Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
File: TBdAzvl0ncKw9fiM3xA02oHWBtw.mft (raw, json)
Hash identifier: 2H7CrxepSYRxHOMjqAz65+wzhhFdAMJq79l+2Ipjux0=
Subject key identifier: 17:6D:7F:E9:C4:56:3E:54:58:6F:68:B7:DA:B8:2E:CD:6C:49:BD:24
Authority key identifier: 4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
Certificate issuer: /CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Certificate serial: 0194BCE08CE33817121BB4055E74BA50D998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
Manifest number: 0DA9
Signing time: Fri 31 Jan 2025 15:00:20 +0000
Manifest this update: Fri 31 Jan 2025 15:00:20 +0000
Manifest next update: Sat 01 Feb 2025 15:00:20 +0000
Files and hashes: 1: 9UfG7ZfqsnxXdNjOVBB4EufGuiU.roa (hash: nBGGqWZhxqHLJh+Oq/1SCIlZ0ENh9e+rLU6y/LQvQNA=)
2: TBdAzvl0ncKw9fiM3xA02oHWBtw.crl (hash: km3LpdVB07STr7JBY6B+58V9eausk+PsCc18VCb7sQM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:8c:e3:38:17:12:1b:b4:05:5e:74:ba:50:d9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1740cef9749dc2b0f5f88cdf1034da81d606dc
Validity
Not Before: Jan 31 15:00:20 2025 GMT
Not After : Feb 1 15:00:20 2025 GMT
Subject: CN=176d7fe9c4563e54586f68b7dab82ecd6c49bd24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ec:57:eb:e8:e5:22:ec:6b:b0:0a:1b:7f:46:
2a:d3:b4:21:8a:d8:33:1d:95:76:de:f5:2f:f2:0b:
ce:0b:5d:95:04:58:e6:55:d0:ab:71:59:5e:e2:c8:
f0:d9:ce:1e:20:53:2b:5d:b6:5f:9e:fe:19:61:8a:
0d:ed:d3:32:58:54:8d:b7:d4:d8:a3:78:70:16:a0:
3b:75:c5:5e:75:ea:f1:7c:99:68:ab:82:f1:8e:c0:
35:f8:19:df:83:7c:95:9d:e8:76:13:c0:76:21:75:
69:46:6d:d9:eb:fc:f6:9b:b5:24:34:ec:9c:9e:d4:
cd:b3:9f:dc:49:63:3a:07:5d:ff:0e:12:dc:44:b8:
a4:cf:23:06:c7:f9:67:67:99:e4:a2:50:c2:23:53:
db:f9:38:19:c1:cd:33:5c:48:c8:53:5a:c9:5d:93:
27:91:73:69:50:b9:88:47:12:23:af:f3:34:2d:c8:
83:17:e7:fe:fa:4b:1e:00:62:d5:d4:99:7f:8a:ff:
da:c7:3f:b6:97:8c:e1:97:5e:5a:de:10:3e:34:3b:
1c:61:fe:fb:3d:01:74:2b:4a:b8:d9:bb:9b:54:01:
c2:26:13:91:5c:12:19:55:8c:97:7d:0f:8e:4e:af:
45:0d:58:13:44:52:ec:8d:0b:fc:68:ed:35:84:3a:
fe:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6D:7F:E9:C4:56:3E:54:58:6F:68:B7:DA:B8:2E:CD:6C:49:BD:24
X509v3 Authority Key Identifier:
keyid:4C:17:40:CE:F9:74:9D:C2:B0:F5:F8:8C:DF:10:34:DA:81:D6:06:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TBdAzvl0ncKw9fiM3xA02oHWBtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/1a15fa-ace6-464d-8969-e4928180033c/1/TBdAzvl0ncKw9fiM3xA02oHWBtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f9:50:6a:91:c2:ba:09:1a:e2:bd:83:a7:4f:e0:e2:a4:f1:
70:14:6b:11:f9:2c:f2:b4:83:40:77:36:56:40:6a:cd:8a:3a:
42:92:9a:c5:92:e8:97:37:ae:c4:bd:36:6b:1b:44:f9:74:5a:
29:26:9b:2c:c0:99:08:5f:b9:af:96:0e:66:81:3d:49:df:fd:
4c:26:8d:0e:d8:81:80:d4:8a:ba:70:98:3d:37:96:7a:de:4b:
d1:6b:50:df:d0:a4:47:07:e5:0b:18:36:d9:1f:3a:8b:f2:51:
96:d2:0a:77:a7:9c:36:09:d3:7d:1c:55:d8:c0:f0:b6:a2:86:
15:25:3d:11:27:e3:73:23:40:6a:b8:99:50:7f:55:7c:e2:65:
ae:43:b5:84:6e:ac:25:ff:c4:c3:95:80:31:19:92:e5:88:f0:
b2:6a:04:80:1a:35:b3:1d:77:6b:d2:3b:76:42:a0:34:0a:06:
76:e3:d9:1f:a5:14:3c:16:81:99:8e:96:2f:5f:90:09:e0:47:
99:17:a4:ec:1e:94:35:11:c9:93:9e:8a:3b:b2:73:1b:cb:89:
9d:9b:8a:b9:e2:7d:52:74:80:fc:f8:43:2b:e2:d0:60:64:64:
df:4e:aa:ea:9f:13:e8:ec:72:ba:26:57:94:d0:88:e8:f0:c2:
33:85:90:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:05:54 2025 by rpki-client