Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
File: TphKWkt4CLtOoy0xC90H7MlXURM.mft (raw, json)
Hash identifier: UtppJdneRxB1CacXOAUNlkcvJmzAzhur8B8o086+Pso=
Subject key identifier: 02:A9:F1:28:69:E4:6B:CB:D7:EF:EB:39:24:DA:02:40:F0:01:50:5D
Authority key identifier: 4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
Certificate issuer: /CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Certificate serial: 0194BD17EE6CD7959B3E9FA4C89042F14B8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 16:00:49 +0000
Manifest this update: Fri 31 Jan 2025 16:00:49 +0000
Manifest next update: Sat 01 Feb 2025 16:00:49 +0000
Files and hashes: 1: 8ZKbnPniu913SnjXvn3kXFXoTm0.roa (hash: 5HixzWr+kvtOLRKOe0GySJFEoBIN8n7Szdz/SR3iCoA=)
2: TphKWkt4CLtOoy0xC90H7MlXURM.crl (hash: m9WPdfFgEQ3v/Ie9Caa6EqtOrfoBlKMplR1X2j6DGsw=)
3: c5p1cEEnGb5RFBRHp7Sxm_tjKvM.roa (hash: M29Br9NKk77+hhhlGq1bhWv7l0daFqIJWaEI7ntt2wY=)
4: iDLcfc6aCabj7RN8rRXRQoXvHeA.roa (hash: UvXUgafoqKLsjB+HeAD02OLRE2t5kuX7jZTUuLZ1nRA=)
5: u6tKtCCW-Dj0-HkdzJ6yaeEuRAI.roa (hash: dfQrij6E/OioNCwBaUVfNrimg1NkdqgGbAXbWqoJr0s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:ee:6c:d7:95:9b:3e:9f:a4:c8:90:42:f1:4b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e984a5a4b7808bb4ea32d310bdd07ecc9575113
Validity
Not Before: Jan 31 16:00:49 2025 GMT
Not After : Feb 1 16:00:49 2025 GMT
Subject: CN=02a9f12869e46bcbd7efeb3924da0240f001505d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:40:5a:6f:ea:2f:52:4c:e1:4f:ce:50:9e:
22:41:5d:41:2e:df:9a:50:33:f7:76:d2:e4:f1:b5:
90:1c:e1:f6:54:1b:eb:c5:1a:53:9d:44:40:e2:61:
ee:d7:63:09:7b:43:f9:04:2d:3f:af:7b:31:1f:a1:
a2:cf:47:95:2c:ce:3f:9b:f2:d6:bd:8a:2a:f8:f2:
05:40:06:59:9b:26:46:8a:eb:91:4c:29:93:2e:55:
1d:09:d1:db:ed:b4:22:4a:cf:51:fb:0b:8b:ac:e8:
a7:f6:d3:b3:59:8c:41:8d:6b:04:b4:cf:ad:8b:29:
a3:e5:e3:03:b3:59:c9:b0:6c:c4:4c:c2:10:86:e8:
6a:f6:07:25:b2:81:73:31:ad:1b:57:d6:27:93:ab:
c1:71:97:4b:10:01:cb:32:06:e3:fe:4b:1c:3c:9b:
d9:d0:93:15:4e:a2:93:cc:11:d0:a0:dd:24:97:c0:
d4:d7:69:50:ed:86:4d:a1:97:18:13:85:a8:94:bb:
c0:1c:1e:65:f0:7b:03:11:5d:5d:22:10:f0:0b:80:
3f:d9:eb:d1:d8:a0:fc:db:c4:f1:c8:4f:09:5d:62:
db:bb:b9:fb:e4:b3:86:60:64:07:b7:77:49:ec:1b:
59:1b:aa:42:82:92:9d:f8:c3:dc:e8:51:cf:4f:d8:
42:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A9:F1:28:69:E4:6B:CB:D7:EF:EB:39:24:DA:02:40:F0:01:50:5D
X509v3 Authority Key Identifier:
keyid:4E:98:4A:5A:4B:78:08:BB:4E:A3:2D:31:0B:DD:07:EC:C9:57:51:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TphKWkt4CLtOoy0xC90H7MlXURM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/41dec1-1eb1-49c7-9d50-ca595e34d5ac/1/TphKWkt4CLtOoy0xC90H7MlXURM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:32:a1:54:3a:d2:1d:5d:9d:60:89:db:07:2a:6e:e7:bf:74:
c5:58:12:45:46:9c:99:30:f4:0e:01:74:f9:92:ef:56:f7:9b:
72:2e:85:ef:d3:7a:af:24:e2:4e:c2:2e:82:72:5a:cc:60:35:
7a:a0:fa:2b:ff:89:bf:16:f9:79:eb:34:15:26:23:99:55:64:
83:01:b0:b4:f0:a8:1c:ed:e0:c3:be:f4:7a:ef:5a:c6:6e:a9:
c8:33:e1:82:bb:ee:40:0c:84:6e:c6:81:96:fc:c0:14:0e:1a:
57:f6:21:41:14:39:cf:19:f3:92:a0:74:57:cb:40:05:54:05:
4b:c9:7c:a6:1c:38:4b:5c:64:14:51:c0:33:6c:20:2b:29:b3:
fc:bc:43:1b:d3:09:29:cc:6a:c7:ae:11:db:04:6f:04:41:7d:
07:12:f8:2f:8c:98:a9:c4:f5:61:41:ba:fd:c3:c9:7b:c3:dd:
89:33:46:ab:c2:49:e8:fd:af:ba:59:40:8a:ae:63:a5:d5:32:
9e:a5:15:3e:bf:9d:e5:05:06:b1:08:e8:fa:9d:0c:8d:d7:1c:
fa:20:f6:89:7f:72:4b:fc:b3:ba:47:99:5d:71:7e:20:93:30:
cc:02:96:99:2f:b8:b3:bb:0c:e5:80:bb:fb:ed:8a:0b:b3:7b:
de:52:b4:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:38:09 2025 by rpki-client