Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/61363e-220f-4414-9262-edafdcc604cf/1/Tmhknrlb-T3brWZaxzC3M_0LW7k.mft
File: Tmhknrlb-T3brWZaxzC3M_0LW7k.mft (raw, json)
Hash identifier: x7lLpjnfaw1HsxJPsdh1YzE5xu+j4VIzpuWdYu5erdo=
Subject key identifier: 6A:7A:E3:7E:86:3A:70:78:F6:E2:9B:58:F9:3D:4C:55:4E:A0:EE:CE
Authority key identifier: 4E:68:64:9E:B9:5B:F9:3D:DB:AD:66:5A:C7:30:B7:33:FD:0B:5B:B9
Certificate issuer: /CN=4e68649eb95bf93ddbad665ac730b733fd0b5bb9
Certificate serial: 0186A24708E7A9691D02A2770215F541B420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmhknrlb-T3brWZaxzC3M_0LW7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/61363e-220f-4414-9262-edafdcc604cf/1/Tmhknrlb-T3brWZaxzC3M_0LW7k.mft
Manifest number: 01
Signing time: Thu 02 Mar 2023 12:23:29 +0000
Manifest this update: Thu 02 Mar 2023 12:23:29 +0000
Manifest next update: Fri 03 Mar 2023 12:23:29 +0000
Files and hashes: 1: Tmhknrlb-T3brWZaxzC3M_0LW7k.crl (hash: 5Zf97yBNL5yjnR8z7AbkJAimNCWGsfIGmsnNXB82SPs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a2:47:08:e7:a9:69:1d:02:a2:77:02:15:f5:41:b4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e68649eb95bf93ddbad665ac730b733fd0b5bb9
Validity
Not Before: Mar 2 12:23:29 2023 GMT
Not After : Mar 3 12:23:29 2023 GMT
Subject: CN=6a7ae37e863a7078f6e29b58f93d4c554ea0eece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:82:88:7d:57:3f:50:50:b3:30:dc:d3:3c:3e:
05:de:7d:7e:c0:b8:7a:59:47:0d:4e:29:e9:fc:58:
cb:52:52:65:6a:4c:2d:69:9d:d3:a6:b5:5b:f7:02:
76:85:dd:2e:69:c2:d0:28:b9:d0:42:f0:24:f1:61:
80:f8:b6:b1:6c:d0:9e:c3:92:76:75:d8:6d:0b:5e:
68:7b:9d:17:28:db:dc:3b:46:a0:07:b5:dc:f2:6e:
28:10:17:f5:d9:52:11:4b:a3:ee:77:82:fd:a1:37:
27:b7:ac:4c:94:17:12:2c:a1:36:11:ef:54:75:82:
91:74:9d:a4:08:80:99:74:71:16:80:3b:e3:9c:54:
e3:43:c7:2e:dc:ce:6f:12:e3:eb:0a:00:a2:cc:6c:
c3:fd:0c:3e:82:2b:63:db:9d:fc:f3:f0:88:8a:32:
5d:fb:d9:a9:a5:cb:eb:05:c6:ab:ac:b4:08:80:96:
06:a8:98:cc:15:a6:a5:43:19:c6:e3:09:cc:52:f5:
c9:dc:e0:02:38:8b:00:0a:cf:1b:54:3f:74:ed:1e:
14:15:42:9d:e1:48:c6:4b:a8:cb:07:e3:40:21:24:
4b:e6:af:76:46:cf:b5:d9:4e:14:1a:29:d4:61:86:
0c:f2:25:7b:0a:e9:e3:ac:e3:5e:dd:a9:0d:65:f4:
b6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:7A:E3:7E:86:3A:70:78:F6:E2:9B:58:F9:3D:4C:55:4E:A0:EE:CE
X509v3 Authority Key Identifier:
keyid:4E:68:64:9E:B9:5B:F9:3D:DB:AD:66:5A:C7:30:B7:33:FD:0B:5B:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmhknrlb-T3brWZaxzC3M_0LW7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/61363e-220f-4414-9262-edafdcc604cf/1/Tmhknrlb-T3brWZaxzC3M_0LW7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/61363e-220f-4414-9262-edafdcc604cf/1/Tmhknrlb-T3brWZaxzC3M_0LW7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:fd:51:6a:3e:3b:69:5c:50:f9:86:e3:30:ab:33:3a:e4:62:
26:55:56:61:9c:05:a7:85:7a:34:93:21:0e:2a:3d:4b:4e:f4:
32:0b:ba:31:08:e3:61:fd:7f:02:e4:7a:c2:2e:00:86:15:17:
21:aa:dd:a2:04:72:b6:f3:25:2c:a8:53:85:d4:42:c8:44:dc:
ea:33:52:0b:c8:b8:d6:ff:28:fd:fa:59:41:d5:16:3c:e5:c6:
3b:33:2b:ae:44:39:4a:f9:a9:27:2e:9a:fc:a5:92:2f:5c:35:
ca:7d:0a:e2:e7:fe:77:f3:bb:89:84:7c:0f:39:23:1e:49:b5:
ff:67:04:a7:cc:29:29:46:84:08:89:f4:a7:fb:23:3e:af:16:
47:e3:5b:3b:5a:f1:bc:cd:c7:61:45:ce:61:ed:26:c3:b9:ee:
f2:07:bc:a1:31:5e:19:b0:1f:8a:35:ff:69:c4:e5:c5:6a:a8:
9b:28:0f:6f:3d:78:17:f2:6d:1b:82:17:31:de:70:e9:cb:10:
a3:d7:c5:b1:10:ab:03:0e:60:15:73:8d:b5:77:f2:22:35:89:
5f:0e:42:3e:5e:bb:03:5f:be:b4:2c:e0:52:28:57:16:7f:28:
48:0b:f3:d9:9b:6b:93:73:37:64:85:9f:a8:9a:21:25:b3:03:
25:be:32:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 2 09:42:45 2025 by rpki-client