Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
File: Tg854squjizxS8xBsj88huGnIPg.mft (raw, json)
Hash identifier: OnhK+m6lVJbshG1Z75DMxkW7nxLPVTwNYxL57Pewb+0=
Subject key identifier: 64:69:59:05:C7:78:68:A3:D4:71:12:A3:8C:93:94:07:06:7A:09:9D
Authority key identifier: 4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
Certificate issuer: /CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Certificate serial: 0194BC72E03153CE508F111F5F4F5097FA82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 13:00:32 +0000
Manifest this update: Fri 31 Jan 2025 13:00:32 +0000
Manifest next update: Sat 01 Feb 2025 13:00:32 +0000
Files and hashes: 1: 3NL0_43JO4ViZMUt6FOGd4wRJes.roa (hash: iMUE0vTHXLYCmLZqj0qdPBpz5FgK9qmOUf7yFoe48OI=)
2: 4pgipsDtjzVZOnA4qzWqk83-xSA.roa (hash: nd8vlth0pBWJ/Is/avNVqT3xb/Gc3yDSmhppSZMRqxM=)
3: Tg854squjizxS8xBsj88huGnIPg.crl (hash: GQ/c7B+AOGP8OTVtGBQQJCvXK3dtdm5JADlBOsnLISg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e0:31:53:ce:50:8f:11:1f:5f:4f:50:97:fa:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e0f39e2caae8e2cf14bcc41b23f3c86e1a720f8
Validity
Not Before: Jan 31 13:00:32 2025 GMT
Not After : Feb 1 13:00:32 2025 GMT
Subject: CN=64695905c77868a3d47112a38c939407067a099d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:b9:6e:a3:3e:0d:e8:3c:7d:93:ae:63:20:
ad:19:1a:6b:c4:bb:12:ed:a0:7e:a8:fd:2c:de:ff:
72:dd:12:40:43:53:b5:ae:14:49:cd:bd:ea:e9:08:
e1:2b:cd:d7:8a:5f:7c:8a:94:ea:7f:67:4e:4e:72:
f8:8b:f8:71:bd:c9:37:e4:ba:38:14:57:6d:d5:00:
cb:d6:e2:e6:e4:a6:9c:ba:8e:96:af:cd:14:10:1c:
ae:0e:3a:03:fc:1e:22:e5:a7:1a:64:68:13:f3:93:
87:f4:72:d8:aa:ad:0b:e1:ee:71:ea:62:3d:0a:01:
7b:05:21:5b:93:0e:2f:53:b6:46:59:d2:37:db:50:
f6:be:a7:c1:38:04:af:8c:c7:e7:82:d5:2f:f2:53:
18:52:f1:8e:78:c3:51:b2:d2:d9:40:96:11:f9:d6:
79:43:72:e3:e3:c2:f9:9d:40:06:69:81:4a:f6:3b:
65:e9:5d:05:58:43:cd:9d:eb:4d:60:24:f3:8e:0f:
b4:4a:69:36:dd:a2:58:0d:bc:6c:3e:8b:f9:cd:ce:
1a:cf:61:9d:f6:c5:c1:f1:af:07:79:ae:05:1a:96:
28:aa:fe:7b:0b:ca:a9:54:76:fe:be:d9:20:c4:6f:
77:90:33:30:02:fb:69:45:8c:b9:66:7c:f5:c7:f5:
aa:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:69:59:05:C7:78:68:A3:D4:71:12:A3:8C:93:94:07:06:7A:09:9D
X509v3 Authority Key Identifier:
keyid:4E:0F:39:E2:CA:AE:8E:2C:F1:4B:CC:41:B2:3F:3C:86:E1:A7:20:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tg854squjizxS8xBsj88huGnIPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/d5e3cc-c1cd-4d68-bec3-1b08f7f5015d/1/Tg854squjizxS8xBsj88huGnIPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:74:4e:14:04:00:be:41:97:2e:f0:cc:c3:37:9a:42:83:96:
21:8c:e0:0a:c5:64:80:04:0f:46:c5:07:af:43:db:65:f7:ef:
b4:79:44:5f:98:55:9f:df:dd:94:8d:5f:ec:57:cf:d4:23:4e:
34:9c:6a:34:8c:78:e8:10:20:51:99:06:b7:9c:af:41:05:5c:
64:e5:74:45:c9:a1:88:cf:4b:14:be:8a:41:95:68:16:ad:98:
47:46:01:c5:f6:fc:4c:fd:ce:ee:e6:9e:4f:bb:4f:f0:4d:ef:
a1:f1:20:b2:f3:79:ab:22:77:73:bf:1d:3f:62:0c:03:e3:fe:
e5:8a:57:15:a1:18:42:31:9c:9a:56:cb:d1:c6:c8:1d:28:3e:
a2:49:94:f6:f0:45:6f:7f:6a:49:a1:43:66:f7:ad:c4:4d:67:
83:2a:46:a8:d3:05:bc:ef:25:ad:e6:af:73:ff:63:3e:d0:21:
96:38:3f:68:eb:fc:48:f1:47:11:dc:ce:67:43:55:bd:66:7b:
90:5b:4b:af:8c:b1:9d:c7:e0:c4:87:aa:ed:a0:09:6a:0b:9b:
f3:10:67:b2:a2:db:9f:f8:d3:8a:51:19:0e:6a:4c:ab:a9:62:
0b:6e:06:c0:27:07:7d:f4:75:97:0e:cc:17:c5:38:4c:7d:58:
66:00:c9:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:47:08 2025 by rpki-client