Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
File: TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft (raw, json)
Hash identifier: M0LjcK7ww/6AndJiOffIr0LfGW+sc/isudmZjMWqLTI=
Subject key identifier: BF:10:FE:5E:C1:C5:C2:1F:65:22:D5:C4:6E:D7:7F:D4:D8:D4:C4:B1
Authority key identifier: 4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
Certificate issuer: /CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Certificate serial: 0194BC3BF722647E7AF0E3537DC44060C497
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
Manifest number: 0B6F
Signing time: Fri 31 Jan 2025 12:00:33 +0000
Manifest this update: Fri 31 Jan 2025 12:00:33 +0000
Manifest next update: Sat 01 Feb 2025 12:00:33 +0000
Files and hashes: 1: TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl (hash: 86xlv4GpDN3y+QatO0ITrbdQnFuOqT5vUrCXJJGLPjk=)
2: k_nIf6wVx1Xdxat4zYtnBqTL13Y.roa (hash: HaoM7rJ6dUREUsX3C7dLkVUY9dcgJCaHV1PnH/ISMtE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:f7:22:64:7e:7a:f0:e3:53:7d:c4:40:60:c4:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c33c0e14d57eabc3b65e38a7736bebe49092e9e
Validity
Not Before: Jan 31 12:00:33 2025 GMT
Not After : Feb 1 12:00:33 2025 GMT
Subject: CN=bf10fe5ec1c5c21f6522d5c46ed77fd4d8d4c4b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:af:8d:66:78:6c:cd:8a:09:fd:a6:8c:86:8e:
b9:d1:33:36:e7:91:f6:d6:ab:08:5d:d6:c2:c0:8e:
db:ea:f0:4c:95:6a:6a:1e:fe:6b:c4:7b:bf:6d:f9:
ed:1d:e7:59:8c:35:cc:dc:c7:e0:33:f4:d9:2b:ea:
a0:db:68:cf:db:86:f2:31:e1:91:3d:f5:5c:09:78:
04:d0:22:b8:17:64:c1:06:93:ba:3d:55:af:45:6d:
06:eb:2d:99:90:0c:74:a4:f4:99:63:02:03:db:7e:
aa:12:e1:f6:93:11:fe:01:86:a9:f9:65:bc:60:1b:
fd:fd:b3:6c:01:37:98:0f:0c:c3:cd:3c:98:00:45:
0a:8c:5a:da:7a:26:38:c3:bd:92:fd:40:dd:f0:33:
19:5a:e4:44:42:c7:04:1f:a5:db:2a:1b:87:57:76:
41:67:3f:ef:ab:a8:8c:f1:66:56:bf:2c:d4:19:96:
c9:6b:b8:14:f8:e7:2f:c9:50:93:73:65:c1:18:64:
65:8c:a9:69:36:a2:33:62:b5:8e:3f:3f:aa:b4:5d:
b7:0a:76:1d:a0:91:7a:b2:2c:69:6c:63:5f:4c:57:
bf:d6:77:5a:d5:1d:b6:ab:65:51:92:f8:c2:fa:35:
f5:e0:6f:d1:60:6a:3d:8f:59:10:e1:87:e1:1c:a1:
22:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:10:FE:5E:C1:C5:C2:1F:65:22:D5:C4:6E:D7:7F:D4:D8:D4:C4:B1
X509v3 Authority Key Identifier:
keyid:4C:33:C0:E1:4D:57:EA:BC:3B:65:E3:8A:77:36:BE:BE:49:09:2E:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDPA4U1X6rw7ZeOKdza-vkkJLp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/c72abe-32dc-4f18-905f-c1ff056fc76f/1/TDPA4U1X6rw7ZeOKdza-vkkJLp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:e7:11:e9:0c:df:f8:7f:1d:8d:0a:25:ec:1b:c2:ce:34:2e:
15:f9:1f:17:ef:81:46:f4:e3:e8:25:4c:90:d9:44:6e:6d:f0:
bb:67:5a:f7:95:81:26:e2:9d:bf:24:f5:85:ee:dd:51:07:6e:
26:19:21:02:55:fe:7d:02:25:1f:ef:d6:c0:37:5c:46:a7:4b:
09:bc:5c:7c:cb:7b:2f:a5:85:4d:49:6f:be:ca:ff:94:5d:47:
de:34:3c:55:9c:ab:f3:a4:ea:53:d8:52:c5:95:53:14:42:ea:
49:3e:f7:1c:a8:a7:6a:93:af:f7:ea:e1:a8:42:68:08:f9:62:
90:38:e6:ff:b7:7f:97:e1:11:26:1e:60:4a:27:f4:17:d4:cf:
1c:a9:da:ed:70:ea:f7:7a:09:a2:9c:98:9d:73:b8:8d:94:35:
03:4e:80:c3:ea:e1:52:51:7c:9f:b7:ea:35:78:cb:70:50:c7:
dd:25:7e:08:10:07:ef:24:91:21:b2:04:ac:63:f9:bf:c2:84:
f1:e8:a3:37:74:5c:1c:d5:62:e9:f8:bc:98:1a:06:ec:3c:5f:
7d:d9:36:d4:84:e0:95:58:0e:b5:c4:79:25:bf:f0:01:65:b2:
79:cc:a6:31:d0:c0:aa:8e:2e:6a:b0:7a:c0:ae:17:9e:2c:2c:
f7:f9:a1:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:35 2025 by rpki-client