Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/23d162-3f6d-414b-8c05-4ded9b226e28/1/tQunRxZxIfvaBJ8lVa67YRKYK6s.mft
File: tQunRxZxIfvaBJ8lVa67YRKYK6s.mft (raw, json)
Hash identifier: T2/23A2puXRvsqFxo5hCVc5fLNa0hUUAB0YSNtfOZoE=
Subject key identifier: 43:2D:09:58:43:87:03:7E:72:36:4E:8F:7B:A9:D3:2D:9D:D7:7D:15
Authority key identifier: B5:0B:A7:47:16:71:21:FB:DA:04:9F:25:55:AE:BB:61:12:98:2B:AB
Certificate issuer: /CN=b50ba747167121fbda049f2555aebb6112982bab
Certificate serial: 0184FCAFB3C56C4FD96F7C6B0FC302A149D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tQunRxZxIfvaBJ8lVa67YRKYK6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/23d162-3f6d-414b-8c05-4ded9b226e28/1/tQunRxZxIfvaBJ8lVa67YRKYK6s.mft
Manifest number: 0163
Signing time: Sat 10 Dec 2022 15:38:03 +0000
Manifest this update: Sat 10 Dec 2022 15:38:03 +0000
Manifest next update: Sun 11 Dec 2022 15:38:03 +0000
Files and hashes: 1: tQunRxZxIfvaBJ8lVa67YRKYK6s.crl (hash: XOml5nSwhkwllnfZgjCkzST+XGSCDXYulf7yAXUDxH8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:fc:af:b3:c5:6c:4f:d9:6f:7c:6b:0f:c3:02:a1:49:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b50ba747167121fbda049f2555aebb6112982bab
Validity
Not Before: Dec 10 15:38:03 2022 GMT
Not After : Dec 11 15:38:03 2022 GMT
Subject: CN=432d09584387037e72364e8f7ba9d32d9dd77d15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c6:d7:66:7d:c6:fd:80:f7:15:af:4a:55:b4:
27:43:41:bb:14:e2:8d:25:33:68:4f:54:01:d2:7a:
58:d0:84:87:18:fb:c2:f0:55:4c:74:3d:4f:44:87:
07:c5:51:35:a2:64:94:46:e9:0b:b0:70:bb:b4:49:
eb:8e:38:07:f5:14:4d:ea:15:a2:2d:0c:00:a4:98:
78:4b:3a:48:79:29:05:f7:13:57:fb:18:68:c9:34:
9a:7a:0d:02:22:3e:38:2c:fc:88:17:a6:eb:57:75:
7e:cd:24:27:70:c8:62:b3:22:76:7c:63:d8:f2:11:
0f:4b:b2:44:88:a1:e2:d7:cc:68:80:e8:fe:08:6b:
57:a3:b5:56:58:38:ae:d0:8e:3c:95:fc:0c:93:d5:
8a:27:df:fb:3b:f3:9d:41:d7:97:84:2d:0d:a0:79:
fd:55:b2:7d:69:70:c6:9e:39:2d:c3:cf:c9:9d:eb:
ec:70:5d:5f:02:a0:c9:61:82:cb:83:a2:90:70:40:
de:1c:93:8b:4c:1d:ac:fa:01:bc:f3:d1:a7:7d:4f:
e5:67:34:39:69:f2:c8:ac:f2:f9:16:a8:cc:94:16:
97:ac:1c:2f:4b:ec:aa:21:15:6d:c6:d7:c3:54:39:
03:47:ec:a3:29:3e:49:9d:7c:47:73:e4:31:80:23:
b3:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2D:09:58:43:87:03:7E:72:36:4E:8F:7B:A9:D3:2D:9D:D7:7D:15
X509v3 Authority Key Identifier:
keyid:B5:0B:A7:47:16:71:21:FB:DA:04:9F:25:55:AE:BB:61:12:98:2B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tQunRxZxIfvaBJ8lVa67YRKYK6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/23d162-3f6d-414b-8c05-4ded9b226e28/1/tQunRxZxIfvaBJ8lVa67YRKYK6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/23d162-3f6d-414b-8c05-4ded9b226e28/1/tQunRxZxIfvaBJ8lVa67YRKYK6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:96:ac:e7:d0:15:dc:e0:98:c0:40:1f:84:f1:56:cb:e6:ba:
c2:d2:c7:2c:04:9b:21:5b:1d:12:81:0c:a3:27:a2:de:2f:bd:
4b:63:d1:01:94:45:25:43:7a:18:9d:bd:8b:e7:99:27:1c:b1:
93:dd:88:72:10:5e:b9:33:90:49:0d:af:7d:84:fe:f3:45:c0:
df:f4:14:40:1e:83:96:13:4c:1b:2b:a2:95:3d:bb:0e:4a:ad:
de:92:e0:54:c0:d3:4a:bf:38:8f:9a:80:54:7f:a0:6c:f9:6a:
1c:d3:e6:e9:0b:87:c8:8b:e7:04:86:17:b7:69:93:d2:5a:b5:
da:ed:5b:40:fc:77:83:17:ed:84:12:ef:6a:9c:8b:8b:37:3b:
85:3b:ac:5f:ac:11:9d:e1:56:71:68:df:6f:70:09:45:6f:e1:
4b:80:0d:07:cc:c4:cb:5a:6e:f5:3c:7e:fb:8d:61:7a:68:d5:
54:ac:77:21:9a:c2:9b:24:6f:d4:4e:27:09:3f:6d:50:57:a0:
32:b8:ac:07:fa:25:af:db:bc:c5:38:ca:e9:3f:c9:5a:af:68:
5f:21:d0:e3:e9:d3:07:54:4b:23:c1:9a:1c:1d:f9:3e:88:78:
a3:f4:d0:db:94:73:03:9f:ac:84:45:33:f3:30:9d:2a:dc:b2:
b6:af:54:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:13 2025 by rpki-client