Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
File: TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft (raw, json)
Hash identifier: w9nZf2gcdbtGlEZ92GAtu72Ai/8MTi+DT7iq6hbL744=
Subject key identifier: E6:8B:33:29:5F:9D:72:0B:65:5C:96:9F:A4:92:BF:1F:E3:B6:12:1C
Authority key identifier: 4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
Certificate issuer: /CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Certificate serial: 0194BD85B2E4E6D4F2E15092698997498672
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:43 +0000
Manifest this update: Fri 31 Jan 2025 18:00:43 +0000
Manifest next update: Sat 01 Feb 2025 18:00:43 +0000
Files and hashes: 1: 35EW9mUAS2KwaYDPUieiupydDBY.roa (hash: V/BNRylyiFUELWt9i2pyrF3sOU/lNLQC8epYI7MQKPY=)
2: TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl (hash: GI8EIDGWSN3+pFlEuEE6ZRBk5A8KE8abhBtg3hxXATU=)
3: q0NSZKvbuZKPsTOzfMB4PKlh9Ys.roa (hash: jHJ+k8Z1pg8+GnjSpwYDBxeFhhnBTCkhDCcx/6sq1Z4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b2:e4:e6:d4:f2:e1:50:92:69:89:97:49:86:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c261919b55c2c08f72a5ab1d0eb185ee12bdff7
Validity
Not Before: Jan 31 18:00:43 2025 GMT
Not After : Feb 1 18:00:43 2025 GMT
Subject: CN=e68b33295f9d720b655c969fa492bf1fe3b6121c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e5:68:48:a8:b9:14:b1:72:a8:11:f8:65:e9:
a1:0d:d1:80:4a:50:7c:dd:77:ac:d8:4b:9c:5e:d5:
95:5d:49:7f:02:dc:e9:59:1b:c1:d9:ba:9c:ef:a7:
a5:f2:8f:9a:f7:77:47:0f:d1:8a:dc:be:19:69:e3:
25:ef:66:c9:92:5c:3b:21:8b:9e:7e:10:79:45:d8:
fb:17:c0:50:d1:5c:35:c5:17:85:af:64:0b:f2:82:
11:2d:8d:b1:1c:e5:d5:24:d8:c6:f3:f2:df:b9:2a:
e2:a2:c9:cd:45:5c:6c:4b:83:35:c8:bd:cc:6e:95:
dc:5f:17:b0:3d:c0:72:e7:62:97:ef:1f:02:a8:14:
58:3f:e3:be:dd:59:df:bf:91:70:80:08:a2:aa:85:
b8:a1:98:75:91:a5:9d:bb:6b:c8:52:7b:b3:2a:57:
2c:af:4e:1b:1b:b9:c5:ab:9c:6f:c6:55:0d:79:bd:
bb:9a:d5:a7:f8:2a:d9:8e:82:7b:8e:b6:60:76:6f:
31:40:dd:7f:e1:4b:16:c7:e7:71:04:74:24:74:54:
9a:16:4d:b6:06:cf:6c:54:fe:88:1c:0f:38:a3:c5:
cf:e0:e7:d7:66:e8:d5:35:de:7e:5c:2c:0c:a3:4e:
fb:91:1f:5c:7e:14:83:4b:37:0f:3e:15:ae:23:a2:
29:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8B:33:29:5F:9D:72:0B:65:5C:96:9F:A4:92:BF:1F:E3:B6:12:1C
X509v3 Authority Key Identifier:
keyid:4C:26:19:19:B5:5C:2C:08:F7:2A:5A:B1:D0:EB:18:5E:E1:2B:DF:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCYZGbVcLAj3Klqx0OsYXuEr3_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/c1d940-044d-49c4-a7a1-a0076679be60/1/TCYZGbVcLAj3Klqx0OsYXuEr3_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:27:ab:71:1e:ab:91:58:16:80:42:4d:5f:00:52:ba:fb:d8:
14:be:32:76:c7:05:e8:6b:6c:27:50:88:63:f3:00:e9:83:e2:
e0:a1:f4:58:9f:b2:07:ae:e1:46:5d:91:b6:7c:cc:75:a1:70:
10:63:da:90:51:61:29:2e:50:d3:75:de:b9:ad:08:94:15:b7:
ad:61:c0:c8:32:13:ab:f0:11:85:54:42:ad:28:66:a9:f1:95:
53:0e:3f:35:c2:16:19:f3:b4:03:9a:89:f5:c2:ca:9a:be:4e:
14:8e:bd:12:86:35:2d:52:e4:01:7e:9f:8d:59:4d:8e:e9:c7:
44:12:e3:10:fd:3b:8e:1f:57:21:fe:91:d0:95:b1:b9:33:00:
f5:35:5e:61:15:21:28:f8:e5:fa:19:c4:89:4c:f4:e5:b6:97:
a9:3c:6a:e6:ce:6d:99:5a:56:73:72:03:d1:98:cd:9c:89:0a:
9a:0e:e7:5f:cf:61:58:ce:8e:66:b2:95:a7:9b:22:12:f6:1a:
d8:a3:e6:fa:bc:c4:29:ae:e6:b5:0f:db:6e:3f:53:97:83:4b:
30:43:d4:e1:6b:65:03:14:8b:0c:4b:0b:71:ef:d8:e8:80:7e:
d8:0e:a2:80:ef:81:a4:39:68:5f:48:90:18:3f:1e:7a:34:df:
ab:63:03:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 8 16:56:01 2025 by rpki-client