Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
File: ta-je9Ddret_6iub5ksRCOIN6bQ.mft (raw, json)
Hash identifier: +eYuMv3rSMSeLs44nliZ3j/USligxesUdiXMESGRDLI=
Subject key identifier: 06:AC:63:30:C1:E2:8F:A7:19:8B:01:83:36:F3:41:61:50:DF:26:12
Authority key identifier: B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
Certificate issuer: /CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Certificate serial: 0194BD85AF14D0CB3E3A4F5D31EFB560D4F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
Manifest number: 1170
Signing time: Fri 31 Jan 2025 18:00:42 +0000
Manifest this update: Fri 31 Jan 2025 18:00:42 +0000
Manifest next update: Sat 01 Feb 2025 18:00:42 +0000
Files and hashes: 1: mJjVswqJCImXFIfLNVQUN-4uUdk.roa (hash: DosrMdzjq3Eycyg5Q50hyIlvtZ+n1SZeoLumI7BJMn8=)
2: ta-je9Ddret_6iub5ksRCOIN6bQ.crl (hash: Nz4YGczVP0Q7gvGqvXbTkZdcezYy03yq8cdhJ82geBo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:af:14:d0:cb:3e:3a:4f:5d:31:ef:b5:60:d4:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5afa37bd0ddadeb7fea2b9be64b1108e20de9b4
Validity
Not Before: Jan 31 18:00:42 2025 GMT
Not After : Feb 1 18:00:42 2025 GMT
Subject: CN=06ac6330c1e28fa7198b018336f3416150df2612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:54:dc:fa:bd:e1:e9:52:7a:55:af:31:43:f3:
9c:cb:65:ea:36:84:40:4a:de:76:a7:6f:31:2a:b5:
fb:b3:7d:3d:a3:49:39:b9:89:83:7e:f9:94:a1:72:
8a:2b:62:6a:ed:33:90:fd:e4:7a:fe:8a:52:79:f0:
63:b8:56:50:e1:e6:7d:30:1e:e8:46:3d:d4:56:d8:
95:98:b7:2e:d6:1f:e4:7a:9a:8d:26:59:09:57:98:
3d:ba:4c:58:95:85:92:02:22:3c:6d:6c:4d:88:f8:
6b:ec:dc:50:67:39:d9:05:4b:3e:14:75:54:1e:4d:
61:90:a0:7d:ea:d4:77:3f:51:fb:30:bd:26:2b:15:
c2:9f:b0:b8:90:d2:be:cf:28:62:ab:be:f5:01:5a:
d3:d9:ef:fe:0a:29:4b:2e:c2:26:14:0b:4e:d7:5d:
a2:17:bd:86:96:48:97:68:79:e2:53:23:56:1a:d9:
75:26:d4:7f:96:44:47:a9:fe:71:ab:09:79:40:dd:
a8:14:de:17:ac:af:7f:21:56:47:62:2a:4f:80:b0:
d6:a1:25:ff:5f:89:63:ea:28:22:42:8b:98:b1:12:
45:13:63:b5:45:9d:c4:21:17:3b:30:9f:47:18:0e:
69:b3:fc:7b:b1:fd:55:02:68:a6:d1:88:97:95:35:
ad:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:AC:63:30:C1:E2:8F:A7:19:8B:01:83:36:F3:41:61:50:DF:26:12
X509v3 Authority Key Identifier:
keyid:B5:AF:A3:7B:D0:DD:AD:EB:7F:EA:2B:9B:E6:4B:11:08:E2:0D:E9:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ta-je9Ddret_6iub5ksRCOIN6bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/8baa9c-0ef2-42fb-b3d6-5a95cc80cd1b/1/ta-je9Ddret_6iub5ksRCOIN6bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:a6:45:c5:52:8c:6d:e5:c4:6c:d1:b5:d0:26:2e:83:92:90:
aa:57:27:8e:b6:13:55:58:c0:e3:dc:0e:3c:99:9d:95:1d:17:
06:a7:64:21:bf:73:c1:37:f4:9f:ce:90:be:76:2b:84:cb:5d:
37:6c:fd:e3:1a:fd:74:b8:47:eb:f9:30:45:fe:0a:ee:ae:d2:
b1:3f:46:4d:2f:d9:a4:35:1d:55:99:90:6b:ea:50:61:a9:49:
7e:35:62:68:aa:ed:f2:6d:d3:95:33:89:12:a8:76:f4:89:9b:
28:21:2e:40:b7:75:a3:45:f7:61:f6:37:0f:49:14:9e:23:68:
a9:1e:6b:3a:55:d9:88:f9:d6:77:04:91:d0:9c:79:3b:0e:08:
f8:a9:2b:6f:bc:67:5e:de:ff:66:02:71:ab:86:7a:aa:ae:b1:
73:eb:9e:49:fa:6f:e8:57:fa:17:65:2e:ae:22:07:01:39:7b:
fc:34:08:93:d6:28:43:f6:ff:ac:d5:9d:5c:fc:25:28:d6:7f:
c0:e8:aa:71:69:0b:a9:a9:85:66:dd:3c:4b:31:75:82:3a:0b:
45:b2:62:4d:1b:79:5e:c7:56:c1:b6:55:9c:78:f7:bc:67:ef:
38:c7:53:6b:82:99:74:ee:a9:6f:db:c0:6d:d3:3f:de:64:98:
b0:d0:47:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:31 2025 by rpki-client