Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
File: TSPi7bMh4ailzp7j4tlapA8N6KA.mft (raw, json)
Hash identifier: Q1WS7/BU8kzBqF2n8tHLyIPCjayDROWQEHGiuFQq9rg=
Subject key identifier: 19:B8:DA:F5:54:22:83:3F:C6:5C:9F:4D:B9:BA:F2:71:09:EA:FE:59
Authority key identifier: 4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
Certificate issuer: /CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Certificate serial: 0194BC0501BA88ADBC5E8B4132A58F901C2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
Manifest number: 08E0
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: E8fqlMMExB61QIsEKMENcZNpWcs.roa (hash: BmnUAt4AevLzEKuzLNe+ibP+z5vcZguaEireBbRJdHM=)
2: TSPi7bMh4ailzp7j4tlapA8N6KA.crl (hash: ud7g5d37vZdBmzvV4yra6KP3Uyvirt09dXupBFyGA4E=)
3: gXlhbbxVLQVqCMGvhejieNdtoBY.roa (hash: 8u7C6SqKmEB/oIEa7cYGrPkrur0B3bFj0WV0Kh36+qQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:01:ba:88:ad:bc:5e:8b:41:32:a5:8f:90:1c:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d23e2edb321e1a8a5ce9ee3e2d95aa40f0de8a0
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=19b8daf55422833fc65c9f4db9baf27109eafe59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:26:aa:80:7d:ea:3d:38:df:07:64:ad:86:f8:
20:06:33:21:ff:e7:de:24:f2:40:06:ba:37:71:38:
79:f8:6f:15:a3:00:24:31:92:bb:54:52:b9:b9:83:
96:74:82:72:58:1a:b4:2f:02:ca:b4:8f:20:3b:cc:
9d:5d:2c:eb:ad:27:f9:3b:ad:73:4b:a3:53:96:06:
36:99:d0:da:a2:55:6d:55:7e:eb:4a:a3:3c:ec:69:
18:6c:bd:46:dc:2d:cd:d9:c1:68:5d:2a:c0:2a:a6:
6c:50:84:d7:46:a1:21:fd:c7:74:dd:8d:87:d0:cb:
62:0c:e9:0a:11:f6:e2:b2:c9:42:f1:54:b6:4c:da:
e8:d7:e8:00:21:34:84:17:4c:d8:73:4e:77:1a:af:
2a:a4:f8:c1:f7:a5:7a:7f:f8:2a:dc:d8:31:ad:4c:
f6:25:6a:77:da:17:19:a7:0b:81:46:27:80:d9:31:
02:82:db:4d:cd:9d:78:79:4d:86:23:8c:b4:ff:14:
80:f4:54:29:09:30:20:df:a3:42:53:ab:5c:eb:58:
14:be:95:0c:f7:3e:50:9e:1f:ed:df:f1:06:22:a4:
f9:41:57:0e:67:5f:16:1a:a2:2c:29:d4:77:e2:f7:
3f:88:f0:c0:75:c2:76:dd:8e:a4:04:cf:47:e1:e2:
7c:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:B8:DA:F5:54:22:83:3F:C6:5C:9F:4D:B9:BA:F2:71:09:EA:FE:59
X509v3 Authority Key Identifier:
keyid:4D:23:E2:ED:B3:21:E1:A8:A5:CE:9E:E3:E2:D9:5A:A4:0F:0D:E8:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TSPi7bMh4ailzp7j4tlapA8N6KA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e4e07e-15fc-4942-842a-538509f3a789/1/TSPi7bMh4ailzp7j4tlapA8N6KA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:33:3b:49:59:42:bf:6d:af:77:72:10:bb:21:19:ed:ed:3c:
f3:22:25:13:c7:ef:33:4f:a8:dd:94:f7:32:1d:de:82:96:06:
3a:f5:16:5d:25:fd:9a:83:35:ff:0f:8c:b9:a8:6c:6c:c3:01:
50:73:b7:d0:e6:b2:46:91:d4:e7:d2:ce:90:86:23:25:54:68:
14:55:f0:94:dd:f0:73:06:6d:38:be:f7:3d:42:ca:0f:49:d2:
7a:bf:bf:6b:ae:b2:e2:27:65:8a:b8:9a:7d:54:12:65:91:94:
c8:5f:e4:f5:4d:ff:c2:ca:7c:e2:08:df:66:c0:99:d3:30:59:
dc:54:4f:86:29:13:04:87:8e:be:f0:be:5a:64:a6:b4:f7:3c:
b1:b6:52:2e:b3:cd:01:0a:f6:fb:d3:64:e8:11:31:1f:c0:75:
92:83:e3:70:4c:00:ff:56:b6:5c:0e:54:ea:1a:20:6c:47:15:
df:48:c9:9b:ff:ea:61:51:59:d9:87:e3:f5:07:74:2d:62:78:
1d:dc:3b:eb:f2:69:fe:9d:21:61:8b:b0:60:16:5c:71:5c:e2:
b6:32:47:26:94:ed:d5:b4:11:9e:3c:2a:b9:e5:0b:30:50:dd:
54:9d:83:72:90:cb:93:e5:4f:a2:ca:4e:8a:68:32:f9:8f:5a:
8b:1c:a3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:11:39 2025 by rpki-client