Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
File: TkwTiahJ713MuDA3A7iYyR5j0U8.mft (raw, json)
Hash identifier: G8GJc/NNw+THz/viJMc/yyd5HkuRjXhoALAaB5xN0PM=
Subject key identifier: 77:D8:FB:E5:6A:4E:79:5D:BE:15:84:40:CA:9B:33:DC:24:61:61:CE
Authority key identifier: 4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
Certificate issuer: /CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Certificate serial: 0194BCAA2E21CF91557218AA4E55A3C68408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
Manifest number: 0D26
Signing time: Fri 31 Jan 2025 14:00:56 +0000
Manifest this update: Fri 31 Jan 2025 14:00:56 +0000
Manifest next update: Sat 01 Feb 2025 14:00:56 +0000
Files and hashes: 1: TkwTiahJ713MuDA3A7iYyR5j0U8.crl (hash: +5Tq6UhZsXySZvt4JtXnzg8NI92Ns3LWBEVLWRPtuiY=)
2: Y2AwHZ4LjgCyZ7c3VA39uJ1uOJA.roa (hash: jN16HvDKq8wIqjLIVTWw0neRTt/pe6lIdR9PV+gdOvM=)
3: oslVCzjJDktKYJryYSyNdvUnSkk.roa (hash: SorYVglRqEFAzZq8qsgmev36Xx5W3U58FYVpLFp4hYs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:2e:21:cf:91:55:72:18:aa:4e:55:a3:c6:84:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e4c1389a849ef5dccb8303703b898c91e63d14f
Validity
Not Before: Jan 31 14:00:56 2025 GMT
Not After : Feb 1 14:00:56 2025 GMT
Subject: CN=77d8fbe56a4e795dbe158440ca9b33dc246161ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8a:77:3a:0f:cf:29:b1:7d:3e:fd:b7:ac:ac:
f4:6b:f1:71:ed:c6:f1:c9:25:2c:ab:86:c0:94:7d:
e0:a6:6c:88:76:34:26:0b:a1:8e:66:71:66:27:72:
2d:66:25:dd:52:58:f6:fa:1e:83:cb:fc:4b:9a:89:
41:1c:c1:f5:22:2e:7a:81:fe:64:6f:00:4b:9c:10:
8a:a4:c0:ba:17:a6:91:36:fd:6d:df:c8:ba:cd:81:
cd:29:7e:9c:56:a8:a9:d7:63:96:79:05:09:54:bb:
42:c9:86:ad:3d:ba:eb:58:83:80:81:b4:74:75:77:
30:39:3e:db:d9:37:b5:c2:eb:a3:c2:d9:0f:98:b9:
d3:fe:88:fe:d0:6b:aa:43:68:99:4b:c7:9f:37:ac:
04:e6:87:4b:b5:b4:20:3b:f2:58:29:41:f9:7d:8f:
7a:43:8b:9b:87:37:03:81:c4:3f:4e:3d:30:3b:68:
35:72:e5:0d:76:77:88:c7:01:7b:d0:cf:cf:82:f0:
aa:8b:fa:db:1b:00:01:9d:37:03:2d:e7:89:c8:c2:
85:03:96:b9:fe:0d:53:b7:dd:0c:7a:3e:fb:6f:f5:
e7:fe:53:f0:11:bc:39:02:73:2c:3b:75:cf:5f:2b:
3b:ce:8a:62:34:ff:2b:89:63:ee:77:da:39:35:1b:
64:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:D8:FB:E5:6A:4E:79:5D:BE:15:84:40:CA:9B:33:DC:24:61:61:CE
X509v3 Authority Key Identifier:
keyid:4E:4C:13:89:A8:49:EF:5D:CC:B8:30:37:03:B8:98:C9:1E:63:D1:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TkwTiahJ713MuDA3A7iYyR5j0U8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3965b0-fee9-49bf-a54d-a8d838438d8a/1/TkwTiahJ713MuDA3A7iYyR5j0U8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a0:e0:c6:78:c4:24:2b:e4:93:89:62:4b:72:d0:15:f2:f1:
66:a5:bb:02:42:9b:e1:92:ae:99:3b:ba:8f:51:29:78:f3:82:
44:3f:1f:17:f5:85:1b:ae:f7:1c:fd:74:56:39:4a:f5:5a:b8:
89:d8:76:ed:8e:89:9a:b7:f4:67:75:b8:a9:12:20:c8:65:89:
13:54:10:6b:d5:c5:4b:b6:bd:bc:da:9a:60:8e:60:20:b8:a3:
54:0a:fc:5e:9a:83:a3:9f:94:5e:5c:89:3e:81:78:fa:36:96:
91:f3:5e:cb:e8:3f:32:8a:99:e3:5b:ad:0e:05:81:77:dc:a3:
4c:d2:63:30:ce:d4:28:e7:7d:c7:3b:75:db:ad:d9:fe:13:5b:
65:5d:d2:7c:3d:df:37:4a:eb:30:03:aa:34:0d:de:34:e3:db:
67:e3:da:b7:c9:1e:5e:e6:5e:e9:af:eb:12:4c:9c:88:b6:5a:
ef:8e:42:b0:c7:0c:73:6b:c5:92:80:37:bf:29:6b:ae:10:1e:
94:1b:ae:71:6e:7b:a8:f0:91:c6:f0:75:ca:2e:68:96:b3:f2:
60:d2:73:ab:67:d6:19:a1:84:83:a3:d0:05:7c:79:f1:c3:06:
6d:86:55:8c:cf:1c:5d:cc:8d:f7:46:02:08:ce:ca:4b:63:3f:
c0:ef:f6:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:19 2025 by rpki-client