Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/216de3-25fd-417b-9b62-646f5c6f1416/1/T-IhgZlVyiLjveo0hzc-GLSW2iI.mft
File: T-IhgZlVyiLjveo0hzc-GLSW2iI.mft (raw, json)
Hash identifier: czBevibV4SsPBCwF+WOwViZzMCPh7uqhCx/yKNIV53k=
Subject key identifier: 69:89:FA:8C:F1:3D:39:A6:5B:EC:3A:8E:6E:D9:B1:81:07:AA:7D:A0
Authority key identifier: 4F:E2:21:81:99:55:CA:22:E3:BD:EA:34:87:37:3E:18:B4:96:DA:22
Certificate issuer: /CN=4fe221819955ca22e3bdea3487373e18b496da22
Certificate serial: 0192AD3C30FE8DEA67DAA4B6BA18A2198F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T-IhgZlVyiLjveo0hzc-GLSW2iI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/216de3-25fd-417b-9b62-646f5c6f1416/1/T-IhgZlVyiLjveo0hzc-GLSW2iI.mft
Manifest number: 04E9
Signing time: Mon 21 Oct 2024 04:00:55 +0000
Manifest this update: Mon 21 Oct 2024 04:00:55 +0000
Manifest next update: Tue 22 Oct 2024 04:00:55 +0000
Files and hashes: 1: T-IhgZlVyiLjveo0hzc-GLSW2iI.crl (hash: UxOVAF7qchBFsBccOxhJPI1XrZEoL0ovSFbaoqRdXzU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ad:3c:30:fe:8d:ea:67:da:a4:b6:ba:18:a2:19:8f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fe221819955ca22e3bdea3487373e18b496da22
Validity
Not Before: Oct 21 04:00:55 2024 GMT
Not After : Oct 22 04:00:55 2024 GMT
Subject: CN=6989fa8cf13d39a65bec3a8e6ed9b18107aa7da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e6:9d:b8:0e:00:67:7c:29:2b:c4:99:70:e3:
76:54:12:cd:20:92:c0:89:91:6a:fb:05:d5:f0:33:
92:4e:d3:24:61:3e:4f:ea:5c:99:1b:c0:67:21:af:
b8:ac:30:5a:e1:f2:a8:bf:81:db:8a:4b:a4:c6:ca:
e3:f9:e3:ba:06:12:06:cc:89:61:0f:03:72:24:b7:
63:e3:9c:03:4d:56:eb:ed:81:d4:32:43:06:e1:fd:
8a:7c:4f:37:23:ed:94:66:f3:fe:b1:dd:e2:cf:fc:
06:d6:2f:7a:4c:45:57:d8:0a:f9:74:1e:1e:34:8f:
a4:b6:fe:30:e3:f0:fb:0a:cf:8f:ba:30:e9:47:7a:
c2:3f:51:71:d3:18:86:30:2b:7b:b1:66:d8:68:14:
a6:ab:71:a1:a1:eb:7a:b7:63:3a:35:b9:a8:1f:14:
09:33:85:ef:91:f1:5a:a7:5b:ee:11:39:f5:7a:01:
6f:2a:6d:40:58:e2:2b:a3:99:6a:01:94:48:4c:05:
a9:d4:60:38:82:12:d2:69:50:79:7b:70:2e:7c:7f:
b0:5d:7f:a6:62:7a:e3:92:05:4d:e6:c4:ba:2f:88:
2f:ae:eb:98:fd:ef:43:73:9f:ea:05:6a:d2:22:b0:
df:48:d5:49:e4:47:28:85:38:79:6a:71:8f:91:c3:
d1:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:89:FA:8C:F1:3D:39:A6:5B:EC:3A:8E:6E:D9:B1:81:07:AA:7D:A0
X509v3 Authority Key Identifier:
keyid:4F:E2:21:81:99:55:CA:22:E3:BD:EA:34:87:37:3E:18:B4:96:DA:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T-IhgZlVyiLjveo0hzc-GLSW2iI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/216de3-25fd-417b-9b62-646f5c6f1416/1/T-IhgZlVyiLjveo0hzc-GLSW2iI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/216de3-25fd-417b-9b62-646f5c6f1416/1/T-IhgZlVyiLjveo0hzc-GLSW2iI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:9a:5d:45:48:e8:68:bd:5c:55:e6:f4:c0:10:ec:68:71:d4:
3e:b6:bc:52:99:e4:33:cc:22:fd:19:e9:d3:11:25:2c:42:b2:
55:ed:27:ec:fe:a1:f4:74:97:2e:d0:65:72:61:3c:7c:c7:1a:
4b:d4:9d:fd:75:85:5c:90:d1:ec:cb:69:96:8c:2f:8b:f4:21:
e8:42:db:ac:6d:3b:2c:23:36:f3:ec:fb:76:d1:57:39:76:2d:
1c:f4:08:52:32:5d:52:bf:5b:56:ea:58:08:67:92:ec:3e:4f:
87:b9:00:0e:a1:07:38:34:2d:59:09:e0:ae:0e:af:bc:8a:50:
be:b9:aa:7c:3c:ae:c5:84:7e:ed:58:eb:6f:5c:22:7b:11:1f:
20:e2:f2:d6:01:19:ec:8f:01:42:0b:b3:cf:ba:8d:5c:cd:85:
38:dc:88:5a:80:36:69:03:6a:39:db:f1:d3:66:61:2d:70:01:
93:16:5c:18:a8:12:ce:26:16:73:1c:3f:70:4f:2c:42:ac:75:
15:33:50:e0:69:97:40:96:30:5d:a9:ba:bb:da:ff:a9:56:d4:
1c:59:d3:d9:71:61:95:8e:41:94:e3:cd:b0:72:78:b2:c2:3d:
82:fa:df:2b:69:c3:70:26:2a:32:6e:0f:7e:69:27:80:36:2b:
cd:c5:eb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:16:28 2025 by rpki-client