Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
File: TkJsh9-8xVLceQ_sPtHN56j4huk.mft (raw, json)
Hash identifier: tdw6hrtnqNR9E2R9H6ETuh0Y+1ZYep4hTrXvQXOh310=
Subject key identifier: DD:F1:03:E2:9E:A8:A4:1A:5C:F6:C9:6C:AA:98:52:F4:D8:86:38:62
Authority key identifier: 4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
Certificate issuer: /CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Certificate serial: 0194BBCDDE2E2D7F4D202D5F6E8A3C4429CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
Manifest number: 0768
Signing time: Fri 31 Jan 2025 10:00:18 +0000
Manifest this update: Fri 31 Jan 2025 10:00:18 +0000
Manifest next update: Sat 01 Feb 2025 10:00:18 +0000
Files and hashes: 1: TkJsh9-8xVLceQ_sPtHN56j4huk.crl (hash: t+1nzybzCZBwvjU4qrPg9/8o0UbEcBRBvndHY/pRgb0=)
2: o1pkGMrhjFIHajUuas6hn3OkprM.roa (hash: vhDUewSi85hdhWxPSoEhr0a9lvOVAXD09OTRvqe5guU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:de:2e:2d:7f:4d:20:2d:5f:6e:8a:3c:44:29:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e426c87dfbcc552dc790fec3ed1cde7a8f886e9
Validity
Not Before: Jan 31 10:00:18 2025 GMT
Not After : Feb 1 10:00:18 2025 GMT
Subject: CN=ddf103e29ea8a41a5cf6c96caa9852f4d8863862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:61:89:0f:fb:cd:62:d5:c9:d9:08:5e:94:
99:4d:a2:ce:a1:4b:2b:4a:dc:99:83:f2:b4:c4:0f:
dd:85:5a:3b:eb:71:ca:3f:7f:81:98:d8:11:e7:70:
98:6e:08:af:46:68:b5:0f:7e:e8:ae:1b:3d:3c:1e:
7b:bc:4f:67:a7:3a:76:a5:70:4c:fb:2d:96:5a:c3:
c0:42:ba:98:62:51:3a:a0:3e:f3:d2:1b:47:67:c6:
f5:08:9a:ec:58:f1:00:2c:ef:3b:2c:f9:b2:73:a9:
23:65:8e:8d:7a:16:4a:d3:57:13:95:1f:01:f2:2b:
2b:f5:6c:52:25:cd:32:58:fd:ca:6d:0f:59:d0:c6:
56:75:fd:59:c5:77:fe:9c:e1:65:1a:ad:a5:42:5d:
8e:0b:68:97:ea:41:e3:92:6e:32:fd:fb:04:e1:e4:
00:98:33:a9:f4:88:dd:eb:aa:6c:b5:3e:e9:a8:ac:
ed:df:4a:6f:6b:81:9d:13:44:1a:8e:a2:be:58:93:
31:6b:50:74:0b:43:40:50:5a:37:15:0e:a8:30:12:
70:c6:cf:9b:d2:fe:8c:ed:94:a8:80:78:19:70:b0:
47:eb:89:10:b3:bf:2d:91:f0:c7:95:d4:86:ba:1c:
39:ec:ce:5a:6e:69:03:92:23:d4:e4:58:35:2e:e4:
4d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F1:03:E2:9E:A8:A4:1A:5C:F6:C9:6C:AA:98:52:F4:D8:86:38:62
X509v3 Authority Key Identifier:
keyid:4E:42:6C:87:DF:BC:C5:52:DC:79:0F:EC:3E:D1:CD:E7:A8:F8:86:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkJsh9-8xVLceQ_sPtHN56j4huk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e5bdc7-eb06-4626-84d7-13da74cd35a4/1/TkJsh9-8xVLceQ_sPtHN56j4huk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:57:a8:19:ba:9e:98:9a:2b:e4:d6:ad:27:c4:80:a7:49:40:
