Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
File: TqZcftukadCZ12qs19wmP03-xes.mft (raw, json)
Hash identifier: iiR/ADQ/MpTzIR49QVQXIB0ajKvCbLv/eURKKIRAnhw=
Subject key identifier: 03:E4:1F:3D:7A:B7:35:70:EF:DF:EA:E9:D6:0D:56:EB:EC:F8:A7:08
Authority key identifier: 4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
Certificate issuer: /CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Certificate serial: 0194BD1786792525584D59D44F750BFA3EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
Manifest number: 0359
Signing time: Fri 31 Jan 2025 16:00:22 +0000
Manifest this update: Fri 31 Jan 2025 16:00:22 +0000
Manifest next update: Sat 01 Feb 2025 16:00:22 +0000
Files and hashes: 1: 4ib--cnqLp0oi-QRP9CJRqv85Fk.roa (hash: NsYpYhfEaLmslYSk1TQ4VoW4ixy6WRpz9PM1r2Tk7Rg=)
2: Cof8eev8n1uM7JC5vqffwrxP-x0.roa (hash: L3gyFbzSnpA7qzEPac0XApSOePsviNFdneQIfFUzHbM=)
3: Lj6GbRGGR7ikXkkX71u7kE5oc3g.roa (hash: MNDf1tMg+caMWIh4pA1x8FHG09g/BDV+hXI1n2rqjLE=)
4: MtLhAuf2NgYHgf0idQEjB2O5NSs.roa (hash: au7HQECLFDd4UQvAj9wy4z/oD6hBOrQVLU0RNpgJw7c=)
5: TqZcftukadCZ12qs19wmP03-xes.crl (hash: SJyz9IUE80V9BHU9GxZ9Bm0SlETmG5EeMWMcg3NABwk=)
6: VuQJMzsFIREp6bcpzuh2KiinwdM.roa (hash: h5bgZWq9bx9jHDxasYLYkys54j2HtJgByCCvySMD0lM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:86:79:25:25:58:4d:59:d4:4f:75:0b:fa:3e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ea65c7edba469d099d76aacd7dc263f4dfec5eb
Validity
Not Before: Jan 31 16:00:22 2025 GMT
Not After : Feb 1 16:00:22 2025 GMT
Subject: CN=03e41f3d7ab73570efdfeae9d60d56ebecf8a708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:b3:27:03:99:ac:4a:c5:b2:57:30:a4:b7:
6d:a4:a8:d1:59:5e:b1:7b:c4:cd:ba:55:07:79:a7:
91:20:bb:3b:87:03:ad:e8:81:43:fe:f1:c6:5d:34:
7c:54:b9:70:6f:64:35:6b:c5:93:c8:81:18:9e:bf:
36:38:18:1d:12:9b:bb:4f:8a:d4:10:71:3a:11:60:
12:16:aa:26:0b:56:43:13:cf:10:0d:0d:7b:ce:9b:
47:cb:60:b9:64:16:88:b8:8d:22:1b:38:c3:fc:11:
a4:cd:9e:86:58:d3:59:a8:4a:d9:c8:24:cf:5d:4d:
2a:4f:04:9c:9d:38:73:bd:de:3c:04:3d:22:27:5e:
53:64:ac:b8:89:0a:a5:80:33:8a:b8:b6:63:4c:da:
8d:56:55:f5:6e:69:4e:14:5e:91:0e:6a:78:90:a3:
31:1e:d1:1e:60:94:12:a4:3c:73:85:72:35:e4:f2:
b0:81:9a:5e:45:16:12:ed:64:9c:74:31:10:dc:13:
52:88:3c:98:0b:a4:bf:53:51:74:f0:3f:44:06:2a:
ef:52:b7:9a:d3:48:a7:1e:7e:7e:30:4c:bf:0e:7f:
90:9e:f4:de:68:29:78:ae:27:b0:f0:30:be:dd:13:
15:d0:55:1a:0b:b0:19:0c:d1:86:37:ed:23:08:3a:
a8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:E4:1F:3D:7A:B7:35:70:EF:DF:EA:E9:D6:0D:56:EB:EC:F8:A7:08
X509v3 Authority Key Identifier:
keyid:4E:A6:5C:7E:DB:A4:69:D0:99:D7:6A:AC:D7:DC:26:3F:4D:FE:C5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqZcftukadCZ12qs19wmP03-xes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/07f270-c6cc-49cd-ae46-5100a26d274b/1/TqZcftukadCZ12qs19wmP03-xes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6d:1e:4c:67:c8:7c:08:b6:49:4f:9d:13:53:98:03:b4:9b:
c4:82:2f:ba:f0:8c:d7:cf:21:73:0d:d1:98:16:d5:a3:37:64:
2a:0c:9d:02:ce:27:06:4f:af:5a:d4:51:c0:9c:5c:46:ca:14:
11:a4:de:47:0d:29:a0:d4:e0:18:f2:9a:7f:2a:4c:50:cf:7f:
99:6c:6d:d5:a3:81:2b:eb:ab:42:d3:b9:31:00:bd:31:11:38:
65:55:9a:c5:75:25:9a:de:5a:fa:c7:6d:37:db:db:6a:4d:b4:
dc:43:fd:50:7c:83:16:24:e5:a8:c5:1b:c2:26:6e:cc:3c:e5:
07:55:52:d1:78:9f:c2:fe:dd:c6:8d:76:50:7f:33:3d:fb:17:
48:e6:2c:af:80:b5:95:98:e0:b8:42:e4:37:55:55:7e:74:c6:
f2:59:38:c6:4a:83:52:b8:0f:06:f9:00:13:fe:b4:96:7a:92:
e8:6d:1e:d8:9b:77:8b:4c:ab:c1:00:1c:b4:e1:50:f4:bc:5f:
c6:03:5e:0b:ec:a1:2c:a5:a0:a2:55:d9:1e:6e:92:54:c1:65:
7f:53:36:8d:b6:5a:ea:e3:b3:36:1a:ab:6f:f4:22:c5:01:c8:
af:49:ba:0b:68:c0:e0:a1:3f:68:8e:0c:eb:75:80:7d:2c:81:
77:5e:8b:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:42:21 2025 by rpki-client