Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
File: TxUpALDTI9NtlFEKsLAck_RRfIk.mft (raw, json)
Hash identifier: RET9a80NLmyIwzrIJ/lkypDkvbgFJChhnlJj014XVGI=
Subject key identifier: 31:4A:F6:B3:F1:5E:96:5F:23:69:D6:37:60:C1:DB:61:16:FB:AC:34
Authority key identifier: 4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
Certificate issuer: /CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Certificate serial: 0194BCE0C6C63533C40A714CF6FE8CE85F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 15:00:35 +0000
Manifest this update: Fri 31 Jan 2025 15:00:35 +0000
Manifest next update: Sat 01 Feb 2025 15:00:35 +0000
Files and hashes: 1: 8Zjvv60lC8NGP14VoQ8RNeofQIM.roa (hash: P7KtzcRE9odqg/BTLMYwDj7fh0a6LBnncSFvQDv5Bp0=)
2: FpKKPofiudOty7FxUMr6flRZ1Yw.roa (hash: 19qYKj9K4I/iMwutyl2SfY76xgKtvj/68+BwpIEN2Kg=)
3: TxUpALDTI9NtlFEKsLAck_RRfIk.crl (hash: xAhCEGTyUhduxoRMXKhjtdi3whwo4kV/n2UvvBtCfR0=)
4: yOx4nY5h71UsEVGCdqce7EnVtbw.roa (hash: pblfkKrPcMJNUK4hgNwzxNA61gyD6ePezh9yKZ6o3M4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:c6:c6:35:33:c4:0a:71:4c:f6:fe:8c:e8:5f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f152900b0d323d36d94510ab0b01c93f4517c89
Validity
Not Before: Jan 31 15:00:35 2025 GMT
Not After : Feb 1 15:00:35 2025 GMT
Subject: CN=314af6b3f15e965f2369d63760c1db6116fbac34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a0:23:39:a9:53:7d:d7:a1:9a:ef:77:5d:f9:
11:c4:26:96:c8:53:27:2f:75:11:35:dc:d6:47:20:
29:d5:e0:b8:1c:a6:d4:02:b9:7f:a3:7c:2d:19:31:
27:9b:d9:11:57:86:d3:df:34:cf:71:07:bd:d3:b3:
80:9b:30:c5:fc:62:39:f1:30:f7:3b:91:15:05:7f:
b6:8d:6a:8f:79:f4:ab:47:62:76:16:57:2f:e1:78:
94:97:23:3d:2c:e5:fc:55:40:86:aa:58:e6:bb:1c:
83:ca:18:cd:cc:7f:69:45:3f:d5:70:0e:96:85:1d:
b4:c0:a1:6f:e9:11:b3:0a:7c:08:4e:6e:ac:59:c6:
46:9a:e0:0e:5f:75:3c:b3:cc:b6:aa:9a:bd:64:7d:
3f:69:fa:d8:d8:ec:9f:00:fa:22:d1:09:ab:56:b7:
ff:28:13:6b:49:d9:5f:d3:60:7e:ef:c3:7b:65:17:
90:38:22:c2:5f:19:79:e9:2f:9a:f5:29:c4:d1:83:
d6:74:88:e6:5d:08:1e:4c:e8:72:cc:ca:0e:89:5e:
26:da:69:f8:b0:dc:ed:ac:64:4e:e1:a3:9d:3e:77:
f2:35:5a:b3:be:f0:be:48:96:cd:f4:60:74:01:d8:
f9:05:c2:ba:48:98:66:29:51:07:2c:a9:d3:44:af:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4A:F6:B3:F1:5E:96:5F:23:69:D6:37:60:C1:DB:61:16:FB:AC:34
X509v3 Authority Key Identifier:
keyid:4F:15:29:00:B0:D3:23:D3:6D:94:51:0A:B0:B0:1C:93:F4:51:7C:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxUpALDTI9NtlFEKsLAck_RRfIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/89ff3b-1263-4cdd-9cad-23df8dddf978/1/TxUpALDTI9NtlFEKsLAck_RRfIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:84:84:4b:25:ec:a9:27:9d:f6:b6:6c:8d:ad:a2:91:c8:fe:
42:2d:77:5e:6f:03:96:b2:12:70:65:59:26:93:39:54:12:02:
20:c9:75:f2:c4:ea:c5:a3:62:21:b1:e1:e2:b8:89:14:e0:9d:
c6:56:a9:a5:85:77:b8:e0:ec:dc:49:9a:3d:fa:eb:ee:6e:63:
45:71:a7:de:39:a4:a9:dd:dc:78:f2:df:03:30:d9:f3:d4:d0:
4f:92:8e:27:91:c2:09:ad:3f:02:1f:7b:40:dd:2a:5a:35:81:
bd:d2:26:bf:5c:18:38:d3:b5:96:75:9e:bb:20:5a:cb:94:22:
88:f7:77:2f:33:24:74:ec:ba:6a:74:0f:4f:3a:18:bd:d0:7c:
be:f1:c1:3e:11:ec:bd:32:c3:ac:d6:dc:96:eb:c6:80:e9:46:
fa:21:04:91:9d:5e:d0:8a:df:af:5e:ab:93:21:89:28:3e:3d:
82:5c:b0:16:8d:f9:83:fa:e7:d9:46:41:3f:3a:dc:92:59:5d:
58:a4:0f:4a:b8:72:6b:3e:09:01:e8:27:87:1f:ae:d1:5f:8d:
a5:0c:c9:f7:ba:72:4c:bd:9d:d2:e2:bb:67:f6:d6:2f:46:99:
01:37:38:69:0d:b1:ad:f5:d1:6d:d2:b8:b5:e5:26:22:79:4c:
4f:3b:9d:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:53:27 2025 by rpki-client