Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
File: TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft (raw, json)
Hash identifier: 3o6U1gWNdGZctzI9vu2zXg5OpZkslxP0mLt5Eg9KoDc=
Subject key identifier: 52:E1:BB:99:D7:C2:14:BA:7B:71:8F:1C:7A:3C:F3:55:CF:9A:0B:DE
Authority key identifier: 4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
Certificate issuer: /CN=4c51636fde905f8521f411479e81321cdcf49049
Certificate serial: 0194BC04E7A05EA73F91491C21C730E0744C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
Manifest number: 06BA
Signing time: Fri 31 Jan 2025 11:00:25 +0000
Manifest this update: Fri 31 Jan 2025 11:00:25 +0000
Manifest next update: Sat 01 Feb 2025 11:00:25 +0000
Files and hashes: 1: TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl (hash: PS5xembHiV/tVtByLJp6hvV2BUEZZCo3nUSZelLQqxs=)
2: k88eKZ3ggVkstFfz6v9jAollFdM.roa (hash: RToXutf5Qdv2Y+G73kPgZr6gfiGthSFW8G2eqnaoH64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e7:a0:5e:a7:3f:91:49:1c:21:c7:30:e0:74:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c51636fde905f8521f411479e81321cdcf49049
Validity
Not Before: Jan 31 11:00:25 2025 GMT
Not After : Feb 1 11:00:25 2025 GMT
Subject: CN=52e1bb99d7c214ba7b718f1c7a3cf355cf9a0bde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:9b:59:3d:62:84:f8:24:c2:df:be:5e:59:
3a:63:91:e5:80:d7:c3:a9:a4:70:c3:f3:eb:23:eb:
1f:50:21:c9:64:e1:19:0c:f3:a1:ee:90:64:73:76:
e7:c3:08:66:bc:19:5c:14:6f:02:3b:52:4c:be:6c:
24:c6:3e:74:47:eb:24:c1:85:f9:d0:f5:76:bb:ce:
53:e6:bd:31:f0:5f:90:b2:ae:bf:6a:9c:10:12:bf:
14:2b:82:44:a0:be:41:b5:83:7e:b6:c1:c0:3a:40:
3e:ad:a2:01:0a:03:19:28:c5:79:7b:f8:62:57:31:
e2:7f:5d:d5:c6:6b:c4:c4:4e:11:bc:c7:6b:5f:ac:
01:b6:0c:f8:34:02:fa:d7:01:ac:2a:c9:35:10:14:
19:67:88:49:3b:cc:db:fd:2f:8f:58:38:27:66:eb:
1d:1b:47:0c:05:c2:ba:76:50:ed:19:87:4b:65:7c:
a4:52:b3:65:b4:1c:84:43:06:d1:07:3a:ea:1b:6b:
d5:a4:d1:2e:1a:e3:fc:82:88:ce:2a:08:dd:a7:56:
30:3c:8a:b3:7f:54:a3:49:ae:e5:50:ba:14:5c:76:
bf:2f:c5:18:31:fc:66:29:d9:5c:fd:3a:52:83:31:
62:27:b2:80:9d:21:41:24:c5:07:b8:fa:48:e7:8d:
41:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E1:BB:99:D7:C2:14:BA:7B:71:8F:1C:7A:3C:F3:55:CF:9A:0B:DE
X509v3 Authority Key Identifier:
keyid:4C:51:63:6F:DE:90:5F:85:21:F4:11:47:9E:81:32:1C:DC:F4:90:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TFFjb96QX4Uh9BFHnoEyHNz0kEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/8008fe-175b-41bf-b1d6-2ce0eb458788/1/TFFjb96QX4Uh9BFHnoEyHNz0kEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:42:3b:d2:7d:63:38:b8:19:b0:50:b1:61:6a:a0:7a:8a:ae:
31:b4:8b:6f:e0:ee:04:77:70:6c:7f:ea:02:e7:2d:df:74:c8:
06:a8:cd:7b:d5:30:03:6b:36:07:4d:87:3f:c5:b7:f3:00:53:
aa:6a:ea:a8:89:8c:d9:19:a9:7d:b4:cd:90:8c:89:04:97:62:
30:4d:82:15:cb:30:30:fb:8a:42:73:e5:d4:c7:14:92:50:6c:
f5:9b:a0:89:6a:38:d0:3a:09:fc:5c:d5:33:04:9d:ea:c0:85:
04:75:8b:da:31:33:65:1b:79:06:98:73:bc:53:27:9a:53:de:
6f:bd:e7:03:5b:48:ec:35:a4:3f:d7:81:35:65:8d:98:21:47:
c0:04:67:42:c4:56:91:a8:8b:0a:cc:b1:55:5b:53:22:e2:00:
5b:22:0c:9a:1f:d2:e4:6a:c6:6f:db:f2:8c:15:39:c6:38:17:
af:c3:35:df:f5:6e:bc:cd:c1:c4:c9:e0:7f:e6:f7:28:11:43:
4f:c4:91:d8:c2:d0:41:75:a0:bd:00:7e:9f:ab:ff:4c:a8:c7:
58:00:16:82:c7:07:89:67:38:6a:70:30:28:44:1f:7e:6b:9e:
3c:19:b5:2b:56:bd:9f:e0:a2:84:a2:ac:01:b3:82:f0:8d:2f:
e0:a8:62:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:07:41 2025 by rpki-client