Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/7ac74f-b2c8-4cd5-a963-17497c2ada45/1/TFmzMbx10usv8aCubPx-Lxc9QV8.mft
File: TFmzMbx10usv8aCubPx-Lxc9QV8.mft (raw, json)
Hash identifier: I1LxOaW4u1fkUAlTo/vaonuHI8JldR1YGtZuKpp8gqk=
Subject key identifier: 95:55:A3:4E:D3:C6:83:B2:39:23:20:6A:23:17:17:50:02:36:5F:3F
Authority key identifier: 4C:59:B3:31:BC:75:D2:EB:2F:F1:A0:AE:6C:FC:7E:2F:17:3D:41:5F
Certificate issuer: /CN=4c59b331bc75d2eb2ff1a0ae6cfc7e2f173d415f
Certificate serial: 01840D1BD8943D0F062BF92FE3D4B561159C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFmzMbx10usv8aCubPx-Lxc9QV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/7ac74f-b2c8-4cd5-a963-17497c2ada45/1/TFmzMbx10usv8aCubPx-Lxc9QV8.mft
Manifest number: 0649
Signing time: Tue 25 Oct 2022 03:07:19 +0000
Manifest this update: Tue 25 Oct 2022 03:07:19 +0000
Manifest next update: Wed 26 Oct 2022 03:07:19 +0000
Files and hashes: 1: TFmzMbx10usv8aCubPx-Lxc9QV8.crl (hash: l0ysI7R+gWs1TnHPfd7Ii2UsWhFgwK+h1occltopCF0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0d:1b:d8:94:3d:0f:06:2b:f9:2f:e3:d4:b5:61:15:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c59b331bc75d2eb2ff1a0ae6cfc7e2f173d415f
Validity
Not Before: Oct 25 03:07:19 2022 GMT
Not After : Oct 26 03:07:19 2022 GMT
Subject: CN=9555a34ed3c683b23923206a2317175002365f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:84:bf:e6:35:ea:4d:15:06:b5:cb:69:5d:7d:
38:93:78:0b:74:39:9b:05:11:b4:22:eb:b2:80:c7:
7d:bf:fd:c9:7a:fe:5f:23:ec:ae:b5:86:3c:1e:f8:
9d:82:56:78:7d:27:b3:51:4e:9a:92:ab:54:bf:d9:
d5:e8:fb:7a:c1:ff:a8:6f:65:0f:e5:9b:ec:ab:81:
ce:35:4c:7d:31:c9:bd:b7:a3:64:61:31:27:d8:e4:
1b:1c:15:64:ae:9e:6a:d5:bb:ed:db:fa:d8:ed:9d:
cf:4e:ed:32:3a:f5:a9:15:74:9c:c4:71:3c:50:75:
d4:e1:43:2a:b8:9c:4b:2e:9e:fc:32:21:05:3b:4f:
eb:c9:13:73:5c:c9:43:b5:c1:b0:57:99:7a:db:6b:
c0:08:cd:1d:03:63:0b:99:f7:b4:92:a9:0e:bb:e8:
27:d4:87:0a:15:ba:0b:db:41:ab:f8:4b:3a:aa:c9:
f2:22:6e:fe:1f:de:26:a9:e2:92:9e:a2:31:84:1b:
f0:15:20:6d:8d:26:d5:f5:4f:96:91:64:96:16:90:
16:0d:64:61:c3:d8:4a:38:26:7f:9b:11:ed:33:0f:
e7:52:01:d9:5b:cf:94:6d:d1:12:0f:46:a7:59:66:
da:49:1d:c2:4f:72:28:79:45:4f:69:d3:ba:ec:63:
a6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:55:A3:4E:D3:C6:83:B2:39:23:20:6A:23:17:17:50:02:36:5F:3F
X509v3 Authority Key Identifier:
keyid:4C:59:B3:31:BC:75:D2:EB:2F:F1:A0:AE:6C:FC:7E:2F:17:3D:41:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFmzMbx10usv8aCubPx-Lxc9QV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/7ac74f-b2c8-4cd5-a963-17497c2ada45/1/TFmzMbx10usv8aCubPx-Lxc9QV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/7ac74f-b2c8-4cd5-a963-17497c2ada45/1/TFmzMbx10usv8aCubPx-Lxc9QV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:91:bc:ab:f3:ab:68:f2:ae:ee:7f:0f:35:19:22:5b:aa:8f:
d0:8a:b5:ec:b9:4a:71:d9:47:b9:f8:c2:7d:f1:3b:1b:eb:70:
7e:07:e3:62:ea:80:11:67:5e:8b:f3:50:a6:26:1e:1a:9f:e3:
ea:26:7a:d8:c0:5f:00:a0:91:16:52:e5:ae:ad:91:f2:7a:08:
7d:43:6e:a0:df:17:d5:7f:f3:c2:be:1f:fc:a1:f4:ec:36:0c:
02:85:e5:9c:91:57:d6:6c:63:e6:59:85:55:5d:d1:64:88:67:
43:22:21:6f:11:05:ab:a0:78:36:4f:ba:87:f1:17:38:aa:50:
35:d1:5d:c2:11:59:5a:97:5a:20:42:5b:09:44:35:41:91:64:
7c:62:c1:97:a9:1e:71:e7:8d:11:09:b2:3c:d1:4e:8a:79:3c:
51:0a:f9:f9:44:c4:77:6e:e4:3e:81:f2:06:5e:46:d8:20:1b:
63:c6:7b:6a:52:54:df:bd:0d:e8:e4:b6:cd:1c:f5:07:8a:ce:
e1:32:4a:b9:24:64:12:fe:bb:2e:79:da:19:85:69:c9:78:b7:
48:2d:f0:ae:1f:c1:16:46:94:c5:4e:07:9c:1c:01:21:e2:6c:
d7:d5:32:d7:ea:fe:f3:29:cd:da:7d:3a:fa:f1:94:51:5b:97:
07:27:ed:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:06 2025 by rpki-client