Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9dac0b-0577-45e9-93da-65bbbd1f276b/1/TbLM_dSoro3ahhBeQTUXn-N6pQ4.mft
File: TbLM_dSoro3ahhBeQTUXn-N6pQ4.mft (raw, json)
Hash identifier: YXVK0qK9zQD4e6SE2CA9XPHr8aslMZN+aEw9F8/e7D0=
Subject key identifier: F8:E5:F2:9A:F2:17:22:6D:FA:CD:7F:32:F6:26:77:0D:E8:48:CF:04
Authority key identifier: 4D:B2:CC:FD:D4:A8:AE:8D:DA:86:10:5E:41:35:17:9F:E3:7A:A5:0E
Certificate issuer: /CN=4db2ccfdd4a8ae8dda86105e4135179fe37aa50e
Certificate serial: 01942607A5169CDCB6826B6EC4AF79D99E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TbLM_dSoro3ahhBeQTUXn-N6pQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9dac0b-0577-45e9-93da-65bbbd1f276b/1/TbLM_dSoro3ahhBeQTUXn-N6pQ4.mft
Manifest number: 07F2
Signing time: Thu 02 Jan 2025 08:00:22 +0000
Manifest this update: Thu 02 Jan 2025 08:00:22 +0000
Manifest next update: Fri 03 Jan 2025 08:00:22 +0000
Files and hashes: 1: Adg_Z57ETwKXdLtnu5EYiYlufX0.roa (hash: j0/XfCAVBNUN2y6g5KG2jcpl0Vwx/petBnr9kJLrhnQ=)
2: TbLM_dSoro3ahhBeQTUXn-N6pQ4.crl (hash: VIqBmtS7sCAMJoPSn7YdTv4KbhzBvrPG/xugSK8Aw0Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:07:a5:16:9c:dc:b6:82:6b:6e:c4:af:79:d9:9e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4db2ccfdd4a8ae8dda86105e4135179fe37aa50e
Validity
Not Before: Jan 2 08:00:22 2025 GMT
Not After : Jan 3 08:00:22 2025 GMT
Subject: CN=f8e5f29af217226dfacd7f32f626770de848cf04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:2f:18:d4:0b:7f:3e:61:6d:c3:69:c5:91:ca:
b5:e9:ab:77:1e:93:79:2e:50:dc:b2:04:02:a5:f4:
cb:b2:ca:71:93:c3:3c:6e:01:60:32:ea:21:8d:24:
1f:a5:52:31:19:7d:4e:59:16:1d:85:50:c2:76:59:
27:5b:ee:4a:d9:56:80:dc:78:b4:08:09:5d:f1:6e:
bf:8e:d8:47:88:5f:76:9b:17:5f:96:fb:af:53:8e:
9b:b8:21:e1:bb:a2:bf:b3:46:0a:e0:e8:05:2b:49:
e5:ed:a9:93:f7:d0:b9:17:95:03:3f:cf:1f:79:1d:
8c:fc:97:57:38:7d:ce:80:3f:69:40:4c:f7:32:13:
39:7f:13:d7:0f:dd:2a:85:54:90:aa:92:ff:d2:5c:
ff:46:21:18:b7:ba:17:18:1f:da:8d:2e:fa:26:f8:
8f:c1:fa:21:90:6a:a5:35:34:5d:0f:a5:fb:74:10:
a7:dd:37:80:d6:1d:e6:05:58:24:ba:a4:b4:1a:fe:
f8:67:ad:25:87:64:bb:58:09:0f:67:f3:83:a1:2a:
01:0e:82:65:e2:37:af:08:f2:ee:12:da:74:89:51:
35:7c:78:17:92:8a:92:58:ee:e3:c1:4e:ff:ec:32:
cc:47:a3:34:3a:0c:cc:99:78:46:00:31:df:99:b4:
55:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:E5:F2:9A:F2:17:22:6D:FA:CD:7F:32:F6:26:77:0D:E8:48:CF:04
X509v3 Authority Key Identifier:
keyid:4D:B2:CC:FD:D4:A8:AE:8D:DA:86:10:5E:41:35:17:9F:E3:7A:A5:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TbLM_dSoro3ahhBeQTUXn-N6pQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9dac0b-0577-45e9-93da-65bbbd1f276b/1/TbLM_dSoro3ahhBeQTUXn-N6pQ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9dac0b-0577-45e9-93da-65bbbd1f276b/1/TbLM_dSoro3ahhBeQTUXn-N6pQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:15:84:04:78:41:d0:97:8c:c4:ae:af:20:f8:78:d9:e4:de:
f9:c7:2c:39:21:5f:48:1c:8b:0c:06:73:17:82:54:f1:40:bf:
a3:e7:06:6d:37:2b:73:dc:f0:8b:3c:11:3f:bc:a9:ea:08:4d:
12:06:13:fa:e7:cb:a3:18:87:5c:f2:fc:16:3a:27:61:5b:35:
38:e3:f3:33:b4:1b:1c:bc:b4:f7:c3:a1:56:7e:bc:ce:be:f8:
52:fe:df:9d:bd:4f:48:7e:f3:f9:5d:90:60:0b:65:c7:dc:79:
c8:75:52:76:21:6a:f9:6a:62:67:f7:47:2f:7a:4f:42:c9:68:
6a:82:59:c0:c9:4a:28:cb:04:68:0d:22:19:d6:f3:1f:5e:1c:
98:7e:54:0e:d3:d6:2d:1d:d4:48:f5:5f:c4:d1:8a:c6:3d:94:
99:d4:65:fa:7e:34:2e:1d:87:c0:a8:6a:73:62:f5:0a:f6:b9:
a7:f7:49:83:57:0d:0b:44:b5:4a:d5:76:19:78:39:45:b3:53:
d1:43:fd:fa:5e:e3:47:5f:47:cf:de:ba:b0:fc:2a:27:11:f2:
59:82:a9:f5:ea:c0:67:81:bb:0b:22:cf:06:bd:3a:bc:ab:0f:
4e:6d:19:1f:0b:50:a2:21:11:d6:84:8f:07:f7:51:cc:24:11:
e9:60:b6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 11:38:15 2025 by rpki-client