Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/c708b6-3ce6-480c-8254-5ddae15a6f46/1/rTZHIC_Nnb1dMHf-6zDiEScMNK4.mft
File: rTZHIC_Nnb1dMHf-6zDiEScMNK4.mft (raw, json)
Hash identifier: xXUO58x+rSFLluHzDr40OreCvdN/c72uzoH2QqFai4s=
Subject key identifier: 4D:D2:0A:2E:90:A2:29:85:3A:30:69:A0:1B:FA:CF:9E:30:21:0C:45
Authority key identifier: AD:36:47:20:2F:CD:9D:BD:5D:30:77:FE:EB:30:E2:11:27:0C:34:AE
Certificate issuer: /CN=ad3647202fcd9dbd5d3077feeb30e211270c34ae
Certificate serial: 018BF41D6FF5502C814470B46CE5DAA3138F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTZHIC_Nnb1dMHf-6zDiEScMNK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/c708b6-3ce6-480c-8254-5ddae15a6f46/1/rTZHIC_Nnb1dMHf-6zDiEScMNK4.mft
Manifest number: F1
Signing time: Tue 21 Nov 2023 23:00:51 +0000
Manifest this update: Tue 21 Nov 2023 23:00:51 +0000
Manifest next update: Wed 22 Nov 2023 23:00:51 +0000
Files and hashes: 1: rTZHIC_Nnb1dMHf-6zDiEScMNK4.crl (hash: CEgkEdMqcr1TSn4ME1EUMYoA9df69Z0fAGyGwL5op6g=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:f4:1d:6f:f5:50:2c:81:44:70:b4:6c:e5:da:a3:13:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3647202fcd9dbd5d3077feeb30e211270c34ae
Validity
Not Before: Nov 21 23:00:51 2023 GMT
Not After : Nov 22 23:00:51 2023 GMT
Subject: CN=4dd20a2e90a229853a3069a01bfacf9e30210c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:b4:cc:b3:3e:45:ae:b8:82:04:94:60:ad:
e9:03:34:f2:be:4e:7d:0c:d1:50:d4:55:6f:d3:d6:
fb:e8:14:22:90:04:13:dd:1a:ae:f0:6e:0c:3a:95:
db:fa:f7:d7:9b:40:a6:fe:09:8e:80:f2:c6:a5:44:
07:24:c6:3d:cf:f2:d8:af:58:0d:c9:78:0d:ef:ab:
21:d8:11:9f:5a:28:4b:1d:85:c1:be:e5:c1:53:b1:
a6:6e:6f:37:fe:fd:30:85:ba:74:46:db:ba:c7:38:
c0:10:df:96:e8:45:54:3b:38:91:9c:ce:5a:0f:0d:
46:b1:f0:a9:9e:b9:da:77:ca:bd:e0:63:61:ac:7e:
27:70:b4:ee:c1:43:92:f4:be:13:0c:91:83:06:a4:
2c:95:03:e4:36:2c:f4:f1:86:88:39:17:4e:4d:da:
65:be:15:0f:60:b0:4b:a1:a2:da:d5:79:a9:32:1a:
ea:e8:f7:52:c3:9e:69:59:7a:4c:10:f8:c8:63:ec:
a4:ba:f3:41:a2:2c:46:2b:35:75:07:e1:61:e2:b6:
d6:d5:5d:1a:a3:9f:fa:64:be:85:f7:a6:3f:f9:0b:
53:da:05:71:c8:7f:cf:f0:ff:aa:7f:83:ca:12:bb:
03:ae:26:1d:46:b9:e3:6b:35:1f:c5:5c:44:be:22:
79:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D2:0A:2E:90:A2:29:85:3A:30:69:A0:1B:FA:CF:9E:30:21:0C:45
X509v3 Authority Key Identifier:
keyid:AD:36:47:20:2F:CD:9D:BD:5D:30:77:FE:EB:30:E2:11:27:0C:34:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTZHIC_Nnb1dMHf-6zDiEScMNK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c708b6-3ce6-480c-8254-5ddae15a6f46/1/rTZHIC_Nnb1dMHf-6zDiEScMNK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/c708b6-3ce6-480c-8254-5ddae15a6f46/1/rTZHIC_Nnb1dMHf-6zDiEScMNK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6a:31:b0:5f:df:51:9f:43:c9:6f:03:3f:d5:95:12:23:cb:
73:66:e5:3b:6d:62:ea:4f:40:03:1b:6f:6f:33:02:8e:33:e7:
65:13:e6:8f:ab:80:66:ad:32:47:9d:06:5d:67:27:12:94:9a:
4f:eb:f2:9c:41:91:bb:d9:2c:2f:d8:05:f6:bc:63:93:14:83:
96:75:80:6a:66:7c:38:ff:d0:cd:cb:67:65:8f:65:2d:58:13:
b9:3d:22:a1:40:af:4d:65:fb:b5:a3:d2:97:f4:b1:97:11:98:
89:b6:e3:37:c4:b0:2d:d4:0f:8c:1d:64:95:64:46:d8:81:e2:
e2:e3:ee:43:c1:bd:20:73:53:49:67:30:38:e9:a9:df:c4:b4:
56:ef:57:99:75:6d:da:e1:95:a1:f9:3d:c3:f4:fc:b1:f1:02:
73:e6:39:49:dc:54:5f:3f:be:14:f0:7c:18:eb:d1:e6:01:58:
96:b4:a7:01:6b:b3:ba:0c:13:08:88:7a:53:9c:40:e3:03:d7:
f1:db:02:c1:44:c8:1d:10:fa:64:81:bc:03:d3:71:04:63:ae:
47:39:df:4c:03:fc:19:4a:99:d6:b5:00:a7:72:59:34:8e:56:
05:20:bd:6f:70:ee:1f:43:ab:67:5e:cb:aa:fe:f9:41:a6:7b:
eb:6f:34:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:23:11 2025 by rpki-client