Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
File: TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft (raw, json)
Hash identifier: ENvmmc8zHPMLu/ePqtPgO7x/td/E3KB1f3HTuLoP1PA=
Subject key identifier: D2:D4:0B:64:5E:E4:E4:63:6F:37:6F:4C:6C:56:3D:87:83:F9:3D:2F
Authority key identifier: 4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
Certificate issuer: /CN=4cad0397487799e2118ff4cbcf8f159747f35891
Certificate serial: 0194BD4E6B0E64DA7B0D9C88D255090F3D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 17:00:20 +0000
Manifest this update: Fri 31 Jan 2025 17:00:20 +0000
Manifest next update: Sat 01 Feb 2025 17:00:20 +0000
Files and hashes: 1: 3hSBBEtakLk1jIWXi3hchM-uTBM.roa (hash: NhWJmyJNB4sc9UZdlJ419SqvZ3IVwqNXUyuWTH42r1U=)
2: TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl (hash: YB7TDzQVNPvM3Od2BmYH7aBGmoTmqaFUh4LYZK9crgE=)
3: fziBQYI5VQChSmnvHhKXUMLYNKw.roa (hash: NEQyAGhhDS5WgZXodzUc9okNLj3B3fbMtY+K4TNZzLs=)
4: n7v5YOrSFGoXqVJ0PeytCrFgOLg.roa (hash: +oN44CijE7GRp64D6SkmoV+lAs+Tba+IrPKezC+0CLo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:6b:0e:64:da:7b:0d:9c:88:d2:55:09:0f:3d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cad0397487799e2118ff4cbcf8f159747f35891
Validity
Not Before: Jan 31 17:00:20 2025 GMT
Not After : Feb 1 17:00:20 2025 GMT
Subject: CN=d2d40b645ee4e4636f376f4c6c563d8783f93d2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b8:41:5a:bf:69:a4:bf:7b:3f:22:0c:35:f4:
70:18:38:81:91:19:c6:38:9f:9c:88:c2:98:9a:5c:
6f:5b:a6:d4:ff:1b:51:c7:79:39:83:10:39:45:98:
f1:f7:f9:95:6f:30:f9:a0:09:62:c4:19:62:29:61:
f7:40:00:46:96:9c:f8:87:31:42:d6:08:b0:2b:9d:
12:80:12:6b:41:82:ca:15:6f:93:6e:6d:b8:42:df:
9c:51:e7:09:3b:33:ca:6c:73:b5:ed:e4:d4:02:92:
25:c0:e3:73:98:df:c7:0d:ae:0a:00:61:6a:89:34:
c1:97:14:4d:95:e9:94:f1:66:a0:a7:84:28:06:98:
54:f9:a5:19:d9:93:b7:4c:3f:fa:a1:28:d8:89:1b:
24:67:2b:dc:83:2e:21:5b:04:bd:af:29:68:00:59:
f5:37:f4:4e:27:ac:c4:42:e1:43:8e:1e:d7:e4:d6:
3f:95:85:fb:8d:ea:28:44:64:9b:ac:51:81:fb:16:
d4:0c:b5:83:21:71:81:5c:f1:fe:d0:4d:ad:0c:42:
ab:3e:82:25:21:2b:a7:e8:b9:7e:4d:7e:9b:80:38:
3b:3e:18:15:cf:42:9b:52:a2:7d:a6:1e:60:9f:f0:
c8:28:a6:2d:9d:cb:8b:2e:69:b5:33:b3:49:aa:8b:
e8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:D4:0B:64:5E:E4:E4:63:6F:37:6F:4C:6C:56:3D:87:83:F9:3D:2F
X509v3 Authority Key Identifier:
keyid:4C:AD:03:97:48:77:99:E2:11:8F:F4:CB:CF:8F:15:97:47:F3:58:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TK0Dl0h3meIRj_TLz48Vl0fzWJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/ea0196-ab79-42cf-ab2b-fc4b03710ae0/1/TK0Dl0h3meIRj_TLz48Vl0fzWJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:1d:b5:7b:5e:9b:27:e4:90:3e:3c:f4:ca:7a:d5:8d:74:0b:
13:94:11:48:7c:fa:a7:64:94:0d:41:bc:ad:13:cb:de:6b:70:
e8:67:5f:97:d1:a7:3a:3a:74:14:69:6b:8c:40:e3:d6:9c:fb:
01:22:74:1b:2a:e5:4f:14:31:61:3f:dd:96:a5:1c:0f:d0:1a:
84:c0:54:5f:b3:34:3d:47:bb:e7:c3:2b:9f:41:ef:82:75:f5:
c7:5d:43:5c:25:26:e6:5d:08:30:78:fa:f5:47:17:fc:0c:f7:
53:65:66:9a:57:06:49:33:a4:b4:5e:c2:8a:c6:e9:78:42:98:
5f:46:48:00:e4:3d:0b:a4:71:35:1c:7f:90:0d:e9:c9:8e:a2:
3e:9d:e7:8f:76:65:c6:e1:b2:7c:02:14:f1:07:31:11:5e:3b:
ac:d6:08:48:6d:0a:79:b8:60:eb:eb:0e:36:02:63:bb:12:5d:
2d:93:ef:bb:77:8c:4a:3d:9d:58:03:25:be:65:12:ca:14:9b:
c3:33:65:60:dc:12:1c:95:14:04:aa:96:9c:0e:df:ec:70:4a:
6f:43:a2:f6:89:d2:8d:43:70:ae:3e:33:53:df:95:7e:77:fd:
4a:de:bd:a9:2c:05:bd:45:b2:63:c0:94:40:98:cc:b1:aa:67:
d7:e5:60:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:39 2025 by rpki-client