Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
File: TKvzOws4CIj-HjuA7aSLF4G7dwk.mft (raw, json)
Hash identifier: /zxd2jl9jepReTuvW6rdrA3zuCYlrQKIsYAs2CwitgI=
Subject key identifier: 95:ED:67:78:FD:94:26:59:B7:D3:9E:7C:14:95:1B:4D:5F:28:AE:BD
Authority key identifier: 4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
Certificate issuer: /CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Certificate serial: 0194BD8532A6C6D8287750E4B1EA0013BF95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 18:00:10 +0000
Manifest this update: Fri 31 Jan 2025 18:00:10 +0000
Manifest next update: Sat 01 Feb 2025 18:00:10 +0000
Files and hashes: 1: Ej6AGqgrDcCEmdxGQ51_3en2bK0.roa (hash: iJ7FETE7qwjnaLdIl0yVteeRiSysQ9U3gczbrqrkwXU=)
2: TKvzOws4CIj-HjuA7aSLF4G7dwk.crl (hash: EXe8u/rmTOmgqYQl8kJB6A1AGr6qNWBMY2RXzjlXFbU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:32:a6:c6:d8:28:77:50:e4:b1:ea:00:13:bf:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cabf33b0b380888fe1e3b80eda48b1781bb7709
Validity
Not Before: Jan 31 18:00:10 2025 GMT
Not After : Feb 1 18:00:10 2025 GMT
Subject: CN=95ed6778fd942659b7d39e7c14951b4d5f28aebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:21:0b:e5:d2:44:2c:26:12:82:ba:95:9e:c4:
2f:f0:77:c4:99:16:33:97:9d:ab:50:86:ac:2c:e3:
34:5d:7a:99:96:c2:ca:82:78:34:b4:3f:f8:63:29:
06:22:54:51:a5:d6:37:21:27:e8:6b:f4:3e:4a:67:
26:b4:5d:e5:50:26:5d:ec:3a:ae:c3:8f:76:d0:b8:
16:8c:d9:65:60:37:fa:ac:2a:5c:29:fa:17:08:5b:
6e:5d:29:c6:91:ee:1a:d7:c9:2e:e0:c5:09:dd:f9:
28:24:a8:8e:0d:bf:7d:32:b5:26:0d:02:b0:eb:78:
84:1f:18:7f:23:e1:6f:10:bb:17:b5:58:bb:6e:8c:
66:74:bf:9e:9b:ef:c2:c2:6f:63:e3:81:fe:09:16:
f6:69:7d:d8:5e:43:f5:87:24:9e:ec:7b:bd:36:1b:
8f:b5:6a:4d:d7:c2:ea:25:ae:7a:1e:4e:8a:15:a5:
e0:80:09:f5:fb:0c:64:9e:87:a2:ea:44:11:84:6b:
fe:fc:c6:53:fa:84:98:88:d7:6f:b9:6f:f4:70:4c:
7b:53:f5:ec:a4:75:7a:84:22:3b:cc:a6:03:0e:72:
12:a4:48:58:96:4c:bb:49:72:d4:f4:a7:37:18:6f:
ae:ee:61:80:04:d7:4b:c3:ea:9c:f3:49:69:89:c4:
07:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:ED:67:78:FD:94:26:59:B7:D3:9E:7C:14:95:1B:4D:5F:28:AE:BD
X509v3 Authority Key Identifier:
keyid:4C:AB:F3:3B:0B:38:08:88:FE:1E:3B:80:ED:A4:8B:17:81:BB:77:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKvzOws4CIj-HjuA7aSLF4G7dwk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/185a42-cb7f-4058-86f5-41ae5f4a5055/1/TKvzOws4CIj-HjuA7aSLF4G7dwk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:05:b5:17:3d:bd:7b:81:28:71:9e:dd:e9:96:86:aa:9c:2b:
bb:b4:65:a9:37:18:a1:c3:38:13:cd:ff:0b:dd:62:12:32:d7:
31:51:6f:17:1c:30:39:b6:5e:83:5e:e2:29:2d:72:ab:0d:43:
35:ac:5e:53:ab:97:e8:14:05:3b:50:9f:21:48:4a:45:99:0e:
4e:8b:8e:2b:7a:40:d2:ad:f6:fb:fd:a2:e9:aa:dc:b3:08:50:
2c:c9:d2:34:a4:b8:44:42:7f:fc:08:d1:a6:6b:fc:2e:76:3b:
5e:83:5b:93:4e:c2:ce:a9:e2:9d:5f:14:08:c4:56:3f:91:65:
f0:15:a8:f9:5e:5d:43:25:31:5d:6d:f2:cd:4c:32:57:92:9f:
46:0d:56:4a:24:4e:e2:01:86:5e:3c:0f:7d:a9:70:fd:78:b0:
68:61:1b:7c:04:47:98:96:b6:90:27:de:6e:8c:cf:89:fa:de:
d9:a3:f1:8b:6d:d7:74:8c:e7:f3:9b:c5:22:0b:0e:35:77:6f:
3d:0d:8a:cb:e5:82:54:77:b5:36:06:96:1a:63:55:53:b9:2f:
30:ec:57:18:92:f8:17:d7:ef:3f:39:7a:05:cd:19:25:86:d9:
1f:34:00:5f:9c:77:6c:41:9e:ce:99:fd:83:1c:34:4d:30:e1:
64:12:d8:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:24:16 2025 by rpki-client