Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
File: TYqYddfQ0SvEenC37emjymTYLTI.mft (raw, json)
Hash identifier: LDorNO7ErFiRkHU9aVDTbozBWM4lrWX7sMRi1BWZC2c=
Subject key identifier: C9:21:C9:64:90:9C:AC:24:B1:FD:E7:FE:FE:05:1D:F0:17:3B:B3:88
Authority key identifier: 4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
Certificate issuer: /CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Certificate serial: 0194BD856D79CA6A7E196457C988C8B20659
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
Manifest number: 0AA4
Signing time: Fri 31 Jan 2025 18:00:25 +0000
Manifest this update: Fri 31 Jan 2025 18:00:25 +0000
Manifest next update: Sat 01 Feb 2025 18:00:25 +0000
Files and hashes: 1: Qkkirv8lLJuTeoHE2XBshzOic18.roa (hash: JXSnxQgZnKW02ndUqgQ4ahHIPbZr+aCryUo1lSsSpVM=)
2: TYqYddfQ0SvEenC37emjymTYLTI.crl (hash: vwgsvBLC96ZDD4hgPzH1h5JEzTNNmLhDgTsN1ITchLM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6d:79:ca:6a:7e:19:64:57:c9:88:c8:b2:06:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d8a9875d7d0d12bc47a70b7ede9a3ca64d82d32
Validity
Not Before: Jan 31 18:00:25 2025 GMT
Not After : Feb 1 18:00:25 2025 GMT
Subject: CN=c921c964909cac24b1fde7fefe051df0173bb388
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ab:bf:21:20:67:90:3f:e6:22:64:b1:51:45:
31:28:cb:ec:4d:e7:a7:b7:66:eb:bf:19:e3:ab:03:
b5:4c:e4:91:3a:67:5c:df:6f:a8:39:a0:44:09:6f:
81:6f:4d:c2:9e:b0:38:ba:63:ed:da:35:39:55:1e:
d0:f4:4b:54:72:1d:b8:9b:a4:47:36:47:11:ba:31:
5a:7a:1b:a6:82:ee:fe:cc:b6:20:63:d3:10:76:9d:
6a:38:1f:9e:ca:8e:05:8e:0e:c3:07:71:39:56:4a:
c7:03:3e:5f:75:9f:d1:3d:28:fe:dd:ff:d8:19:fc:
ff:c5:a6:fb:be:8a:cf:ad:b9:1f:b1:02:a4:e3:ac:
89:9a:77:16:b7:9b:b9:35:25:9d:cd:0f:49:d6:56:
80:c4:e7:e0:3a:65:84:0d:40:b3:e5:f4:f7:3d:1a:
28:26:e5:82:ba:ff:eb:09:95:49:8f:94:71:47:de:
c3:e0:26:fd:09:b3:35:84:d6:24:dd:8a:56:6e:67:
99:86:c6:7f:9d:bd:5e:7d:b5:b7:a6:79:d5:5c:f2:
41:b5:4b:1c:80:ac:a9:18:d9:78:4b:85:72:06:ae:
29:88:48:2a:ad:25:07:8d:47:31:8e:8a:e9:0c:a8:
84:9b:50:65:f4:db:35:43:46:93:cd:95:41:67:60:
00:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:21:C9:64:90:9C:AC:24:B1:FD:E7:FE:FE:05:1D:F0:17:3B:B3:88
X509v3 Authority Key Identifier:
keyid:4D:8A:98:75:D7:D0:D1:2B:C4:7A:70:B7:ED:E9:A3:CA:64:D8:2D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TYqYddfQ0SvEenC37emjymTYLTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/95d780-baad-4db7-beb5-454599a4d22c/1/TYqYddfQ0SvEenC37emjymTYLTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:65:00:80:06:91:a2:2d:27:d3:77:2a:4e:7c:ec:33:b8:0a:
5c:0c:37:25:44:6f:26:07:86:38:3a:d2:5c:e2:38:e1:9b:a9:
c7:31:ca:f0:bf:cb:e4:a3:2d:cb:4d:c7:27:09:8f:76:d8:ac:
bc:e5:67:e5:32:17:0e:3b:d9:5e:88:1a:39:28:c0:25:41:ff:
ed:7f:37:93:8a:69:0e:15:09:e7:e2:30:b4:c9:a4:7f:6d:e7:
78:61:ca:39:0d:08:9a:4a:df:dc:2a:5b:e0:58:79:57:50:d8:
1f:c0:80:2b:ef:26:57:c0:bc:32:59:e2:a2:65:fd:09:72:32:
8c:dc:16:d3:b8:1a:7a:d0:a5:25:9c:9b:e7:25:08:4d:17:23:
45:41:0a:c7:aa:31:ec:85:de:0b:87:09:e8:98:de:91:3b:a2:
15:47:4f:cb:6f:84:4f:68:fd:98:95:a8:e8:bf:c8:44:fa:62:
1e:61:c1:cf:34:f2:10:46:18:d6:8b:86:31:bf:44:32:32:d7:
7a:ed:06:1a:58:d2:74:c1:4f:b7:49:bf:42:ac:cb:f4:bc:09:
5e:6b:01:ce:31:48:5d:e1:86:3f:9f:38:fd:d8:dd:d4:fa:0c:
eb:4e:93:01:c6:b9:87:18:75:ab:e2:e0:ee:6b:33:1d:5d:da:
63:53:be:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 15:15:53 2025 by rpki-client