Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
File: TKRH97Ondvck2LyBQL4xdmYsJNA.mft (raw, json)
Hash identifier: zY+4ZAcTrelMvfgyjfwhkLPiBSLb5N0aEX+89acRvAk=
Subject key identifier: 81:40:3F:7A:78:A2:6C:E4:32:F1:22:D9:D7:97:9C:E7:BA:BB:EA:1B
Authority key identifier: 4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
Certificate issuer: /CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Certificate serial: 0194BCA9BD7B527D927829C5809D8833B840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
Manifest number: 04BC
Signing time: Fri 31 Jan 2025 14:00:28 +0000
Manifest this update: Fri 31 Jan 2025 14:00:28 +0000
Manifest next update: Sat 01 Feb 2025 14:00:28 +0000
Files and hashes: 1: TKRH97Ondvck2LyBQL4xdmYsJNA.crl (hash: j4B1TqnyTxtDbsSpJqHGGRwk7oo9RcvWnVH15wYcTag=)
2: fIoweheWq1JqzVdLBCrrD-x4kK4.roa (hash: yoQba86aaUs4p2P/E/UoxSeIL5NEm/wDobQOVMT4e5A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:bd:7b:52:7d:92:78:29:c5:80:9d:88:33:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca447f7b3a776f724d8bc8140be3176662c24d0
Validity
Not Before: Jan 31 14:00:28 2025 GMT
Not After : Feb 1 14:00:28 2025 GMT
Subject: CN=81403f7a78a26ce432f122d9d7979ce7babbea1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a8:9d:f5:cf:b4:55:2e:b6:ff:b4:69:40:9c:
06:99:ee:4f:e8:e6:1d:e6:67:7b:3a:c9:f1:96:6e:
d4:94:1c:a2:6c:57:ef:78:7a:ec:40:b6:1b:79:32:
25:16:24:55:73:b0:8b:3a:fb:2f:7a:cf:25:5d:b1:
90:c3:e6:59:4e:a3:f9:93:8b:c7:6e:a2:8e:92:ba:
a9:21:b7:7e:6b:9f:69:d3:a6:92:f8:7a:31:0f:a8:
05:91:e2:68:d9:23:e9:ae:5d:d7:33:b2:10:42:7b:
85:e2:06:99:34:a6:02:a4:ac:08:a4:15:1e:43:e7:
8a:5a:04:39:28:52:70:1e:72:b4:e1:95:09:8a:6a:
3e:08:c5:39:e4:88:11:87:57:a7:01:fe:d1:6a:98:
7b:6e:52:96:46:fb:a6:db:6b:18:7c:fd:c1:da:90:
1e:c1:d6:ef:c7:5f:bf:4a:1a:81:96:4c:6a:11:fc:
7a:a4:59:9f:50:3d:39:93:b5:64:48:f3:8a:10:b2:
d8:b1:d4:0b:ed:73:92:82:b2:1f:ec:71:94:6d:b3:
6b:df:49:66:77:ac:43:1c:28:1c:17:8c:6a:8b:02:
62:31:14:57:fe:f2:fe:9a:6f:63:6c:f3:c9:d7:04:
c4:62:3a:98:6e:2d:aa:3d:93:23:de:d9:0f:fd:19:
ce:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:40:3F:7A:78:A2:6C:E4:32:F1:22:D9:D7:97:9C:E7:BA:BB:EA:1B
X509v3 Authority Key Identifier:
keyid:4C:A4:47:F7:B3:A7:76:F7:24:D8:BC:81:40:BE:31:76:66:2C:24:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKRH97Ondvck2LyBQL4xdmYsJNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0f3e0b-26c3-4cf9-8056-29af33bc6b98/1/TKRH97Ondvck2LyBQL4xdmYsJNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:de:c9:93:e2:34:40:c2:30:45:f9:d7:bf:97:63:4d:a5:83:
