Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.mft
File: TRYkCJewEwVoHJQl_lI_WPqydBU.mft (raw, json)
Hash identifier: JaWYGAr5kgMEJDiog+wrQcMrw039LKQdGfE/iN6lrW0=
Subject key identifier: 8C:97:A1:19:01:00:1E:9F:3B:D9:6A:4C:72:85:93:D6:CC:96:9D:EE
Authority key identifier: 4D:16:24:08:97:B0:13:05:68:1C:94:25:FE:52:3F:58:FA:B2:74:15
Certificate issuer: /CN=4d16240897b01305681c9425fe523f58fab27415
Certificate serial: 0194BC3BE3B181A20DC5F4515786BE2742B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TRYkCJewEwVoHJQl_lI_WPqydBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: L587eFkH5wYc14IkuF8E7of-x9o.roa (hash: qZjZeJL5jZ5Dikm84ADOgn1QShjJOm5n3wbg8yoD9PY=)
2: TRYkCJewEwVoHJQl_lI_WPqydBU.crl (hash: Od/rW9r+zU5Gg5IP8z2FmptdllIlc6KMand9xzPBK9A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e3:b1:81:a2:0d:c5:f4:51:57:86:be:27:42:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d16240897b01305681c9425fe523f58fab27415
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=8c97a11901001e9f3bd96a4c728593d6cc969dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:3f:12:82:63:f9:c4:42:19:91:b1:44:bd:5e:
46:af:32:13:c1:33:23:81:d1:81:a0:3e:d9:c2:6d:
0f:3a:1a:58:f6:e2:a5:65:c3:3e:84:8c:59:82:35:
d6:e7:c0:93:ea:9a:1b:c9:6d:0d:f5:d0:c4:6b:c3:
8d:9d:17:cc:e9:21:ec:1d:66:5b:f0:e4:78:25:f5:
ee:90:37:fc:1b:ee:67:6d:cb:49:5c:78:0d:b7:a1:
5c:79:7d:95:2f:1b:32:bc:1e:43:0b:49:e3:72:fa:
42:97:7c:48:b1:fa:c8:c2:23:44:ca:07:7c:1b:db:
af:93:64:35:1f:a1:d3:10:a6:34:1b:9b:e2:9c:95:
19:48:78:1e:54:d2:27:2f:dc:60:dd:8b:a5:ab:03:
46:c9:f9:9b:c3:e5:6a:6c:af:78:70:6f:0f:b5:7f:
c4:c1:17:d2:79:5b:18:ef:5b:be:fe:39:c2:cc:28:
8f:9c:85:96:b2:a7:b0:06:d1:27:e1:3f:68:41:bb:
eb:f6:64:42:70:5d:ad:d2:85:b4:8f:e9:fc:9b:cc:
85:fd:9e:5f:4e:ae:5b:e6:62:cb:42:4f:f2:4b:fd:
d3:58:d7:01:06:c1:42:f5:4a:35:5b:d8:1b:ce:05:
f6:b7:9f:99:2e:91:f0:ed:be:66:bf:6c:74:cd:87:
83:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:97:A1:19:01:00:1E:9F:3B:D9:6A:4C:72:85:93:D6:CC:96:9D:EE
X509v3 Authority Key Identifier:
keyid:4D:16:24:08:97:B0:13:05:68:1C:94:25:FE:52:3F:58:FA:B2:74:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TRYkCJewEwVoHJQl_lI_WPqydBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/fc481a-ab01-4f82-9e6e-eb02f3d3f40c/1/TRYkCJewEwVoHJQl_lI_WPqydBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:2d:4c:58:aa:a6:db:d9:ec:70:68:c8:72:1d:22:c7:12:bb:
6c:e3:38:13:72:e0:cf:ae:b7:64:de:ff:95:de:dc:1d:30:03:
4f:f0:45:71:7f:5d:bb:50:da:cb:be:01:82:f7:dc:c2:d8:7a:
3d:0c:5b:06:f4:e5:d6:89:11:cf:50:da:ba:d3:96:05:0a:90:
f2:eb:08:1f:56:4a:d7:27:c7:64:c4:ee:4d:6c:3b:30:66:6b:
2b:9d:2c:33:22:91:e0:65:be:7e:f6:18:d1:9d:cc:27:91:5b:
3e:a4:af:3c:62:e4:87:35:a2:0d:74:7e:a5:cf:ef:e0:ec:50:
62:87:b6:56:15:71:99:61:fa:8c:08:70:e8:c2:9d:10:6d:b1:
1d:c7:85:6e:37:f3:6d:88:66:d9:73:2f:eb:a1:26:24:07:17:
e7:e5:6e:49:5e:cd:72:cc:30:04:06:f8:4d:f4:b7:92:5c:df:
43:45:c4:4e:59:f8:f5:57:c6:2f:d7:55:4b:6e:e4:0a:2f:dd:
69:cc:e2:d3:ca:e6:85:60:a9:96:7e:16:10:8f:bb:f8:f7:fa:
20:8e:9a:8e:da:40:f9:9a:2c:df:ca:4f:c3:33:6d:c1:69:dd:
de:7d:3c:a8:14:08:28:a2:73:17:ce:9c:d6:f1:aa:b2:e4:91:
34:79:8b:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:36:52 2025 by rpki-client