Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
File: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft (raw, json)
Hash identifier: qtKmyIAX81tIgPQcbgGX+2KvRZUQYNcLF+2g81h0QqE=
Subject key identifier: F4:20:38:93:2E:63:37:D3:14:8C:C2:78:22:F3:58:72:34:D6:14:BD
Authority key identifier: B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
Certificate issuer: /CN=b732762a5e861e976de53d14786f39e3a669681b
Certificate serial: 0194BCAA174103E171C06234D3B65A33BB6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: m8jqf0t6bK4OvZVKVGnvFB0mdKA.roa (hash: 0ftdeq2I0Ls/OwARQ/FHezOkmfJrEt6ekfubL8KjG/I=)
2: sGGZndDmRMx-w7J8U5J6G3BFVOk.roa (hash: uF6jgyxh4ugT/l6V+mIZvN4IJ+X7IddAc7QQehPWZsY=)
3: tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl (hash: o34yuKTxTEvDDoJrrpVePXZkZdIg9AIaAQTHV5Ib0cc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:17:41:03:e1:71:c0:62:34:d3:b6:5a:33:bb:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b732762a5e861e976de53d14786f39e3a669681b
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=f42038932e6337d3148cc27822f3587234d614bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:aa:46:a8:43:ba:a1:94:87:87:88:00:bc:23:
82:e0:9f:3f:be:8a:00:67:11:11:bd:18:47:f4:45:
c7:22:31:d9:97:0f:2b:4e:3b:c1:1a:20:8f:5e:1a:
79:65:4e:8b:7b:2a:5b:41:30:8a:55:c1:8c:2d:92:
ba:d2:15:85:55:54:2a:42:23:12:ef:b3:52:0b:21:
a9:16:ce:3d:d4:16:93:a1:d4:24:d8:f8:4e:72:ba:
54:3e:a1:86:04:ee:87:61:91:e0:8f:00:8e:5e:66:
27:af:aa:78:2f:ab:47:bd:37:f6:c3:ca:13:3f:26:
b4:01:bb:f0:60:1a:cf:8f:00:6d:9b:67:19:5b:b6:
6b:d9:3f:8b:72:1e:41:c9:74:2b:38:ab:0d:96:d8:
38:c7:ba:1b:70:28:07:82:27:44:74:f8:ff:4d:9e:
c2:01:15:24:ec:be:97:b6:41:74:d4:ae:6a:30:92:
3f:fb:0f:dd:01:70:04:3c:bd:38:c0:63:1c:d1:ca:
1a:c4:61:b5:90:49:a6:a8:1c:36:8b:5b:e6:bf:37:
35:d3:7f:ca:9f:7c:0d:a2:bb:37:c8:68:ff:3d:89:
f8:ec:9f:47:60:54:5f:28:8e:f3:b1:82:59:ac:d4:
c5:a6:8a:b7:6a:32:2e:b9:0c:99:f9:5a:20:90:3f:
42:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:20:38:93:2E:63:37:D3:14:8C:C2:78:22:F3:58:72:34:D6:14:BD
X509v3 Authority Key Identifier:
keyid:B7:32:76:2A:5E:86:1E:97:6D:E5:3D:14:78:6F:39:E3:A6:69:68:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/5ac21d-7616-4eef-85d7-63b52aa7f8da/1/tzJ2Kl6GHpdt5T0UeG8546ZpaBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:1c:45:c3:40:7b:35:81:f6:e5:4d:15:c9:0b:19:96:c4:ce:
76:2d:ed:ee:cc:fc:c7:52:be:08:16:68:44:a1:94:e3:e5:e6:
db:6b:8e:ed:ae:28:d8:ed:39:24:1e:1b:c1:11:5c:b1:8e:20:
02:13:c2:7d:a3:7a:9c:43:67:b8:34:bd:c5:c0:63:57:59:98:
f8:56:4a:33:ee:35:f4:f9:43:fb:35:fe:3d:68:62:df:7f:b9:
0a:c6:19:90:5e:bc:35:16:1b:cb:a7:cc:25:d3:4c:e0:3e:ed:
e8:e2:71:02:f5:8e:3e:24:d2:3a:37:25:ec:33:1e:bb:9e:1e:
87:8c:9e:fb:10:53:15:05:9f:bf:0f:c6:55:31:3e:8e:30:38:
71:da:b1:54:6d:da:08:32:34:35:ef:23:a7:13:b5:47:f6:13:
5d:3e:b4:a3:39:a7:88:08:ec:14:3d:41:5c:5c:6e:8d:e5:15:
8d:35:3c:13:62:ea:ec:23:24:6c:94:a3:bc:dd:28:85:f6:73:
ef:af:77:62:69:60:78:c4:5e:b7:c8:67:f0:e2:d5:8c:66:6d:
d6:d3:3c:cc:c5:ec:ab:98:f7:32:af:3f:9e:e6:6b:ef:fc:70:
8d:cc:a7:12:b3:24:c3:ec:bb:4b:c4:77:6e:2b:b0:b2:21:85:
eb:c6:26:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:08:11 2025 by rpki-client