
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
File: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft (raw, json)
Hash identifier: NVB7ydDNLujLFNxiktrvZ3TionHc9TwDjAq4SSAphro=
Subject key identifier: FE:13:D2:96:25:BF:39:C3:A9:01:F3:98:12:93:1A:3D:2B:9A:46:B7
Authority key identifier: 4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
Certificate issuer: /CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Certificate serial: 0194BC05214B05EEF13B9D2F6217006DAE06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
Manifest number: 1405
Signing time: Fri 31 Jan 2025 11:00:40 +0000
Manifest this update: Fri 31 Jan 2025 11:00:40 +0000
Manifest next update: Sat 01 Feb 2025 11:00:40 +0000
Files and hashes: 1: PHU8bveJ4V86SqIQTMnWW43DqBE.roa (hash: 3OhBnf8f8HGM5ArwPPNt9UU72cQZdAdKTbSA4Z11k2Y=)
2: TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl (hash: hRQi2aWLW46TNAxM5gtQXChxPkYTUDJn7u2akAvrFHk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:21:4b:05:ee:f1:3b:9d:2f:62:17:00:6d:ae:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c9d6c55be1be8a84ad2dfd5a7ffa5848f54d409
Validity
Not Before: Jan 31 11:00:40 2025 GMT
Not After : Feb 1 11:00:40 2025 GMT
Subject: CN=fe13d29625bf39c3a901f39812931a3d2b9a46b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:66:91:9c:4e:d8:72:f8:8d:84:d8:6c:e1:06:
a4:1f:69:47:3e:8a:d1:6b:02:51:96:f5:fe:ad:ff:
ac:27:34:d8:3a:d8:16:e8:65:80:2a:27:31:b4:d6:
a3:8b:d9:68:6a:52:eb:de:9f:35:5d:b7:8e:70:bf:
a0:69:e7:9e:ee:d8:ec:39:17:1f:29:f2:a6:63:e5:
98:df:d4:fb:69:d1:fb:de:7a:2e:87:cf:61:26:36:
74:0a:05:99:50:e0:d8:8a:68:8a:98:da:fa:29:12:
b7:cd:64:0c:7d:d6:01:af:8c:37:95:cd:4b:94:b0:
00:ad:2d:43:05:09:ab:34:b8:2b:7a:c0:48:25:81:
38:49:bf:b4:11:62:e3:25:32:39:f4:3c:79:70:37:
ab:09:43:dd:e1:ee:1d:b3:b4:e9:dc:da:d9:24:6a:
53:8c:74:8f:71:4d:11:ce:c2:7d:61:c0:35:50:62:
33:f2:6a:4d:62:4e:16:4b:88:89:de:cb:5d:bc:25:
b9:ce:de:2a:7c:aa:a0:12:2d:b6:24:47:00:42:6f:
1d:17:01:b1:7c:79:c2:3d:a3:03:ff:39:68:d7:c3:
93:e8:9e:c1:e8:de:a9:24:91:52:5f:70:42:38:48:
04:ac:04:8e:84:c2:7d:62:b4:57:f1:e1:69:24:9d:
1e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:13:D2:96:25:BF:39:C3:A9:01:F3:98:12:93:1A:3D:2B:9A:46:B7
X509v3 Authority Key Identifier:
keyid:4C:9D:6C:55:BE:1B:E8:A8:4A:D2:DF:D5:A7:FF:A5:84:8F:54:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3e775d-b117-40dd-ae6a-2d502e956c04/1/TJ1sVb4b6KhK0t_Vp_-lhI9U1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:bc:de:96:04:b2:09:da:24:75:03:a1:2c:33:08:d5:06:87:
0e:51:9c:80:eb:ff:6f:dd:6f:46:f8:05:d0:c0:78:9c:df:84:
e0:9d:c6:65:96:4b:4d:fd:9a:3d:98:c9:85:38:cb:ad:57:9e:
28:28:33:31:7b:49:ef:bf:ab:18:7a:58:03:76:cc:cf:59:34:
b7:76:7f:5c:b3:7f:c1:9f:ba:06:dc:06:a0:39:a7:2f:66:b5:
2b:64:c7:fc:6b:71:24:44:19:86:3b:25:ea:2e:7d:2a:f9:99:
6e:1f:95:49:4b:bf:b3:d0:6d:40:27:c1:99:49:0c:18:03:3e:
ae:99:13:1c:93:81:37:bc:b8:14:da:3b:d2:0f:7a:f4:57:19:
d9:5a:08:91:ff:e3:db:91:28:9b:a1:ca:df:9d:d0:76:b5:21:
b1:61:77:3a:69:8e:5c:70:be:1d:5e:ec:4d:e1:a9:01:00:6c:
67:e3:2a:15:82:e6:48:fd:d2:b3:74:bc:59:10:03:97:b3:d8:
77:75:a3:f4:58:14:86:ff:b4:ed:1f:71:b6:b8:69:00:b5:be:
05:de:36:a0:25:02:70:d8:99:27:1e:07:1c:4e:c3:fe:bf:17:
6a:f4:e9:01:f2:18:ec:c9:87:31:23:d0:c0:f1:35:36:0c:4a:
ba:12:9a:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:57:53 2025 by rpki-client