Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
File: e4f2uRGfqdzT4S5-a_twbf-XiCU.mft (raw, json)
Hash identifier: 0h+blql0zHSGzx//a+MbDKFvd1eLodVX4JthzlYTxw8=
Subject key identifier: 22:00:ED:14:7B:A7:29:0A:3A:06:F6:6B:C4:AC:1B:84:B6:35:D3:7E
Authority key identifier: 7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
Certificate issuer: /CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Certificate serial: 0194BCA980C2F0019F9AAD29090B6213CC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
Manifest number: 098D
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: e4f2uRGfqdzT4S5-a_twbf-XiCU.crl (hash: 64eamQ/5rCNGhmsrv36pLaloLA3h2kpPy1EyP8Y72Ew=)
2: v_CowcE5Ck3oJvuqy3X8AsMCrpA.roa (hash: R72iTRb1FtOGatFwyC/tAu8uMgwI2562hZtdzD4n6xY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:80:c2:f0:01:9f:9a:ad:29:09:0b:62:13:cc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b87f6b9119fa9dcd3e12e7e6bfb706dff978825
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=2200ed147ba7290a3a06f66bc4ac1b84b635d37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2f:0a:48:af:ff:35:5b:02:20:5a:1d:91:95:
68:5e:29:0b:2c:de:f7:be:48:bf:31:c4:84:7b:ac:
0a:f8:59:12:fa:e3:b8:df:2e:41:a2:91:99:75:97:
a7:7e:fb:1e:73:41:06:0a:4d:a4:6f:53:87:8a:cb:
2e:5c:62:13:93:ae:6f:45:f8:81:56:59:30:46:d1:
a8:42:04:80:2a:e0:50:12:89:77:6d:14:bf:54:c1:
9c:18:92:85:e5:ea:11:a1:46:bf:99:c0:34:59:59:
a9:90:5f:2a:4a:75:1c:48:40:fc:e3:6a:09:48:91:
16:76:e6:51:6d:1f:85:ab:fe:e1:fe:73:9b:9c:88:
34:bf:e2:a4:36:ef:36:12:c5:ec:c2:3c:b8:4c:b2:
0a:80:02:3f:8b:ef:d3:5f:db:56:d6:e3:30:85:65:
fc:25:75:d1:90:10:0f:9e:1b:65:13:6d:d8:35:a6:
ee:11:e0:a1:55:59:ba:a5:78:d2:30:d0:56:d4:57:
d3:c6:69:40:bc:ee:7b:24:9e:fd:25:6e:03:c2:bb:
0a:99:0d:ab:2e:cc:8a:89:c2:e9:12:eb:a7:f9:50:
d5:ba:90:1d:20:5a:08:57:a8:d4:4a:c6:74:4f:61:
be:84:ef:47:9a:23:72:ec:aa:37:21:0b:8d:9e:57:
4d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:00:ED:14:7B:A7:29:0A:3A:06:F6:6B:C4:AC:1B:84:B6:35:D3:7E
X509v3 Authority Key Identifier:
keyid:7B:87:F6:B9:11:9F:A9:DC:D3:E1:2E:7E:6B:FB:70:6D:FF:97:88:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4f2uRGfqdzT4S5-a_twbf-XiCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3f3ab1-5959-45a8-bc0f-d78514e9e812/1/e4f2uRGfqdzT4S5-a_twbf-XiCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:46:17:89:4e:29:d2:9e:62:a7:7f:35:65:a5:33:ad:ae:2f:
68:77:ae:c1:78:95:58:77:48:71:0d:22:1e:a5:9d:02:0e:14:
4e:7e:7f:b8:ac:d0:b1:8a:e5:e1:f7:02:6c:8b:82:9c:92:f6:
09:13:fc:47:e4:82:e5:d5:19:a9:13:9a:ba:63:d8:72:04:91:
83:a7:20:69:09:7f:bf:5d:f7:d6:61:ef:8c:5b:9e:b8:89:b6:
c6:d4:13:02:ba:aa:bb:53:0c:d2:4d:a0:3f:94:d9:ab:74:48:
ef:ad:0e:93:32:21:a8:a4:1c:2c:76:c1:8d:98:9c:98:91:48:
ca:1e:52:be:77:dc:61:04:12:ec:59:e9:85:4e:b7:a4:16:8c:
4d:85:e6:8c:f7:08:c7:89:e1:9a:f6:37:54:28:46:33:92:a9:
3a:0b:7b:f9:f2:f6:bc:6f:43:7d:05:18:ce:5f:d0:31:e4:62:
f7:88:16:08:86:84:97:ac:ca:f0:29:a6:ba:76:db:c2:40:9b:
b7:d9:b8:1d:70:eb:c6:8f:3b:ad:c4:64:49:a8:b0:4d:3f:eb:
a9:63:94:f5:e4:02:ae:bf:29:67:ab:51:f3:17:fc:9b:ef:62:
6d:1b:48:e8:fa:68:bc:6d:e9:42:44:77:ec:d7:40:cb:8d:80:
6e:f7:a5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:38:46 2025 by rpki-client