Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tsL_O1BzWAOGXVbVKttFzqTWn5Y.mft
File: tsL_O1BzWAOGXVbVKttFzqTWn5Y.mft (raw, json)
Hash identifier: a0Tzm+M6tToueY7A1O/fySX75/vpv50RxFEvieuo3b0=
Subject key identifier: C5:ED:21:3E:5E:87:74:14:17:E1:30:76:C0:DC:21:0F:64:39:B0:EE
Authority key identifier: B6:C2:FF:3B:50:73:58:03:86:5D:56:D5:2A:DB:45:CE:A4:D6:9F:96
Certificate issuer: /CN=b6c2ff3b50735803865d56d52adb45cea4d69f96
Certificate serial: 018CC8036A581BF2B7EAFB168ED4D1B7B595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsL_O1BzWAOGXVbVKttFzqTWn5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tsL_O1BzWAOGXVbVKttFzqTWn5Y.mft
Manifest number: 0753
Signing time: Tue 02 Jan 2024 02:31:56 +0000
Manifest this update: Tue 02 Jan 2024 02:31:56 +0000
Manifest next update: Wed 03 Jan 2024 02:31:56 +0000
Files and hashes: 1: cF35Cryma8QkHAoJ_JJKcyHKlPU.roa (hash: qh9wcc/XMGl/0YAr7imvjXJRAlWXXqFgXYC4dA6IcJY=)
2: tsL_O1BzWAOGXVbVKttFzqTWn5Y.crl (hash: ivrnV8LTeQTpFYy9aGVGJbDpJl/0jrAwD9bAnpVmHM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:03:6a:58:1b:f2:b7:ea:fb:16:8e:d4:d1:b7:b5:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c2ff3b50735803865d56d52adb45cea4d69f96
Validity
Not Before: Jan 2 02:31:56 2024 GMT
Not After : Jan 3 02:31:56 2024 GMT
Subject: CN=c5ed213e5e87741417e13076c0dc210f6439b0ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:32:e4:90:30:f9:88:f4:49:22:29:01:11:4e:
f4:d9:33:f5:dc:83:31:b7:3a:d1:a5:60:4a:d6:03:
eb:ef:a7:70:7f:50:d3:ec:3e:29:87:75:a6:78:49:
12:8c:ec:30:f1:0c:78:d0:f7:ed:14:f8:b1:20:76:
b3:5e:ee:98:fc:54:08:63:5b:ad:a0:65:c0:f5:6c:
2a:4a:0f:2c:7b:42:b7:13:0c:05:12:79:ea:87:35:
50:a2:95:6f:37:11:3b:6e:73:24:5d:6a:94:a3:74:
23:70:c8:2c:87:ad:25:32:e6:2e:fe:8e:7e:af:d8:
d0:4f:bf:c9:f3:52:2d:05:be:3c:bc:14:f8:f1:dd:
1c:5e:ab:8a:43:98:4f:d2:da:1a:62:f2:b9:b2:11:
99:93:4e:23:cb:f7:81:33:3b:b6:20:78:86:c9:02:
59:09:87:51:f5:f2:12:81:8b:87:b0:89:6c:0c:9f:
65:44:03:70:9b:b3:56:d6:9f:70:c5:16:f1:48:55:
2d:32:05:f1:bf:d3:75:5c:05:47:65:1e:5c:c4:01:
ae:97:0a:ba:9b:51:fd:76:92:ea:bb:e6:3d:85:2d:
55:20:15:ae:74:9f:c5:05:18:49:0a:d0:c1:21:31:
6b:bf:53:09:7d:e3:cb:b0:ed:93:99:fc:b6:ba:30:
f0:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:ED:21:3E:5E:87:74:14:17:E1:30:76:C0:DC:21:0F:64:39:B0:EE
X509v3 Authority Key Identifier:
keyid:B6:C2:FF:3B:50:73:58:03:86:5D:56:D5:2A:DB:45:CE:A4:D6:9F:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsL_O1BzWAOGXVbVKttFzqTWn5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tsL_O1BzWAOGXVbVKttFzqTWn5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/d44702-4933-4309-9b03-6c52d108bcfa/1/tsL_O1BzWAOGXVbVKttFzqTWn5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:88:33:9d:db:06:b1:05:fc:ed:14:9c:a9:5d:d1:90:33:bb:
85:77:1c:54:bd:85:77:b0:ef:c7:73:fe:26:e1:ee:5a:4d:ae:
eb:9b:e2:8b:ee:89:15:94:01:a9:d9:64:25:a0:29:9f:4b:86:
b4:02:7f:b2:00:15:9f:6f:0e:12:3f:1d:9d:dc:28:5a:27:38:
16:14:b8:8a:9e:5b:eb:62:a9:4d:51:a5:a7:02:be:f4:5b:9a:
be:a0:af:8f:c0:74:25:17:b5:af:7d:04:ce:fd:2e:a4:3a:b7:
38:11:1c:97:6e:b9:a2:85:e0:e8:1c:6f:c2:60:37:55:39:31:
25:e2:70:f1:0e:2b:eb:90:be:ce:8c:00:e8:de:70:58:97:4b:
6f:f4:54:ca:7b:59:d2:a4:d7:fe:9b:d8:be:01:5d:f0:1a:f0:
b1:eb:a9:6d:0c:2f:6c:9d:99:61:95:43:f0:02:86:2f:68:d4:
9d:79:d6:e5:81:0f:34:b5:c8:19:8a:06:2d:d4:f7:35:36:98:
40:d2:2a:66:94:df:e1:e6:55:0f:c8:03:0c:91:a7:69:0b:03:
74:c2:72:fc:68:23:3e:1a:d5:52:bb:e6:aa:2f:01:06:71:6f:
d3:90:a3:d4:43:a6:2c:2c:e6:d3:67:ef:49:5a:77:b7:b9:80:
b6:05:68:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 07:29:29 2025 by rpki-client