Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
File: TeLcLByThHv5efmwEO3EzahJ9Pg.mft (raw, json)
Hash identifier: M3aaUWWZ3dvZz6xh9BMUX+KyrC8dJ+962v/8HN+FrYE=
Subject key identifier: C4:8C:3A:0C:20:9B:90:EB:49:E9:A9:A6:9D:6A:7B:C5:F6:0B:AA:C3
Authority key identifier: 4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
Certificate issuer: /CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Certificate serial: 0194BCA9B6AB309B24FD241092E59C48DFC4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:26 +0000
Manifest this update: Fri 31 Jan 2025 14:00:26 +0000
Manifest next update: Sat 01 Feb 2025 14:00:26 +0000
Files and hashes: 1: 8JnpLlF6ouYCq_pQniNXbCodhsg.roa (hash: 3w9gQ6ISRWOwFH7sOq0mD8XYTAeUJvnIkcQX2VgiAHE=)
2: TeLcLByThHv5efmwEO3EzahJ9Pg.crl (hash: KXMMa2utC8WbyfTs1grRh+MhJHlTufR27dJhwoeRT3M=)
3: UrlGR9v18F5T4YYElfr8yqGscS0.roa (hash: fj1TXr5g11+IfyDk1z4S0+oWVp/JX8PPHR9S29gA7PE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b6:ab:30:9b:24:fd:24:10:92:e5:9c:48:df:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4de2dc2c1c93847bf979f9b010edc4cda849f4f8
Validity
Not Before: Jan 31 14:00:26 2025 GMT
Not After : Feb 1 14:00:26 2025 GMT
Subject: CN=c48c3a0c209b90eb49e9a9a69d6a7bc5f60baac3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f1:bf:6e:ab:ca:d9:7f:61:99:bc:f6:16:91:
5d:79:ad:7a:d5:1a:75:d6:f7:2c:b0:b8:13:94:c6:
c4:0e:df:d4:d7:bb:43:9c:e1:93:41:13:d0:51:fe:
12:f0:02:01:9d:3c:c0:b1:4a:09:af:45:55:ca:87:
81:3d:d6:89:51:80:6c:12:2e:63:9f:e8:f6:ec:04:
5c:1d:a8:44:26:bc:dc:b4:37:fd:35:d8:43:93:64:
ac:05:81:34:cb:c1:94:cb:1d:e6:0c:a2:b5:4f:71:
41:53:22:18:3f:87:67:e4:bb:ef:e0:6b:f8:5b:01:
82:75:c3:aa:7a:7e:65:2a:09:ea:e8:e1:84:38:40:
88:83:bb:e7:bb:bc:ac:97:cf:50:5f:f9:bd:43:60:
16:c7:40:d4:49:1c:93:de:a9:0d:dc:13:74:8a:0d:
a3:7e:27:01:26:c4:9d:cb:f0:20:5f:a7:75:21:86:
55:3e:95:08:d5:22:44:5e:92:5a:03:98:b1:84:67:
53:d2:9d:77:00:cf:84:b0:42:ec:92:9c:5f:ab:fc:
80:32:12:ec:ec:84:a2:bb:62:63:3b:ce:90:be:3c:
86:6c:3a:8f:8d:37:05:80:ae:48:9c:55:c0:bc:f3:
87:37:b9:c4:a9:17:48:38:3f:65:3b:26:d1:1b:5a:
72:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:8C:3A:0C:20:9B:90:EB:49:E9:A9:A6:9D:6A:7B:C5:F6:0B:AA:C3
X509v3 Authority Key Identifier:
keyid:4D:E2:DC:2C:1C:93:84:7B:F9:79:F9:B0:10:ED:C4:CD:A8:49:F4:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TeLcLByThHv5efmwEO3EzahJ9Pg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/27e1ca-e61f-4e8c-ad9c-145c36e38276/1/TeLcLByThHv5efmwEO3EzahJ9Pg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:6d:3a:2f:d7:3c:5b:79:f0:3c:1b:ad:c5:2a:68:bd:be:ab:
20:1c:aa:d0:cf:86:8a:95:5b:5d:bd:41:e4:07:57:4e:19:3c:
3a:ba:a4:ca:3e:63:90:a8:ad:c3:82:de:7b:04:bf:cf:77:8d:
83:82:62:3f:07:88:7e:62:b3:19:87:91:b9:d7:ff:a4:c3:be:
1e:b8:ec:fe:07:ee:b2:e8:da:9b:d6:b6:9d:b9:06:36:2c:d5:
b7:bc:8a:22:6f:2c:54:5a:1a:e1:85:8d:6f:76:b2:36:85:fa:
78:b9:ea:95:d6:9d:ec:50:a7:f6:eb:fb:a5:13:2f:a8:50:0f:
58:bd:e5:5b:da:ed:09:fd:b4:f4:d7:e9:b7:55:1a:ed:18:54:
ec:77:f3:b8:af:0b:33:20:61:8c:94:ed:db:c4:be:48:a5:0a:
d1:99:33:39:98:9e:fc:39:6d:3b:bd:af:22:66:16:aa:ca:3e:
6e:bf:21:e6:a5:c6:9c:bd:23:f6:b0:69:c9:d7:3f:66:27:ff:
0f:c3:cc:ff:c1:d6:1e:6b:9b:9d:04:94:43:f1:90:77:a0:52:
d1:f7:b5:be:85:0c:83:4a:46:c4:f1:1f:ee:9c:a7:39:db:a9:
cd:8a:b6:25:a5:df:51:bd:be:8c:85:47:db:56:84:3c:4d:f3:
74:ba:02:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:35:08 2025 by rpki-client