Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
File: TaTWGZrsgo9pieLoTOwXdlusXNU.mft (raw, json)
Hash identifier: Ps8yZw909BymOJ5DtEx0KBsr9xSwon7FMKVWJ8SKZv4=
Subject key identifier: 1A:3E:DB:45:1E:15:1D:F3:A5:FC:0F:23:07:AA:46:D3:E3:E2:F6:15
Authority key identifier: 4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
Certificate issuer: /CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Certificate serial: 0194BD856E72651B125A31E2D23F6D899F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: TaTWGZrsgo9pieLoTOwXdlusXNU.crl (hash: SVESM1zQ8LKWS9oQyAwQ7qMmI4JCZ4/YwzRn8CeVeGQ=)
2: ZQqEb08QuUWoZFZOpu-excXm_CY.roa (hash: hJ9flOiNPatvPuhfEPx3oEiBNiwTwqQHPFOt9VD9IMA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6e:72:65:1b:12:5a:31:e2:d2:3f:6d:89:9f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da4d6199aec828f6989e2e84cec17765bac5cd5
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=1a3edb451e151df3a5fc0f2307aa46d3e3e2f615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:04:80:d9:17:d7:61:ef:97:18:28:f2:d2:ee:
28:5e:34:c7:ac:1f:98:bd:f9:ad:f0:61:5e:34:55:
c7:17:ec:56:af:ba:4d:5b:6e:a5:cc:52:5f:b7:95:
13:89:05:1e:8d:60:e8:a3:5a:ac:51:dd:8e:d3:a3:
02:48:1f:84:85:7f:4f:dd:df:bc:1a:96:b6:7e:ad:
9e:b7:eb:be:81:f5:73:d1:ea:b4:93:81:19:ac:8e:
d2:7a:e7:7e:8b:6b:ca:32:17:46:6b:81:fe:e9:ad:
84:61:69:01:c5:c0:f8:40:af:12:77:23:2d:f9:9a:
a6:ee:20:76:5c:dc:84:6e:bb:e8:a9:4b:12:f9:4d:
a5:fb:0a:95:67:b4:b7:d2:0b:5a:69:e9:38:97:65:
00:5e:ff:59:08:96:49:78:91:25:c5:bd:88:d9:2a:
d9:a8:5e:f6:3b:f7:0d:de:2c:bf:32:af:2b:76:c1:
ea:5a:27:06:25:08:68:cd:1a:37:e5:89:4e:83:76:
91:39:d3:5e:51:5e:da:47:75:84:d9:bd:d9:90:82:
38:67:92:f6:57:17:bc:5f:8b:c8:3e:50:8e:a5:34:
d8:f2:17:38:82:9d:cc:55:c5:3c:9a:dc:c2:fb:54:
17:14:4a:91:f3:ad:29:9a:11:10:25:a0:db:19:09:
27:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3E:DB:45:1E:15:1D:F3:A5:FC:0F:23:07:AA:46:D3:E3:E2:F6:15
X509v3 Authority Key Identifier:
keyid:4D:A4:D6:19:9A:EC:82:8F:69:89:E2:E8:4C:EC:17:76:5B:AC:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaTWGZrsgo9pieLoTOwXdlusXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/2c8482-5331-4e57-9974-40837d48473d/1/TaTWGZrsgo9pieLoTOwXdlusXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:c2:5a:7d:46:29:93:a9:6b:88:e9:fe:ab:9c:fb:47:ed:bb:
6b:81:c2:61:5e:d2:8c:4b:18:df:4e:bb:ab:7c:6f:ee:75:15:
f5:19:e6:fd:0c:7b:06:df:18:45:50:8e:40:d6:0b:e3:98:c9:
e9:e8:b8:d1:e7:fe:78:2c:b2:f1:29:2c:f4:a5:d2:7c:de:8f:
39:32:06:f0:14:51:a3:04:ec:d3:9a:8a:f2:b3:81:6c:9f:6d:
fd:dd:11:03:dd:ca:96:99:11:1f:74:bd:32:2c:b7:b8:33:ea:
3b:c3:0e:8c:b3:59:37:19:f7:bf:fe:4c:54:4c:d0:bb:c2:5c:
e6:b7:60:e5:c8:32:84:55:c7:a9:06:e5:8a:15:42:d8:fc:81:
06:9d:8f:c4:93:a3:45:af:5d:a1:b6:e4:39:dd:21:4e:20:03:
58:c2:56:a9:62:b6:a5:eb:e4:df:c6:b0:e4:69:95:83:61:1f:
1d:57:cc:15:3c:9c:61:f9:ea:87:08:04:7b:e9:dd:b4:0b:a4:
7d:ab:7c:a7:86:9a:78:0b:f6:b1:71:1c:ea:11:de:d9:83:40:
67:a2:1c:5b:70:1f:9a:57:92:c9:43:f6:32:f8:08:97:7d:16:
46:35:9a:32:93:21:1b:f4:d7:23:09:00:8e:a5:d8:5d:e4:c7:
c9:14:82:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:13:08 2025 by rpki-client