6a:18:d5:e8:bd:49:24:fb:61:31:1a:2c:ca:6f:d9:2f:a7:47:
da:5a:40:79:63:6e:6f:b5:61:0c:26:00:3f:79:3e:8c:7f:2a:
fb:09:bc:57:1e:0a:58:20:b4:85:40:32:fa:63:ff:1f:14:aa:
90:7f:bf:39:0e:23:83:10:94:97:0f:33:65:8a:2a:f6:c6:9b:
09:fd:df:16:b5:d0:b3:df:9a:ef:1b:1c:15:37:62:39:7a:ff:
38:04:66:5f:d3:55:ae:b6:0d:a6:a1:98:15:67:f9:f1:ab:6f:
59:aa:dd:13:37:80:5b:6d:1f:d9:c6:79:d4:b2:bb:76:99:5e:
74:5b:a2:c8:3a:29:49:1f:22:1f:95:30:81:76:21:cd:a0:e3:
e3:74:f8:2e:b0:27:3a:60:32:d0:53:64:98:09:26:47:29:a4:
42:89:e2:1c:2b:56:5d:0f:7d:81:41:ae:92:67:d5:83:12:00:
ed:0c:59:ba:f8:0e:6a:3d:52:a0:35:69:bd:9b:d2:b1:1f:19:
7f:29:f0:54:8e:ef:7d:43:ae:b1:ba:3e:4b:97:14:02:15:33:
1f:e5:e0:7a:59:4e:e7:28:85:73:9e:86:0e:ea:8b:93:03:7f:
e8:a6:1f:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS7zd4uLX9NIC1fboo8RCnNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNDI2Yzg3ZGZiY2M1NTJkYzc5MGZlYzNlZDFjZGU3YThm
ODg2ZTkwHhcNMjUwMTMxMTAwMDE4WhcNMjUwMjAxMTAwMDE4WjAzMTEwLwYDVQQD
EyhkZGYxMDNlMjllYThhNDFhNWNmNmM5NmNhYTk4NTJmNGQ4ODYzODYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG9hiQ/7zWLVydkIXpSZTaLOoUsr
StyZg/K0xA/dhVo763HKP3+BmNgR53CYbgivRmi1D37orhs9PB57vE9npzp2pXBM
+y2WWsPAQrqYYlE6oD7z0htHZ8b1CJrsWPEALO87LPmyc6kjZY6NehZK01cTlR8B
8isr9WxSJc0yWP3KbQ9Z0MZWdf1ZxXf+nOFlGq2lQl2OC2iX6kHjkm4y/fsE4eQA
mDOp9Ijd66pstT7pqKzt30pva4GdE0QajqK+WJMxa1B0C0NAUFo3FQ6oMBJwxs+b
0v6M7ZSogHgZcLBH64kQs78tkfDHldSGuhw57M5abmkDkiPU5Fg1LuRNeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3xA+KeqKQaXPbJbKqYUvTYhjhiMB8GA1UdIwQY
MBaAFE5CbIffvMVS3HkP7D7Rzeeo+IbpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9lNWJkYzctZWIwNi00NjI2LTg0ZDct
MTNkYTc0Y2QzNWE0LzEvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9lNWJkYzctZWIwNi00NjI2LTg0ZDctMTNkYTc0Y2QzNWE0
LzEvVGtKc2g5LTh4VkxjZVFfc1B0SE41Nmo0aHVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYFeoGbqe
mJor5NatJ8SAp0lAahjV6L1JJPthMRosym/ZL6dH2lpAeWNub7VhDCYAP3k+jH8q
+wm8Vx4KWCC0hUAy+mP/HxSqkH+/OQ4jgxCUlw8zZYoq9sabCf3fFrXQs9+a7xsc
FTdiOXr/OARmX9NVrrYNpqGYFWf58atvWardEzeAW20f2cZ51LK7dpledFuiyDop
SR8iH5UwgXYhzaDj43T4LrAnOmAy0FNkmAkmRymkQoniHCtWXQ99gUGukmfVgxIA
7QxZuvgOaj1SoDVpvZvSsR8ZfynwVI7vfUOusbo+S5cUAhUzH+XgellO5yiFc56G
DuqLkwN/6KYf7A==
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:45:06 2025 by rpki-client