Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
File: TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft (raw, json)
Hash identifier: 3OlBMIRx3P8E0ZXqXyH7+uhjGZHe6NtexrdI1hqOD3A=
Subject key identifier: 3D:6A:21:CD:86:8B:8A:14:F6:95:47:7D:0B:B8:BD:9A:8E:A7:E3:EC
Authority key identifier: 4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
Certificate issuer: /CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Certificate serial: 0194BCA9F7A397225D0E66478B2AD313497C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl (hash: bw1aIk8KKd6sicOnzgrlcz9JV8J/qXGABYh1ilPXceM=)
2: gtQnPoHQAssVploPdQKF3wMqPqg.roa (hash: oTvtYktXpzo6IvRkclIhI8X73gjSVVDXnm/5bjUENeo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f7:a3:97:22:5d:0e:66:47:8b:2a:d3:13:49:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d0d5943c2403730de818e31b9b5ff1d8c1c9c47
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=3d6a21cd868b8a14f695477d0bb8bd9a8ea7e3ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:42:b2:db:75:95:a2:0a:65:e8:88:a4:e6:ea:
da:3a:db:f8:42:10:8c:78:8d:75:75:83:9e:fe:32:
a1:ea:c2:91:3a:3f:7c:75:a9:36:66:ca:74:92:c6:
84:bd:48:5f:20:41:d8:0b:da:e1:3f:fc:39:7e:c1:
a8:13:ac:3a:42:99:8c:8e:12:ed:f7:f8:9d:d7:83:
c2:5b:c4:28:ea:1b:02:96:ca:83:c6:42:72:50:6d:
37:cc:a6:b2:50:8b:1d:f3:5a:78:a9:3a:61:94:43:
d2:da:21:c7:13:01:ac:32:b8:37:9c:c6:c3:41:82:
cc:cf:5a:88:49:12:6a:5d:76:16:43:21:c6:34:d1:
eb:b6:4c:b8:dd:b0:a8:48:1f:9b:a0:bb:c7:85:82:
50:13:9a:11:c6:b1:a7:aa:1a:b2:6f:f9:e6:1c:fe:
fb:da:c8:1c:56:89:49:6f:b1:df:88:87:f3:09:41:
9b:48:62:ae:9b:c1:aa:06:cf:82:df:3a:93:37:75:
83:47:fc:3f:95:58:b0:dc:ef:1e:0a:3a:03:f0:78:
77:74:ef:14:61:6e:b5:ad:83:f2:a3:0f:fd:b5:f5:
d6:87:cd:d9:6d:57:c4:4e:a1:a0:88:1c:23:1c:98:
36:93:98:52:f2:f5:d9:50:6d:ec:25:32:ae:01:84:
33:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6A:21:CD:86:8B:8A:14:F6:95:47:7D:0B:B8:BD:9A:8E:A7:E3:EC
X509v3 Authority Key Identifier:
keyid:4D:0D:59:43:C2:40:37:30:DE:81:8E:31:B9:B5:FF:1D:8C:1C:9C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TQ1ZQ8JANzDegY4xubX_HYwcnEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/cce5ba-ff93-4438-a8e3-4a637c6d9938/1/TQ1ZQ8JANzDegY4xubX_HYwcnEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1a:09:43:6c:2c:3a:42:d8:f0:5b:40:6d:6c:ed:f4:ac:4b:
d6:aa:4c:7c:e9:51:6a:96:93:a0:89:d1:79:ec:08:d0:36:a5:
06:51:4a:8a:74:ad:e4:bd:9e:e7:cc:60:8a:78:0b:94:03:ce:
dd:08:1a:4c:ae:60:3e:70:e7:1c:19:da:5a:d7:7c:df:4d:8f:
52:fa:74:11:83:a6:3b:de:d2:0f:44:f2:d0:0e:ce:ed:56:88:
a4:cb:2d:8d:b7:85:a0:40:e1:dd:8c:4c:83:34:c5:71:52:1c:
d1:b3:4c:d0:fb:60:38:c4:41:90:65:06:de:7e:b1:93:f9:1d:
f3:39:bc:12:5f:83:83:88:8f:00:7d:ed:8e:b3:20:bd:84:09:
03:34:fc:4d:4f:17:80:a4:61:80:a1:9d:51:8f:44:db:4a:a1:
b8:17:f7:46:a1:97:cf:c8:17:ff:69:80:a9:76:8b:1e:c8:98:
fb:e2:97:28:31:6a:f9:92:14:c4:2d:df:c0:18:28:60:73:c2:
46:70:b2:ee:26:35:fa:03:90:de:70:7d:87:af:e1:60:74:30:
dc:1b:e7:26:37:6b:ed:4c:d7:af:41:e3:68:2f:17:f7:86:c5:
8a:f0:b3:7a:90:0d:bd:0a:5c:5a:0f:fc:32:b5:8e:0a:f8:fd:
de:78:ff:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:07:00 2025 by rpki-client