Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
File: TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft (raw, json)
Hash identifier: YET/9UnxaQrbPwDyR6oI+jN4HyqAPhfTDerWucH2RVY=
Subject key identifier: EA:59:B3:61:CA:C8:5E:0F:E5:9B:8B:C2:00:15:81:F8:B6:42:F4:8B
Authority key identifier: 4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
Certificate issuer: /CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Certificate serial: 0194BC3C428958A7317B0D5ABDAC3F317593
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:53 +0000
Manifest this update: Fri 31 Jan 2025 12:00:53 +0000
Manifest next update: Sat 01 Feb 2025 12:00:53 +0000
Files and hashes: 1: 2-8ODfbSISRCVrFLypE1beop4mI.roa (hash: CTu3Z/KQAufmJs+pAxP0V5GvviRUTQPwl9gEk4hUm6E=)
2: TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl (hash: HwlP6Y/S9UTF7ucNvuet1U/GfvdEvaZGFTG0j8xQQbA=)
3: xOYkGw3SqmDNjUBUXBvZW0U-4J4.roa (hash: CMrEVMiwQAaT7qSr6cVaZ45q/VR6zzPcJBOroZoc7n8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:42:89:58:a7:31:7b:0d:5a:bd:ac:3f:31:75:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d3f54f304e6b851608c293978b16ba51ac0350e
Validity
Not Before: Jan 31 12:00:53 2025 GMT
Not After : Feb 1 12:00:53 2025 GMT
Subject: CN=ea59b361cac85e0fe59b8bc2001581f8b642f48b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:95:f6:06:53:15:d0:4c:e2:11:29:c7:4f:a4:
60:97:c5:3d:64:72:d2:7a:5f:8d:9f:a6:b4:d7:1b:
2f:f3:f5:fe:f5:ba:b5:3c:ae:65:2f:c3:cf:8c:99:
10:3b:c7:42:5f:49:03:59:5f:47:65:1c:86:7a:49:
b8:94:d4:82:53:79:17:52:db:f3:e9:61:9d:92:4c:
93:d7:bd:74:45:7d:31:2a:0b:c5:16:ee:41:e0:b6:
ec:ca:d2:5d:43:b6:5e:d4:bc:45:d1:97:62:ea:01:
55:84:44:33:61:53:4f:0e:60:a3:e0:c2:2b:cf:51:
e9:bc:42:cc:2a:88:d3:bb:20:c9:30:83:b1:1b:2c:
ac:66:d2:52:18:b8:ac:bf:c0:67:73:c2:72:6e:52:
e5:67:66:09:39:ec:42:d5:0f:da:82:af:4c:c3:92:
30:97:5f:6d:93:39:39:54:8e:d8:ba:a7:5e:16:aa:
2a:74:5c:5f:81:3c:df:c0:2d:38:4e:15:83:4d:c5:
a3:f9:8c:99:20:bc:a2:df:b1:4d:a7:62:aa:b6:55:
b6:67:99:61:f0:aa:22:7a:bb:f5:18:25:0a:f5:8a:
3e:71:74:09:64:08:d9:64:af:86:78:0a:24:7b:7a:
fa:6e:71:f0:a1:6f:70:d8:10:e8:3c:23:dd:5b:79:
96:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:59:B3:61:CA:C8:5E:0F:E5:9B:8B:C2:00:15:81:F8:B6:42:F4:8B
X509v3 Authority Key Identifier:
keyid:4D:3F:54:F3:04:E6:B8:51:60:8C:29:39:78:B1:6B:A5:1A:C0:35:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TT9U8wTmuFFgjCk5eLFrpRrANQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/b737f6-304b-4c4f-b887-71108258f1b9/1/TT9U8wTmuFFgjCk5eLFrpRrANQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:97:c8:c6:4c:46:30:c4:f6:37:3a:00:2d:7d:77:a4:53:33:
d7:68:86:71:09:f8:56:6b:33:56:16:07:14:0c:40:d2:db:3c:
b5:33:45:84:46:2f:a0:7e:b6:84:77:ce:14:74:c8:26:91:2c:
1f:57:cb:58:b7:43:03:c1:75:8e:fd:e7:35:26:71:36:fb:e3:
65:ee:6c:3c:10:6c:dc:ce:2f:1b:04:6f:fb:eb:ed:9b:15:f3:
77:41:c3:18:72:6e:32:2b:ef:0c:2d:50:69:c2:83:60:10:89:
7e:03:02:d5:3b:fb:2c:db:2f:f9:54:0b:65:d7:61:d3:8d:8b:
23:b2:50:b7:23:3e:5b:15:7e:c3:33:c5:70:34:5a:16:7a:3a:
0d:b2:b6:2e:0b:b4:e2:74:90:ec:af:f3:4f:65:99:a8:ea:6f:
ff:8e:f7:ac:f7:ba:c8:0e:f3:a8:67:32:39:dc:52:73:ab:24:
00:89:48:fe:b7:96:e6:f2:25:56:0f:8c:41:2e:b4:00:f2:b7:
fc:10:ab:9d:27:c0:3f:47:83:7e:f3:14:e8:e7:a9:e6:8f:9a:
58:fc:1b:3e:8e:63:b7:31:6c:d2:bd:61:b2:46:a9:bd:7b:5b:
35:2e:b2:71:d0:dc:11:ba:df:cc:65:2d:52:37:69:c1:96:fd:
7a:30:ea:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:22:51 2025 by rpki-client