Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
File: TfLG-lSozC3HHoAs-D9cd2zpdMk.mft (raw, json)
Hash identifier: zl4pyTnd7LFP5p9B7a+UjCayL2abo+o4oXjoSnGjdU8=
Subject key identifier: 7B:E7:0F:0B:08:94:D1:E0:E8:BA:25:BB:18:C3:A3:95:6A:CA:0F:AC
Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Certificate serial: 0194BD178ACFDDAF09D9FB98CC7E90B04567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: TfLG-lSozC3HHoAs-D9cd2zpdMk.crl (hash: bVLzq1NaVT/LpxVaRepQbRlSHrYugmAYCkB8V9gwcb8=)
2: e4YwnyTHRcui9Qd2cuefi1c6MlA.roa (hash: LhO2Xz43s1AvMskc3d7cQoBTaqJHciWee5shF/NhU8I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8a:cf:dd:af:09:d9:fb:98:cc:7e:90:b0:45:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=7be70f0b0894d1e0e8ba25bb18c3a3956aca0fac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f5:d2:1e:d7:4d:22:d6:c5:55:55:89:5a:e3:
72:65:ec:16:c8:31:ee:c6:27:8e:0a:cb:79:36:f6:
41:24:e3:68:c0:49:7f:63:1d:7b:c4:53:7e:db:11:
1e:05:8e:8d:4b:b9:c2:ac:aa:95:c6:ab:d0:1b:09:
d7:ba:d0:d0:c5:1e:fa:e2:fc:4d:de:ea:a8:7e:7c:
89:74:eb:45:9f:65:23:75:42:08:c9:ea:f2:d1:ce:
d5:67:39:28:97:fe:76:77:97:23:f8:88:cf:09:09:
44:b3:fa:3c:b8:6f:2f:49:2c:ae:0c:b9:99:1a:77:
e0:58:06:4c:11:3f:9a:bf:e3:eb:c7:aa:89:3e:b4:
e2:3d:55:12:7f:0b:ca:02:0a:fb:d4:c7:ab:1e:2d:
8d:af:f9:7c:a2:ac:01:51:ad:95:fb:b3:45:e5:36:
1f:62:a8:15:58:34:75:49:62:b4:ca:fe:a8:2c:74:
ca:71:92:8a:d2:c9:58:a3:a8:80:56:f6:67:75:26:
d6:4f:29:02:3a:a8:a7:87:04:e5:3a:4a:58:4d:22:
ca:55:11:49:ee:88:27:36:42:e0:6c:e8:ea:c2:1f:
b9:8e:d9:3b:45:02:f9:52:eb:e7:a8:32:c3:9f:d1:
5f:dd:ad:cc:29:13:33:8e:1c:4f:73:66:01:52:40:
9f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:E7:0F:0B:08:94:D1:E0:E8:BA:25:BB:18:C3:A3:95:6A:CA:0F:AC
X509v3 Authority Key Identifier:
keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:01:97:42:ad:d9:9f:2f:95:0f:dc:73:4a:ac:17:cc:bb:05:
58:35:77:74:af:f0:5a:c6:5f:c8:4c:04:24:d7:81:0a:fd:be:
e6:09:56:a1:f1:27:51:1e:8f:aa:37:ae:c2:a9:f6:33:ec:1f:
51:44:e5:ef:b1:d5:ba:5b:73:0f:a9:af:99:5b:49:9f:b4:d1:
1f:f6:a1:af:23:42:16:f9:07:a1:73:b5:39:a8:c9:e4:4e:a9:
d8:54:86:7c:bb:27:18:44:05:cb:63:60:70:7e:2f:9d:96:04:
1d:bb:f6:f0:e2:a0:91:98:66:da:f8:35:95:8b:f8:f5:f0:18:
d8:3f:03:ed:9a:1c:d8:fb:2d:b1:52:e5:1c:b0:68:45:a4:b6:
43:82:74:f4:26:72:1a:68:6f:9c:7e:89:0e:cb:b4:ac:81:b2:
f8:a5:30:5a:6a:18:6f:25:01:d1:c4:1f:44:91:ed:ea:45:3b:
7b:50:fa:27:62:d9:29:81:85:3e:ef:be:bf:7b:9c:bd:40:f3:
68:53:e5:da:40:36:f6:cf:44:46:f0:09:77:65:24:22:9a:6f:
d0:99:49:83:d4:1c:ff:c8:e9:b9:08:74:0d:1a:a9:eb:72:33:
bf:88:10:82:a8:70:9d:46:8e:ac:6b:ab:ab:7b:40:b0:81:d3:
52:66:d2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:27:15 2025 by rpki-client