Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
File: TlyvXlSV9UsDnx0PJHERJGfJeRw.mft (raw, json)
Hash identifier: NeVCvgWKxFTUDWqgLHDjJqan0ecPvR6w1q70iKjiB4c=
Subject key identifier: 94:D8:77:46:26:89:A7:3B:78:91:1F:DC:2C:81:B9:B2:B6:73:65:80
Authority key identifier: 4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
Certificate issuer: /CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Certificate serial: 0194BD4EADE785858B22D0B7D610AA4E03CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:37 +0000
Manifest this update: Fri 31 Jan 2025 17:00:37 +0000
Manifest next update: Sat 01 Feb 2025 17:00:37 +0000
Files and hashes: 1: Sjk-hMVz5Yq15653m82LHzN2q2c.roa (hash: v2IafRkq9Sg922Tj4NY8dbGZtPOD35/xpm6wAYKPODI=)
2: TlyvXlSV9UsDnx0PJHERJGfJeRw.crl (hash: noOHpnt0ESVOrChyenJKBqBIB7uquXgrOWtGe3swwjs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ad:e7:85:85:8b:22:d0:b7:d6:10:aa:4e:03:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e5caf5e5495f54b039f1d0f2471112467c9791c
Validity
Not Before: Jan 31 17:00:37 2025 GMT
Not After : Feb 1 17:00:37 2025 GMT
Subject: CN=94d877462689a73b78911fdc2c81b9b2b6736580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f9:ca:0a:2d:49:e6:9c:6c:6a:2c:58:03:e6:
b4:83:d3:d8:00:c3:28:58:99:3f:3f:b2:c6:18:52:
46:e4:ff:15:c3:25:23:7c:fd:ca:0e:d4:67:f3:d8:
d5:45:9b:e7:cd:b6:5d:cf:e2:b9:b1:c0:e2:2b:bd:
ef:ca:c9:fb:a4:23:85:53:29:c8:31:73:51:70:1b:
70:da:b6:23:fa:d2:aa:fb:23:56:76:3a:95:78:74:
5a:d5:42:85:ba:e9:8c:42:15:4f:53:58:ed:ec:dc:
b8:3f:ec:f4:e1:03:2a:43:4e:de:83:35:1d:cd:81:
2c:0a:5e:88:ec:91:92:3e:64:9f:0c:7a:cd:9d:e4:
a3:c2:d2:e1:87:cb:f0:b1:26:e8:de:97:9f:4b:17:
4e:a1:aa:f1:5d:07:a5:77:47:01:b5:b4:96:f0:71:
1b:8e:54:8c:02:7b:8e:89:38:d5:0b:64:59:00:eb:
a4:64:09:44:db:a2:1c:1d:e2:12:02:d1:03:c3:9e:
b7:38:6a:e0:61:26:9a:7a:96:7f:2e:85:54:9d:10:
19:a0:97:ba:85:4e:8e:d5:c0:06:6b:eb:6d:b3:07:
0d:63:c2:2b:6e:91:b9:25:74:50:85:a4:84:a4:c0:
81:aa:86:7d:61:a6:9d:cc:80:f5:c3:eb:49:75:2c:
2e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D8:77:46:26:89:A7:3B:78:91:1F:DC:2C:81:B9:B2:B6:73:65:80
X509v3 Authority Key Identifier:
keyid:4E:5C:AF:5E:54:95:F5:4B:03:9F:1D:0F:24:71:11:24:67:C9:79:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TlyvXlSV9UsDnx0PJHERJGfJeRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/f89685-1174-45d5-a5dc-09db57469bb8/1/TlyvXlSV9UsDnx0PJHERJGfJeRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:26:4e:ce:ff:f8:74:53:f3:47:7e:15:8f:33:dd:e9:e9:07:
a9:3e:cc:cb:c2:1b:05:e7:5e:a2:64:21:1c:c7:f7:1d:fa:78:
3a:29:6f:ba:85:8f:17:cd:7e:35:a1:bf:0b:e8:c3:e3:4c:10:
87:1c:70:fe:e0:01:50:c2:e5:d9:da:84:07:94:a7:31:9a:e9:
51:d4:12:2d:ed:8a:e0:19:ec:89:81:41:34:bd:37:21:79:a5:
12:d6:41:d1:72:a8:e2:c0:74:05:fc:aa:4b:be:d1:73:96:cc:
1e:00:08:76:2e:08:df:01:72:0b:7c:d7:2b:3c:ae:b4:83:d4:
0b:13:34:fe:9b:f5:e2:92:6e:60:10:24:cc:d1:1f:e7:a1:42:
11:a6:af:be:18:f4:ef:29:c5:6f:ad:cd:4e:0b:38:b0:bc:df:
d9:20:ac:ac:dd:1b:3b:34:7f:56:49:e8:74:88:d0:88:32:c1:
1e:f6:85:05:51:6e:35:cb:2e:99:eb:35:ae:f8:4a:be:cd:2f:
31:a0:1f:70:3f:af:15:7c:f0:60:26:38:c5:88:d8:c5:ae:f1:
d1:e2:16:fb:7b:a9:1d:51:e0:8f:22:55:9a:0e:ef:f5:b9:b7:
15:7a:02:36:53:c5:75:9f:b8:7f:8f:67:cb:52:3b:79:f6:d1:
88:90:74:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:04:06 2025 by rpki-client