Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
File: TjwBugxcvyCuPpPKPTeeYt9clZo.mft (raw, json)
Hash identifier: 9WLFtT36Eye7f6jmfKM04Orr3fxsqtBSsnjjoT5B1bA=
Subject key identifier: 04:8C:35:73:C9:D6:31:4A:51:AD:15:B9:1C:DB:19:6F:27:F2:44:02
Authority key identifier: 4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
Certificate issuer: /CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Certificate serial: 0194BC732101A1E639D6FC7B9E2E677175F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:49 +0000
Manifest this update: Fri 31 Jan 2025 13:00:49 +0000
Manifest next update: Sat 01 Feb 2025 13:00:49 +0000
Files and hashes: 1: NYiqXRmP7nBBaBEa9iT79WYJ0gs.roa (hash: UqGys13kNv1mtJhLUKGkAEs9pExc7CtEz6E2KnEqZvM=)
2: TjwBugxcvyCuPpPKPTeeYt9clZo.crl (hash: E74wIps7+h09hihwucOt70X4gH2UnZ+l9mJOpVyOWr0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:21:01:a1:e6:39:d6:fc:7b:9e:2e:67:71:75:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e3c01ba0c5cbf20ae3e93ca3d379e62df5c959a
Validity
Not Before: Jan 31 13:00:49 2025 GMT
Not After : Feb 1 13:00:49 2025 GMT
Subject: CN=048c3573c9d6314a51ad15b91cdb196f27f24402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:01:a2:c1:27:1b:e5:43:4c:75:a4:32:28:c6:
55:54:2b:b5:dc:5d:df:97:0b:ab:76:26:24:ba:9b:
6f:06:e9:ff:a8:7f:4c:a5:79:e3:45:bf:8c:f5:5e:
6c:55:0a:a7:c4:5e:6a:a4:b0:d6:ab:68:65:18:d7:
22:ce:d8:cf:23:f3:c3:cf:bb:3a:e7:03:c9:34:fe:
30:d6:97:8f:63:61:0c:1b:62:c4:43:f0:88:93:c8:
28:4a:d4:c8:63:7b:77:90:da:fd:bc:77:b6:ec:ac:
1b:ef:2d:55:9d:f6:64:28:10:30:26:7a:06:0c:93:
1f:3d:7a:1d:55:72:05:29:5a:ee:27:0c:d9:37:81:
aa:77:a4:f7:f5:87:65:b4:76:ef:8c:d4:ea:ed:5d:
d8:23:31:f9:87:e0:3b:2f:19:db:0b:dc:70:90:dd:
ed:34:3d:85:60:0c:6b:ac:0d:fc:0f:a9:3c:db:ff:
76:53:65:a6:5f:fd:6a:c0:f1:3e:fb:e0:a5:df:f6:
6c:79:12:c3:9b:c4:d6:15:23:d5:e1:e9:8f:7e:76:
97:36:c8:fc:64:8c:36:f1:07:a4:9c:33:42:a4:cc:
0e:9f:f5:8f:ef:2f:ad:58:e9:bf:b3:b1:8a:4e:b3:
57:d0:d4:60:53:47:e8:1b:7f:be:01:9f:c1:11:73:
0f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:8C:35:73:C9:D6:31:4A:51:AD:15:B9:1C:DB:19:6F:27:F2:44:02
X509v3 Authority Key Identifier:
keyid:4E:3C:01:BA:0C:5C:BF:20:AE:3E:93:CA:3D:37:9E:62:DF:5C:95:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TjwBugxcvyCuPpPKPTeeYt9clZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b8e773-4e71-4d09-b74a-b27f552672e0/1/TjwBugxcvyCuPpPKPTeeYt9clZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fa:bb:02:8d:3e:90:01:cf:e1:30:43:14:c7:22:6c:50:a0:
42:b4:1c:b8:90:23:5d:de:21:96:d8:ef:81:98:ae:e6:39:aa:
9d:c0:25:94:f5:c6:83:fb:07:a0:db:3f:d2:6e:70:43:15:f0:
62:49:f1:a7:37:30:b8:71:69:bf:03:52:bf:8c:5c:0e:4e:26:
7e:33:c2:45:eb:91:d7:66:8e:75:bd:fa:94:fc:13:cf:98:b3:
fe:f7:f7:5e:56:ad:83:6d:47:4e:82:a3:a4:6f:6c:c3:ea:78:
25:8c:9c:89:0a:86:61:4a:c7:60:c1:42:16:f5:48:d6:f4:36:
d2:64:49:f5:e6:ad:3a:5f:63:fa:18:9d:08:50:06:ef:a3:b8:
80:43:6e:ea:ee:6d:9d:a6:50:bd:e4:6a:54:18:93:88:93:de:
10:a9:85:35:f9:4f:fd:42:8f:45:27:20:a1:a3:25:7c:15:b9:
7e:68:85:cd:99:73:45:99:9d:07:08:8d:85:41:1f:19:d0:87:
1b:fa:52:39:5d:94:93:cf:35:29:26:e3:d7:07:c8:e5:bc:25:
21:3d:24:f2:9a:1a:9b:36:6f:6c:5e:6b:b8:44:b9:e0:67:7e:
68:66:37:fa:28:14:83:3c:1e:4a:7c:f8:0f:f6:66:68:d2:33:
3a:b5:d8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:59:17 2025 by rpki-client