Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
File: TWFl5PGBPks_XEhyBjHHzAsjdNI.mft (raw, json)
Hash identifier: hUfDoAIZQNKhrtagefufM0WGSaOmzLNAK/QYSeB+jnI=
Subject key identifier: 96:01:E9:92:AE:14:CA:8C:41:A5:BA:A7:6E:FF:DC:6D:AE:11:F7:BD
Authority key identifier: 4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2
Certificate issuer: /CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2
Certificate serial: 0194BC3C2DEB4AB92FBE880E3A95C1771E99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
Manifest number: 0A25
Signing time: Fri 31 Jan 2025 12:00:47 +0000
Manifest this update: Fri 31 Jan 2025 12:00:47 +0000
Manifest next update: Sat 01 Feb 2025 12:00:47 +0000
Files and hashes: 1: NvJ8oLDEBqhT1H-zCdKolqnypws.roa (hash: aLhfn5rS031yK9YSuCvXO/dQvbflGZGOUFgblOZMFc4=)
2: TWFl5PGBPks_XEhyBjHHzAsjdNI.crl (hash: 3T6Wzq+jXJYJaKJN/1ehYGgS+vZfH1WlHjRd7NqnChA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:2d:eb:4a:b9:2f:be:88:0e:3a:95:c1:77:1e:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d6165e4f1813e4b3f5c48720631c7cc0b2374d2
Validity
Not Before: Jan 31 12:00:47 2025 GMT
Not After : Feb 1 12:00:47 2025 GMT
Subject: CN=9601e992ae14ca8c41a5baa76effdc6dae11f7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4e:8a:92:8a:78:a6:09:b6:be:2b:e0:74:17:
85:cf:d6:53:1d:02:6c:4d:02:13:d8:47:00:f9:10:
b0:b3:d1:4d:3e:b9:f2:6b:03:15:17:62:ad:b1:c8:
9b:ab:2b:da:70:df:0f:70:88:6a:07:3d:69:60:f3:
92:82:40:cc:35:e2:4c:0e:b5:b9:65:91:95:bd:ee:
ce:00:04:1e:fe:85:a3:c9:f7:93:28:64:40:86:e3:
3a:7f:92:aa:e9:49:e4:0a:3e:ba:26:8b:e7:6b:03:
aa:8f:d6:1c:fb:25:9a:48:36:66:f6:a1:bd:8c:f4:
63:f1:41:25:99:83:34:f2:b4:22:47:48:98:2c:c6:
ab:98:7a:fc:f5:a6:35:58:67:47:0d:4d:f9:c1:9f:
3a:06:c2:dd:8e:fa:28:df:c6:6e:23:9b:66:87:d4:
d7:9f:5e:7f:00:35:1b:c0:ad:1f:d5:9a:63:a9:c2:
c2:d2:40:39:75:b3:48:51:35:af:31:13:e8:4d:94:
e4:7d:87:a6:30:aa:f8:fb:03:14:c2:b6:7c:f6:f0:
39:59:8b:cc:07:d2:78:db:f0:75:90:94:1e:f0:88:
7a:be:a2:ac:f3:1d:b8:3f:22:18:17:5a:a3:96:39:
e5:ff:98:af:aa:fe:5b:b1:e2:d8:f4:bf:7b:a0:c7:
33:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:01:E9:92:AE:14:CA:8C:41:A5:BA:A7:6E:FF:DC:6D:AE:11:F7:BD
X509v3 Authority Key Identifier:
keyid:4D:61:65:E4:F1:81:3E:4B:3F:5C:48:72:06:31:C7:CC:0B:23:74:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TWFl5PGBPks_XEhyBjHHzAsjdNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/3ae541-57f4-4466-91d5-02a3be4773a3/1/TWFl5PGBPks_XEhyBjHHzAsjdNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5f:7d:fe:8c:47:d8:ee:89:58:6c:f4:18:5b:02:13:61:2f:
7c:07:ff:d0:9c:df:4a:b5:e6:15:ca:cd:f5:a7:4e:70:12:7d:
30:c0:81:92:76:5f:10:8e:07:ee:df:92:3c:46:ca:79:16:41:
1a:0e:e2:58:3c:c6:20:63:74:6d:ce:3d:8f:b0:ce:9b:c4:5e:
cf:58:15:d7:18:ea:11:81:5d:31:ce:b0:8a:5d:af:bc:1f:32:
56:83:64:90:dd:39:9f:26:2e:82:9f:2b:f7:8c:18:c1:bb:0e:
ad:ab:1d:8f:78:b2:ce:17:a3:1b:a1:86:e5:bc:5c:b8:85:66:
80:0a:f5:d6:21:a5:08:33:2f:10:50:da:ed:da:96:dd:d5:7b:
0a:89:28:65:63:ae:20:fd:81:ac:43:4d:41:b7:1e:31:00:bb:
61:7a:e7:8b:76:a1:e5:b9:d1:7c:74:6d:86:ad:9b:57:b3:8d:
a3:82:07:17:0e:0d:1e:e4:26:ee:9b:67:e7:7c:16:c9:17:41:
65:ab:a6:f7:23:2c:c4:4f:ea:9f:3b:9f:ca:e7:fc:68:dd:7d:
7a:ae:cc:58:25:01:0d:b1:9f:36:e4:b5:47:90:39:d3:ba:11:
ef:19:1d:bb:84:a5:a4:7d:8d:65:3b:ca:35:10:8c:14:9f:39:
b0:0f:a8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:44 2025 by rpki-client