Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
File: Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft (raw, json)
Hash identifier: U0dKSq2tQj8/CPVDF6nJvqgbZZBvRgx6razTS/QKpP8=
Subject key identifier: 92:33:18:97:AB:00:52:80:02:B5:A9:3D:9D:85:76:B5:49:89:A4:E9
Authority key identifier: 4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
Certificate issuer: /CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Certificate serial: 0194BC72ED34BEFE6CC2D8EDD0F287AA7644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
Manifest number: 02DC
Signing time: Fri 31 Jan 2025 13:00:35 +0000
Manifest this update: Fri 31 Jan 2025 13:00:35 +0000
Manifest next update: Sat 01 Feb 2025 13:00:35 +0000
Files and hashes: 1: Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl (hash: zbkQ7eTWxZ5jVGClX+Fj4AGFObT+Xb1j9IvbHEkQ1nM=)
2: h73609pmEogi1mr5yal1sNR_aIM.roa (hash: xECkne1ZTJO+2XS9UZa/R12Y+brbcjW087xGv2+aPVU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:ed:34:be:fe:6c:c2:d8:ed:d0:f2:87:aa:76:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2d20f2de4d57e1bc645cb6287ff810d0f5a4bf
Validity
Not Before: Jan 31 13:00:35 2025 GMT
Not After : Feb 1 13:00:35 2025 GMT
Subject: CN=92331897ab00528002b5a93d9d8576b54989a4e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6e:fe:35:48:ad:f3:59:e8:12:23:93:d2:13:
01:53:b1:36:cb:05:b4:45:a1:52:60:2f:b1:1b:cc:
49:81:db:c9:01:ca:bb:b0:dd:7c:eb:9b:64:66:a5:
1e:c6:8a:a7:c7:b1:d3:63:d7:94:91:c3:f8:86:30:
93:28:db:3c:26:d9:a6:b2:f1:ee:7f:44:ab:ba:66:
8d:4f:a0:55:a1:f5:62:2b:1a:84:8b:0c:76:d0:0b:
01:01:23:92:0b:56:25:85:69:75:e6:fc:06:fa:4b:
8c:31:f0:4d:1a:4e:d0:0c:12:f3:98:a9:21:91:74:
ad:c7:d7:15:1b:c6:b6:3e:a7:5f:38:f7:1a:64:3a:
e7:81:61:20:b8:59:b5:ca:2b:a1:68:f8:b1:0c:86:
38:dc:6c:4f:a5:bf:0e:97:08:d1:6f:f4:60:a7:31:
af:3a:59:38:f4:d3:6a:4f:9d:37:62:6e:15:3e:5c:
69:86:1a:3a:c3:4b:cd:3f:1e:7e:4b:0b:e7:5a:f2:
a9:1a:54:d4:ba:e3:3c:92:91:c6:ae:f9:83:5b:86:
5f:32:de:95:c7:f2:b0:82:19:02:40:20:39:b0:af:
95:a7:f1:8d:20:ac:3b:24:fe:c1:f9:ae:f9:5e:f0:
96:d2:68:d5:38:fb:d5:06:dc:8b:6a:cb:ca:ce:bd:
f1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:33:18:97:AB:00:52:80:02:B5:A9:3D:9D:85:76:B5:49:89:A4:E9
X509v3 Authority Key Identifier:
keyid:4E:2D:20:F2:DE:4D:57:E1:BC:64:5C:B6:28:7F:F8:10:D0:F5:A4:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ti0g8t5NV-G8ZFy2KH_4END1pL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/ce876c-2c02-4775-8095-78d4a64d22d9/1/Ti0g8t5NV-G8ZFy2KH_4END1pL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:b3:e1:97:18:7c:4d:59:63:b9:11:02:5e:0c:1f:ce:e6:bb:
d9:63:87:5a:56:9f:15:a7:20:ad:fd:2c:c1:80:d3:bd:71:b9:
94:a2:be:c3:6b:8e:44:fa:f6:47:18:b3:c7:3b:81:ee:d3:db:
b0:fc:b6:df:76:f2:a6:80:ed:44:31:70:77:aa:81:dc:1b:e6:
24:fa:0d:b9:f6:2d:c2:5d:cf:50:57:fc:7f:2f:60:a1:b0:3e:
e0:cc:b7:ed:44:6d:4f:1d:0c:77:ae:1b:3f:13:95:f4:13:a6:
1d:a6:9e:87:5a:0f:ce:5a:72:2c:e7:72:f3:6b:c2:3b:f7:92:
df:33:ad:67:f9:15:42:03:2f:9a:bb:01:8f:b7:9d:df:c6:b3:
98:2a:48:ec:49:cd:ad:c6:57:37:5a:62:15:de:c9:d4:cf:c3:
8b:eb:e5:da:e3:e1:56:9f:d2:00:23:5c:f5:1d:b9:7f:cf:66:
f6:21:27:80:f2:1b:27:2c:d2:1b:8a:8e:cd:ac:36:63:aa:08:
70:04:10:a6:1e:f5:72:d1:b3:1a:61:ff:40:6a:ae:1e:04:85:
01:21:dd:a6:b2:0a:3f:53:9d:1f:ba:5b:9d:ca:96:a7:b7:5e:
cd:e3:38:af:8d:09:dc:8a:8c:2b:fc:01:01:43:fa:96:c9:35:
42:65:c0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:12 2025 by rpki-client