da:d5:08:5e:79:98:00:de:0b:b5:73:8b:c3:bc:0e:55:a1:87:
db:68:da:ab:e2:7e:be:86:81:df:55:40:56:df:61:cc:4c:45:
09:fb:87:aa:9c:2e:09:66:45:e6:4c:49:eb:14:57:0f:15:88:
7d:60:f0:00:59:4b:1e:c6:45:eb:fc:4d:c0:e3:54:9f:e7:34:
f5:35:81:a3:50:f9:3c:a9:59:a1:31:f0:4f:4e:3f:51:76:fb:
8e:07:cd:7f:41:06:61:5a:7c:b7:c0:2f:6f:88:0d:dd:8d:6a:
94:30:c2:a0:e2:11:a4:d3:a6:f1:e7:25:bc:e5:a6:e8:8d:3f:
3a:e6:c9:01:54:79:c1:d9:0a:40:69:27:5e:9f:4c:51:08:ff:
bf:b8:6b:82:99:9b:e7:e6:69:57:eb:03:ba:8f:fd:48:9a:1b:
4b:f9:74:18:11:96:0b:0b:62:f1:ef:49:f2:a7:4e:71:9a:9f:
93:3c:0c:f9:c0:45:f3:bd:48:d4:f0:62:49:c5:85:d1:b7:f1:
84:44:3f:2c:de:6e:0b:38:06:40:82:66:c0:63:96:25:1b:47:
f0:6c:9f:bc:34:ad:5b:09:65:f5:1e:79:27:9f:16:3a:3f:95:
23:b6:0a:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS8qb17Un2SeCnFgJ2IM7hAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjYTQ0N2Y3YjNhNzc2ZjcyNGQ4YmM4MTQwYmUzMTc2NjYy
YzI0ZDAwHhcNMjUwMTMxMTQwMDI4WhcNMjUwMjAxMTQwMDI4WjAzMTEwLwYDVQQD
Eyg4MTQwM2Y3YTc4YTI2Y2U0MzJmMTIyZDlkNzk3OWNlN2JhYmJlYTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0aid9c+0VS62/7RpQJwGme5P6OYd
5md7Osnxlm7UlByibFfveHrsQLYbeTIlFiRVc7CLOvsves8lXbGQw+ZZTqP5k4vH
bqKOkrqpIbd+a59p06aS+HoxD6gFkeJo2SPprl3XM7IQQnuF4gaZNKYCpKwIpBUe
Q+eKWgQ5KFJwHnK04ZUJimo+CMU55IgRh1enAf7Raph7blKWRvum22sYfP3B2pAe
wdbvx1+/ShqBlkxqEfx6pFmfUD05k7VkSPOKELLYsdQL7XOSgrIf7HGUbbNr30lm
d6xDHCgcF4xqiwJiMRRX/vL+mm9jbPPJ1wTEYjqYbi2qPZMj3tkP/RnONQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFAP3p4omzkMvEi2deXnOe6u+obMB8GA1UdIwQY
MBaAFEykR/ezp3b3JNi8gUC+MXZmLCTQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZjNlMGItMjZjMy00Y2Y5LTgwNTYt
MjlhZjMzYmM2Yjk4LzEvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wZjNlMGItMjZjMy00Y2Y5LTgwNTYtMjlhZjMzYmM2Yjk4
LzEvVEtSSDk3T25kdmNrMkx5QlFMNHhkbVlzSk5BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUN7Jk+I0
QMIwRfnXv5djTaWD2tUIXnmYAN4LtXOLw7wOVaGH22jaq+J+voaB31VAVt9hzExF
CfuHqpwuCWZF5kxJ6xRXDxWIfWDwAFlLHsZF6/xNwONUn+c09TWBo1D5PKlZoTHw
T04/UXb7jgfNf0EGYVp8t8Avb4gN3Y1qlDDCoOIRpNOm8eclvOWm6I0/OubJAVR5
wdkKQGknXp9MUQj/v7hrgpmb5+ZpV+sDuo/9SJobS/l0GBGWCwti8e9J8qdOcZqf
kzwM+cBF871I1PBiScWF0bfxhEQ/LN5uCzgGQIJmwGOWJRtH8GyfvDStWwll9R55
J58WOj+VI7YKuA==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:13 2025 by rpki-client