
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
File: tl47dPyTSwkhk63tfsoB2h7xhq0.mft (raw, json)
Hash identifier: JlJCUadamiSSlxRYpfqXbe9FXKDA/73W1SHMnQjp4qA=
Subject key identifier: 88:A5:1C:CD:85:DD:6A:8D:C5:C0:F4:47:60:D1:65:6F:6E:D4:6F:C2
Authority key identifier: B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
Certificate issuer: /CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Certificate serial: 0194BCE0903587D913C9EBCA351C6B8508CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 15:00:21 +0000
Manifest this update: Fri 31 Jan 2025 15:00:21 +0000
Manifest next update: Sat 01 Feb 2025 15:00:21 +0000
Files and hashes: 1: e_jdHZ9UPX8fMzUgAyqh1YUrr0g.roa (hash: z1xUWbdUskV5wcwENPFUis/izRGF4jR036hFKOsflNU=)
2: tl47dPyTSwkhk63tfsoB2h7xhq0.crl (hash: ow5yJJf5T1Wh6JVO4ZHnnCpdeOmqYFelKsoVKex4sN0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:90:35:87:d9:13:c9:eb:ca:35:1c:6b:85:08:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b65e3b74fc934b092193aded7eca01da1ef186ad
Validity
Not Before: Jan 31 15:00:21 2025 GMT
Not After : Feb 1 15:00:21 2025 GMT
Subject: CN=88a51ccd85dd6a8dc5c0f44760d1656f6ed46fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ee:2e:c9:71:53:f1:44:5f:10:4e:e3:3c:72:
52:0a:2b:b0:50:3c:55:e2:6a:bd:20:e3:0c:35:5c:
f1:b5:96:e3:57:fc:2c:46:82:b7:36:a4:05:77:f7:
22:90:d7:58:59:f0:28:20:2c:56:11:31:f6:bc:03:
b1:e0:c8:63:3f:79:f4:6f:94:cb:e4:ea:2c:9a:39:
d9:0c:c6:bc:f9:b6:6c:52:9f:9f:a5:37:cf:04:59:
0c:43:21:c5:37:37:0a:a8:fe:0b:88:1c:11:0c:6a:
f3:4c:09:93:22:5f:ef:80:b2:1e:20:f0:1b:80:56:
4a:71:f7:b7:81:19:cf:67:8f:d3:7f:6d:8e:ec:60:
4e:ee:25:4b:1f:5a:e3:3e:ca:db:90:0b:ba:64:fd:
20:e6:72:5c:f6:0f:33:0a:20:d6:ab:4e:6f:09:09:
7b:d7:8a:71:d6:a9:16:66:68:d3:fb:9d:70:3b:cf:
10:26:84:a1:18:f8:f3:e9:80:ae:94:15:6f:84:a5:
18:4b:99:b9:00:9f:63:df:6e:72:9b:27:b7:7f:cf:
4f:01:f6:f3:81:04:c0:f6:1b:83:44:e1:17:42:fd:
f0:3c:8a:d1:df:3f:18:f4:ae:1d:11:aa:82:76:55:
4a:93:ab:6f:62:72:23:e5:7e:b5:ea:98:48:59:12:
19:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A5:1C:CD:85:DD:6A:8D:C5:C0:F4:47:60:D1:65:6F:6E:D4:6F:C2
X509v3 Authority Key Identifier:
keyid:B6:5E:3B:74:FC:93:4B:09:21:93:AD:ED:7E:CA:01:DA:1E:F1:86:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tl47dPyTSwkhk63tfsoB2h7xhq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/f59f8e-f544-4fbe-95c3-cff00e4cd2be/1/tl47dPyTSwkhk63tfsoB2h7xhq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:a2:35:4f:bf:0d:16:3b:da:e3:19:22:58:16:2a:d0:a8:c0:
ba:bf:6b:e6:6e:66:e3:f4:6a:6b:15:be:e3:49:22:50:27:21:
8a:3a:8d:22:8f:90:58:0e:1a:48:86:8d:f5:4d:33:bf:fe:b0:
81:83:93:68:f7:bb:88:d5:be:22:51:44:a8:74:a5:06:53:06:
4b:84:2d:24:2d:75:3d:a2:32:ab:1b:5e:6e:54:20:ce:ee:69:
88:16:cf:2c:c3:f5:09:f4:48:b3:5d:01:af:b2:e2:d4:08:a1:
7f:0f:bf:5d:1a:d0:0d:94:18:da:ac:5f:4b:4f:f2:e7:a9:9a:
65:a5:ac:39:03:64:61:2f:4d:8f:65:70:c8:b9:e1:5a:17:9a:
9c:07:0a:6d:39:d6:30:40:ca:42:31:a7:36:a6:c1:70:4c:0e:
05:8f:46:a9:bc:e3:e1:63:44:d1:9d:d5:2c:f7:68:9c:d4:bb:
d2:9c:ba:b1:d7:e2:ae:19:cb:d6:8f:53:de:4a:a0:2a:4a:5c:
f0:80:8c:d8:df:b6:72:e0:09:88:3f:15:da:01:89:d5:53:6a:
a9:db:a4:25:43:91:cd:a5:b8:47:89:51:a2:f0:e5:1c:f2:28:
e7:94:d9:70:61:09:27:ae:d6:ad:3f:c4:4b:68:6a:b6:77:41:
e4:e6:02:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:51 2025 by rpki-client