Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
File: OA-TW80EhiXnAVXPLMKCniwgcqY.mft (raw, json)
Hash identifier: mQIzSVgkCFxPSITETxmVWEzSiUe/y2FkMZzXK6CPeZ0=
Subject key identifier: 5D:D6:B6:A3:37:A0:23:EF:8E:8A:4B:21:ED:FA:A0:49:40:D0:5E:75
Authority key identifier: 38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6
Certificate issuer: /CN=380f935bcd048625e70155cf2cc2829e2c2072a6
Certificate serial: 0194BD4E49DFACC9CD02B716E00CEDC0E28B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
Manifest number: 0110
Signing time: Fri 31 Jan 2025 17:00:12 +0000
Manifest this update: Fri 31 Jan 2025 17:00:12 +0000
Manifest next update: Sat 01 Feb 2025 17:00:12 +0000
Files and hashes: 1: OA-TW80EhiXnAVXPLMKCniwgcqY.crl (hash: Rnocq6e1mCvffAaGgzLMUw3RVaiXrA5L8KBLn9BkcWI=)
2: Q5qSxQZ6AuTJXsJJ-9RRWDA26wA.roa (hash: 64WIeN1+JBWLPlD+mMTcZ54izCFjiXRNJWE/ls/16OM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:49:df:ac:c9:cd:02:b7:16:e0:0c:ed:c0:e2:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=380f935bcd048625e70155cf2cc2829e2c2072a6
Validity
Not Before: Jan 31 17:00:12 2025 GMT
Not After : Feb 1 17:00:12 2025 GMT
Subject: CN=5dd6b6a337a023ef8e8a4b21edfaa04940d05e75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:96:76:04:69:bf:e2:ab:7e:28:b6:27:94:5d:
ce:44:b9:fc:91:85:1e:f2:34:73:d0:fa:df:42:49:
fd:97:79:68:21:65:ba:61:8d:09:de:bd:bc:90:c7:
69:26:ba:40:75:8c:09:39:2e:fe:3e:63:32:60:a1:
14:ba:77:cc:cd:69:0e:cc:bd:7d:1d:7c:88:17:b4:
93:d4:a9:43:d5:6b:52:50:90:be:fb:c5:5b:59:5b:
8a:50:93:06:4e:07:1e:1b:77:18:b9:f5:4d:cd:b3:
c8:9c:4f:ac:72:96:46:75:4e:3c:07:b0:1a:68:3b:
63:83:bb:31:ab:de:c9:5b:36:25:fa:0e:6f:e1:47:
9e:90:42:53:de:2f:1a:1d:3d:38:81:9a:0d:46:4e:
e0:9d:2d:41:43:2b:69:a0:8d:bf:d1:e2:95:3a:24:
79:7b:20:de:fa:56:15:6e:83:95:b8:ea:5d:e3:d0:
df:b1:57:df:aa:df:83:37:f9:62:59:40:e8:63:f4:
7a:d9:fa:54:9b:cb:49:ec:ec:7e:e8:71:f5:db:61:
ae:91:6a:83:d9:0f:2c:22:86:b7:b3:67:5b:79:a2:
83:91:04:55:45:a6:6a:73:0b:46:a8:33:b4:62:51:
07:96:11:c2:32:e2:78:4f:5b:73:22:85:2c:a3:99:
9c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:D6:B6:A3:37:A0:23:EF:8E:8A:4B:21:ED:FA:A0:49:40:D0:5E:75
X509v3 Authority Key Identifier:
keyid:38:0F:93:5B:CD:04:86:25:E7:01:55:CF:2C:C2:82:9E:2C:20:72:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OA-TW80EhiXnAVXPLMKCniwgcqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/22744a-8588-4290-b23c-6c0771f25396/1/OA-TW80EhiXnAVXPLMKCniwgcqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:c1:78:8d:12:63:97:16:a5:74:4d:eb:0e:86:54:c8:c7:5d:
bc:a3:64:49:75:8f:d0:63:3b:40:bd:15:f2:69:4b:13:2f:d4:
b7:41:d0:4b:08:a4:74:2d:80:78:bf:19:4c:c1:6a:42:56:88:
8e:0f:7e:9b:a3:b8:32:d0:f6:22:76:d6:5e:6d:80:d8:1d:f9:
07:51:f1:b8:ce:ad:61:ec:19:31:a0:75:a0:88:b6:22:98:f7:
22:63:6e:c0:b9:e3:96:57:82:2f:9f:70:05:88:4b:f1:19:56:
d0:b4:3b:71:a2:c7:91:30:54:fc:4e:b4:27:91:93:f5:81:0c:
bf:9e:05:66:8b:90:5a:c3:fa:54:80:d2:05:49:de:3e:cc:55:
3a:9b:fb:42:11:1f:a9:0e:48:71:fa:c8:96:95:c8:68:b4:fc:
69:c3:f0:f0:67:71:50:ca:ba:4d:6d:b1:91:0e:fd:db:78:02:
85:1f:27:95:77:8b:89:55:5e:73:a9:35:95:50:a7:b9:a2:bb:
30:9e:91:c7:df:ea:89:8c:9e:07:0d:70:e3:4c:81:7e:25:06:
8f:d5:e8:ce:60:9c:0d:d9:56:8c:10:14:27:5c:c3:0b:eb:82:
bb:34:94:5c:fc:b6:66:fb:b7:0a:de:a1:2a:18:d1:43:6b:7f:
d7:94:83:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:23:26 2025 by rpki-client