Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
File: TweIqtIqxDcNUYy3-53-cktB-Vc.mft (raw, json)
Hash identifier: zviHNN2byDKPX+kdboeUr7Z70KI3NeESqEBFedU6pOw=
Subject key identifier: F3:AE:85:79:5B:3D:98:E5:75:01:AC:3A:03:11:7A:67:C3:E0:19:77
Authority key identifier: 4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
Certificate issuer: /CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Certificate serial: 0194BD4E9F25F05269DC91474BD482CB46CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
Manifest number: 1040
Signing time: Fri 31 Jan 2025 17:00:33 +0000
Manifest this update: Fri 31 Jan 2025 17:00:33 +0000
Manifest next update: Sat 01 Feb 2025 17:00:33 +0000
Files and hashes: 1: TweIqtIqxDcNUYy3-53-cktB-Vc.crl (hash: H52pgIsqdPXjZgNmbQySZgWOsYSkOiIL6ll0Nevufh8=)
2: VcLRSmks30Rrzb_V-4cS_8CDrdU.roa (hash: ARDeLfHH2zFG0qHV/LfjEyCOKnPBbv+U4ABprvSu0Wc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9f:25:f0:52:69:dc:91:47:4b:d4:82:cb:46:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f0788aad22ac4370d518cb7fb9dfe724b41f957
Validity
Not Before: Jan 31 17:00:33 2025 GMT
Not After : Feb 1 17:00:33 2025 GMT
Subject: CN=f3ae85795b3d98e57501ac3a03117a67c3e01977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:7a:10:00:ec:94:f0:33:d5:52:d4:71:0d:8d:
1d:8c:b9:28:96:f4:c9:2f:64:13:16:3d:0b:ea:0e:
a2:e2:2c:58:7a:79:ae:7e:b0:a1:e9:71:0c:27:21:
10:2c:66:da:06:9e:2c:4b:01:1c:67:c3:67:42:99:
32:b3:23:95:0b:a0:9c:49:8f:e6:a4:1f:a3:7c:20:
da:ad:18:fa:26:54:f5:49:98:7d:03:32:37:69:28:
ef:22:f2:39:32:f0:8d:6c:9a:93:85:7c:93:97:db:
77:5e:fa:98:1c:0d:38:50:a9:5a:57:5c:e4:e9:0f:
d1:f3:d6:06:97:7f:23:ee:3c:86:05:03:c6:f1:17:
ef:b0:08:72:db:9b:68:e6:4d:9b:89:bf:91:63:de:
cf:2f:23:6c:b8:11:b7:fc:82:25:94:17:af:43:ab:
ea:b8:8a:4d:03:bc:e3:f9:ce:d4:bf:24:c7:48:64:
87:3a:7e:7e:75:6d:0e:9d:ba:e1:f9:b8:9a:45:1f:
ba:44:c9:be:2a:eb:e6:a7:bc:a1:88:df:6d:7d:b6:
f6:72:e2:2e:17:83:24:66:a1:a2:b1:94:67:01:15:
af:40:8c:6b:0d:aa:01:3c:55:39:d0:93:27:4a:d8:
a4:d3:f0:db:66:77:e6:2d:26:23:4d:72:c7:27:fe:
83:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AE:85:79:5B:3D:98:E5:75:01:AC:3A:03:11:7A:67:C3:E0:19:77
X509v3 Authority Key Identifier:
keyid:4F:07:88:AA:D2:2A:C4:37:0D:51:8C:B7:FB:9D:FE:72:4B:41:F9:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TweIqtIqxDcNUYy3-53-cktB-Vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/9c04d5-459b-4fe2-8450-e11ab261ca7b/1/TweIqtIqxDcNUYy3-53-cktB-Vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:71:84:6d:a5:53:97:5c:46:9a:ba:0f:71:55:38:a0:4d:7d:
65:8e:4f:76:7f:ad:0a:83:07:e1:d6:68:e2:37:2d:bd:96:47:
36:48:a2:d3:e0:83:0f:84:71:58:1e:74:44:3f:39:fa:60:a0:
bf:4d:94:77:87:07:7f:f8:df:50:53:d6:70:89:11:49:c4:d7:
d5:6f:55:cd:71:a8:82:61:72:1d:fb:71:da:9d:4f:6b:f0:19:
5f:77:4f:8e:2b:28:95:9b:70:e5:f3:39:f9:96:35:a1:80:6c:
ba:43:ff:1c:67:62:b4:f3:04:66:f8:b2:c8:9c:80:b4:01:91:
e3:a7:9c:3f:f7:84:86:7a:ee:9f:ae:c4:ff:f7:51:d4:ae:fe:
be:00:c0:1c:0b:aa:5d:3e:4f:0c:07:c2:08:24:d5:59:80:f5:
4b:80:00:23:6b:f5:65:f3:5e:b9:07:a5:77:35:15:ae:ed:13:
ce:ba:57:9c:6b:7e:b0:3e:25:a3:db:ba:8a:77:4b:2b:b0:f4:
a0:16:2b:db:97:70:2d:1e:c4:28:a5:6f:eb:ee:f8:c0:38:9c:
a8:95:3c:c1:d3:98:4a:5c:0b:06:b7:ce:4f:06:c2:91:c7:00:
57:94:33:21:21:d4:08:74:d3:c8:d3:63:49:89:86:da:b9:75:
bb:e7:0b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:36:09 2025 by rpki-client