0000
Files and hashes: 1: fgSRrQYV1B7ZlM-8z_oK3GU4O9Y.roa (hash: GF//TKstpO8iwLuhXYneyYLLU9M9VWlH4sY08Kpf15o=)
2: tkGHdrlK1_-vLBc7FQaqBWuZHlU.crl (hash: OxABM841ZfT1IiNpwCg2xSIeHorqjcmfO6XWwaU8Odc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:cb:f3:f2:81:ff:78:6a:af:0b:a5:7b:0a:90:a7:ca:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6418776b94ad7ffaf2c173b1506aa056b991e55
Validity
Not Before: Dec 1 04:31:12 2022 GMT
Not After : Dec 2 04:31:12 2022 GMT
Subject: CN=8c310a4ab14023c078c06c7394e1fe720d19ec1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:f6:3d:72:74:0b:bf:61:e5:42:a2:d6:e4:
a5:9f:f5:33:34:74:16:a5:dd:cd:2b:6f:9b:41:0f:
8d:b6:0b:d9:7b:38:1a:2b:c4:4a:70:5a:63:98:7f:
81:87:eb:a7:ff:c3:91:2c:1c:95:76:01:8d:21:4e:
bd:7c:ca:43:a8:36:b0:c0:32:8f:4d:46:4e:70:82:
5b:9f:ea:29:af:61:f3:1f:e5:04:de:b9:9e:5a:d7:
dd:07:b4:52:47:49:0a:68:94:46:03:7f:bc:16:ab:
17:29:2f:b3:ac:3a:cb:a5:dd:43:13:d4:3b:8b:4c:
ee:8f:c9:15:fa:e0:0f:df:dd:9c:16:9e:7f:b4:37:
ba:1f:90:0e:04:35:3b:fd:32:38:f1:7a:d7:15:3f:
b1:d2:ad:64:38:5d:25:f5:ff:4f:ca:b1:3e:37:96:
60:73:8a:6f:c1:d3:6a:dd:26:ee:ad:e7:c0:0f:33:
8e:9b:73:d5:73:eb:3b:2c:4e:1c:fe:73:54:be:5a:
ce:cf:ad:72:cd:5d:3d:58:14:86:4f:fa:5f:d1:27:
20:2d:d2:c9:e4:2a:de:b8:e1:74:bc:5f:46:10:60:
d3:87:2d:cd:f2:93:6b:b2:63:99:a0:98:b1:e8:94:
d5:ff:11:97:e1:b4:53:0f:43:3c:56:a4:28:37:7e:
74:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:31:0A:4A:B1:40:23:C0:78:C0:6C:73:94:E1:FE:72:0D:19:EC:1E
X509v3 Authority Key Identifier:
keyid:B6:41:87:76:B9:4A:D7:FF:AF:2C:17:3B:15:06:AA:05:6B:99:1E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tkGHdrlK1_-vLBc7FQaqBWuZHlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ca360-2d61-4b32-90d0-1568c37f2b99/1/tkGHdrlK1_-vLBc7FQaqBWuZHlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3ca360-2d61-4b32-90d0-1568c37f2b99/1/tkGHdrlK1_-vLBc7FQaqBWuZHlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f7:3b:57:be:60:0a:42:68:56:db:6a:c0:88:3c:ec:b9:34:
a1:1a:d5:dd:10:de:96:77:fb:42:53:fe:9e:8f:45:f2:4b:ce:
35:99:b2:e3:ca:d3:a0:35:51:e7:bb:e5:c8:65:b4:c7:85:b7:
69:c6:85:55:d0:47:84:6e:45:64:f6:fb:55:50:c6:e3:26:60:
b8:12:52:6f:b9:ab:2d:21:34:82:be:5e:8d:ef:78:45:e6:89:
c4:15:09:01:f2:ac:b0:99:44:60:3c:21:ad:67:34:bd:e8:53:
97:a8:d9:60:29:75:d0:20:09:14:f1:75:61:64:64:95:9c:00:
84:93:da:a0:b1:d7:2f:ed:c6:fd:2b:cd:39:2d:3e:4a:fb:ae:
37:d9:5f:cc:bd:ef:6f:b5:12:cd:fa:e7:3d:e5:75:10:18:47:
6c:1a:cf:94:2e:03:3d:1a:44:a4:79:cb:27:69:47:50:e6:ec:
7e:b3:11:64:86:66:81:07:93:19:75:44:5e:51:69:60:68:e7:
52:39:45:cc:94:64:86:a1:c9:6a:49:c9:4f:64:f3:b8:ec:5b:
7a:ab:1f:ad:b0:93:2f:a5:5b:43:6a:de:7e:ff:92:5d:16:e2:
98:de:04:5f:c0:f1:48:13:e7:83:56:4c:f2:93:39:07:17:a5:
25:7c:b1:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:30:35 2025 by rpki-client