Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
File: TAf2nWArfrt_YzDXFcnsPlq6MPo.mft (raw, json)
Hash identifier: qCW8xT24h3SqQm78HNd7vWk3dOOVgoCf9UGLzhQ9WcI=
Subject key identifier: 86:35:89:A6:B7:51:F9:B8:00:6D:0D:B1:3F:C2:64:E4:26:45:E5:3F
Authority key identifier: 4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
Certificate issuer: /CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Certificate serial: 0194BCE0D7E9147E8158B23861A8B54D5834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
Manifest number: 081A
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: TAf2nWArfrt_YzDXFcnsPlq6MPo.crl (hash: DPUM0DAmZVqtz9hUxRTcMdJ8O0JDs+pdQfki06dswVg=)
2: nXGx5bSqdUW_hrhQiJHYlpD8vR8.roa (hash: BZPTD4TDsLLlN6D+oiM71I+DEGQ39DwwkOK3NvmzOh8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d7:e9:14:7e:81:58:b2:38:61:a8:b5:4d:58:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c07f69d602b7ebb7f6330d715c9ec3e5aba30fa
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=863589a6b751f9b8006d0db13fc264e42645e53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:45:9e:e3:34:ce:4e:2a:33:bb:d8:aa:e0:2a:
b9:9f:ce:e0:46:01:d8:bf:89:b4:b7:59:20:32:b1:
55:8c:ab:e8:3b:9b:56:92:80:a8:cd:86:30:4b:a5:
0f:5d:b8:18:6f:9d:90:c0:49:75:e2:02:18:0b:db:
86:ec:fe:36:62:f3:9a:24:e7:dd:36:a5:29:48:be:
71:20:f2:1e:65:3d:0f:36:5a:f8:f9:39:5a:da:c4:
6c:b7:4c:ad:06:d6:6c:63:4f:fd:5d:36:3a:ef:39:
07:9d:d4:00:db:4d:d7:d4:8d:34:db:89:bc:81:7a:
d0:4b:69:01:b1:a6:8f:54:8d:49:d8:21:e9:39:a7:
fd:01:7a:fa:3a:8b:78:b9:6e:5d:fb:ed:13:e8:01:
48:eb:f4:8c:b0:91:0c:e1:c2:f7:81:52:44:2b:89:
1d:a7:ee:63:eb:a4:05:38:3b:87:e7:4c:f5:e1:c8:
9e:6a:75:70:9c:65:92:22:83:e6:f3:f5:8a:4f:70:
13:db:4f:6a:34:9f:99:75:c1:94:fc:f7:2d:b0:7d:
83:ef:48:5a:c0:2b:01:84:91:85:04:17:b6:2c:47:
66:62:38:7a:19:2a:07:b1:d7:3c:29:22:f8:4e:82:
ff:a2:78:d4:f3:4b:ce:ae:8e:5d:09:ce:e4:db:94:
dc:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:35:89:A6:B7:51:F9:B8:00:6D:0D:B1:3F:C2:64:E4:26:45:E5:3F
X509v3 Authority Key Identifier:
keyid:4C:07:F6:9D:60:2B:7E:BB:7F:63:30:D7:15:C9:EC:3E:5A:BA:30:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TAf2nWArfrt_YzDXFcnsPlq6MPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/ee71c6-1bae-4858-af3a-bc289dc17d20/1/TAf2nWArfrt_YzDXFcnsPlq6MPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:87:5b:b3:39:85:09:b8:2c:ac:e4:67:a4:1d:50:71:64:19:
01:2a:6c:38:46:79:44:69:23:d8:80:4f:6b:ee:6a:d5:7b:9e:
de:77:24:bd:08:47:02:69:6b:14:65:d1:0c:9f:44:aa:d4:f7:
73:30:83:54:46:45:2c:ca:d6:11:45:19:44:6a:0c:8f:7d:c0:
70:8f:86:b2:37:1a:6b:98:98:69:cb:31:5e:a9:1a:0c:ed:d0:
dc:7e:c8:84:1f:3c:96:07:2b:66:56:d6:8a:4e:c8:b0:ea:c6:
35:d7:e5:82:89:68:67:4f:37:d4:24:79:30:33:15:a8:91:26:
2e:50:49:40:94:fc:82:9c:92:f5:a2:57:66:98:be:ef:ba:77:
50:f9:f7:bb:7e:bc:e6:23:23:b8:b4:aa:7b:23:27:6c:de:1a:
2b:30:36:c8:01:63:5c:c1:44:f7:b3:09:fe:3f:ea:5a:7f:15:
23:7e:ba:05:cb:ec:50:02:bb:45:a9:82:94:ce:f2:8e:3d:99:
b5:18:0c:af:34:98:e0:02:59:fa:5d:a8:f8:c0:32:89:25:8d:
9d:4d:08:00:0b:a6:3e:8a:0c:6e:7e:98:d6:79:7c:0f:0d:7c:
59:d5:ca:6c:6d:a4:9e:55:3e:d8:c4:1b:a9:76:57:3b:df:ea:
96:1c:70:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:20 2025 by rpki-client