Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
File: Tk9mXUbWoqvwUh5csffEUcozeoc.mft (raw, json)
Hash identifier: Hvmmq0Oo1SfKhsxpmUwherbrx15r0k5oxKJ+yAxb2J8=
Subject key identifier: 53:16:21:BE:2C:3B:25:D4:99:8C:1E:2B:5B:31:8E:3B:49:52:59:75
Authority key identifier: 4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
Certificate issuer: /CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Certificate serial: 0194BCE072111536EF5308FD221FB9DB21AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
Manifest number: 0C
Signing time: Fri 31 Jan 2025 15:00:13 +0000
Manifest this update: Fri 31 Jan 2025 15:00:13 +0000
Manifest next update: Sat 01 Feb 2025 15:00:13 +0000
Files and hashes: 1: 1KxZYvxri1sxva3r2G7KLnG5z_Y.roa (hash: 9JXmyyV6BbeWSwFTBJAUkp5UHelZgOhj8wsWM2RqVyk=)
2: HrSejbS-39NivWEqBB6_ezmUBgQ.roa (hash: 8T3MTXu6asTJ46RNeuQMt6iMOXHZ2zW1uZEJeSesDDw=)
3: Tk9mXUbWoqvwUh5csffEUcozeoc.crl (hash: LtnxdWBJAxFXrZJf4khpGmKF5PERy52bpaVljPUGerk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:72:11:15:36:ef:53:08:fd:22:1f:b9:db:21:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4f665d46d6a2abf0521e5cb1f7c451ca337a87
Validity
Not Before: Jan 31 15:00:13 2025 GMT
Not After : Feb 1 15:00:13 2025 GMT
Subject: CN=531621be2c3b25d4998c1e2b5b318e3b49525975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:36:1e:fc:2c:38:31:c3:33:5d:98:43:cc:3d:
ae:a2:46:0a:04:26:43:f2:65:dd:3c:cc:64:34:fa:
81:07:53:25:01:f2:04:9f:a1:28:08:01:fa:a0:d2:
85:e1:18:0b:25:a5:0f:a5:a8:67:74:a1:18:54:98:
47:34:9e:6f:66:63:85:0f:d2:d2:2a:b8:82:a0:62:
0f:52:da:c6:38:af:85:b2:92:f3:9e:ac:3d:c4:97:
13:4f:7a:8c:a9:c2:04:c6:9c:3d:c2:e4:9f:f0:e8:
ef:ef:b1:2a:c3:b4:52:d6:c1:0b:3c:96:5f:78:15:
ff:51:1a:87:5c:9e:2f:e9:c3:a7:2c:b8:f9:fa:dd:
13:c5:5c:c4:dd:16:fe:d3:ad:40:c1:11:b6:8e:81:
ba:ba:b1:4f:70:a0:24:c4:e3:74:eb:d3:09:8c:6b:
3b:0c:b1:be:43:92:17:f6:dc:fe:97:d3:a5:6a:fd:
10:95:b2:18:33:e5:e6:4a:0c:78:ec:87:3a:84:b2:
50:a2:bf:30:7b:45:b3:62:98:b7:b3:82:bf:ed:50:
96:5c:1c:56:a4:c5:f7:0e:df:ff:7c:2f:04:12:83:
9b:9d:d9:bd:c8:e3:e4:7c:c8:1a:5a:23:e8:23:7c:
2d:1b:d0:bc:fc:9d:61:f1:b3:c1:b0:2c:c3:d0:b9:
a5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:16:21:BE:2C:3B:25:D4:99:8C:1E:2B:5B:31:8E:3B:49:52:59:75
X509v3 Authority Key Identifier:
keyid:4E:4F:66:5D:46:D6:A2:AB:F0:52:1E:5C:B1:F7:C4:51:CA:33:7A:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tk9mXUbWoqvwUh5csffEUcozeoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/270b89-7c47-4263-86a0-0073c2b7a7ee/1/Tk9mXUbWoqvwUh5csffEUcozeoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:4b:e2:2b:47:2c:7c:a6:7c:c3:5a:8c:f9:df:0f:e1:b6:4c:
57:d2:e3:fe:e2:ee:72:7a:aa:80:66:e2:98:95:3e:3f:f7:e6:
b3:76:db:26:a8:c6:e0:97:4d:e9:ee:66:87:6c:93:63:2f:2a:
e9:1a:a8:82:af:4f:4f:71:0c:5a:aa:b6:07:de:32:d1:4d:91:
27:05:5f:40:d4:27:22:5c:7d:bd:7b:78:37:95:36:ea:21:6c:
f1:00:ac:44:ab:ec:c2:49:3b:40:b2:f5:00:17:0f:e1:b2:cc:
a0:47:56:e0:81:85:6e:36:54:4b:af:35:c4:db:31:61:b2:b1:
a3:4f:31:9a:5d:5e:55:77:d1:97:4b:da:25:c3:19:a9:8d:bf:
4b:a3:69:b7:7f:2f:1f:e2:7e:9f:ce:68:b8:31:fc:00:c0:5f:
a1:dc:4e:ea:fe:8e:e6:87:23:d4:36:4d:e5:02:f6:7d:21:40:
3d:09:da:77:ca:8e:f0:a7:c3:5b:e0:3f:ca:7e:4f:2c:96:f4:
50:1b:32:ad:93:29:18:8d:99:82:c5:4e:ee:43:33:30:3a:e4:
82:35:54:a9:8f:21:c6:51:4e:69:de:6d:ef:e5:d2:f2:5e:f6:
66:69:52:da:67:cf:c1:93:a6:a5:c3:a2:42:96:e8:a7:47:50:
80:8c:18:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:21:05 2025 by rpki-client