Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/TNJUgqfXOZE1UeHeFRv-zEF_h3A.mft
File: TNJUgqfXOZE1UeHeFRv-zEF_h3A.mft (raw, json)
Hash identifier: 3h6J0oXZLT/I+/v1xHvZC/bsIH+667Ggvg3CPy3qkK8=
Subject key identifier: F0:28:0C:4D:EA:3F:2E:D3:E9:99:23:BB:EB:6F:C0:F3:35:62:93:16
Authority key identifier: 4C:D2:54:82:A7:D7:39:91:35:51:E1:DE:15:1B:FE:CC:41:7F:87:70
Certificate issuer: /CN=4cd25482a7d739913551e1de151bfecc417f8770
Certificate serial: 018F174890151574D29A7FEFF2CDFB8EBE14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TNJUgqfXOZE1UeHeFRv-zEF_h3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/TNJUgqfXOZE1UeHeFRv-zEF_h3A.mft
Manifest number: 113E
Signing time: Thu 25 Apr 2024 22:03:02 +0000
Manifest this update: Thu 25 Apr 2024 22:03:02 +0000
Manifest next update: Fri 26 Apr 2024 22:03:02 +0000
Files and hashes: 1: TNJUgqfXOZE1UeHeFRv-zEF_h3A.crl (hash: UlUrFjMoMfUErq4LszA21JlbyDAYjjO6fjuLDGzPQiA=)
2: VkvuQxfIwOzRVHNwW8MuMnEJnDQ.roa (hash: qNNQV+RhDxSjiQhQ7fOR00GejNNTcS7rifBHa2Gu/8w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:17:48:90:15:15:74:d2:9a:7f:ef:f2:cd:fb:8e:be:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cd25482a7d739913551e1de151bfecc417f8770
Validity
Not Before: Apr 25 22:03:02 2024 GMT
Not After : Apr 26 22:03:02 2024 GMT
Subject: CN=f0280c4dea3f2ed3e99923bbeb6fc0f335629316
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0d:39:1d:a2:6c:f9:2f:e4:77:76:4c:c5:ae:
97:59:44:72:20:f6:82:30:13:ee:34:fa:05:b6:14:
23:18:30:41:bb:cc:91:c8:87:0b:dc:78:5f:cb:e4:
69:4c:2f:b1:6c:8a:31:1e:52:d0:47:67:aa:4d:ca:
9a:b2:1c:d3:b6:67:5d:ab:9b:94:33:52:16:91:ba:
24:63:d6:59:8c:c7:39:ea:41:34:f2:44:06:67:2f:
c2:cf:ed:d8:37:a9:64:db:a2:fe:71:41:d0:2f:32:
d5:16:7c:5a:51:ff:d2:c1:bd:a3:79:9e:06:37:8c:
d9:d7:bd:51:bc:be:b5:2b:5c:fd:21:9f:b9:32:6d:
11:76:41:65:e5:ff:83:5d:cd:07:bd:70:5f:8f:8c:
c8:57:26:e2:ad:52:a7:fc:ff:6b:f7:35:e8:4e:05:
d3:cb:d2:1e:4c:6f:1c:63:35:b2:c6:7a:0e:50:05:
e5:44:e0:a8:72:c5:bc:cf:f6:a2:64:aa:96:2a:d6:
52:b1:02:68:a8:a9:b8:e1:96:d5:79:f1:65:46:aa:
11:1f:c2:17:c6:9c:87:e8:d8:da:b9:b3:50:8e:6e:
6c:d8:9d:bd:23:23:ae:69:dd:96:82:b0:e4:90:9b:
8d:32:84:bb:e9:73:74:ad:4d:f3:b9:c4:ac:9f:ce:
80:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:28:0C:4D:EA:3F:2E:D3:E9:99:23:BB:EB:6F:C0:F3:35:62:93:16
X509v3 Authority Key Identifier:
keyid:4C:D2:54:82:A7:D7:39:91:35:51:E1:DE:15:1B:FE:CC:41:7F:87:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TNJUgqfXOZE1UeHeFRv-zEF_h3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/TNJUgqfXOZE1UeHeFRv-zEF_h3A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/0161bc-2b85-4b49-830b-7ee2fd43d902/1/TNJUgqfXOZE1UeHeFRv-zEF_h3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:4c:eb:a9:a3:3f:48:ad:64:ed:39:f3:65:76:d1:d5:25:cc:
80:85:e9:65:0a:0a:e1:a2:c7:5a:3d:86:00:4b:19:6c:2e:07:
94:d5:fb:df:12:92:e8:0c:99:23:9c:2c:f2:a3:6b:dd:a2:ca:
78:dc:e0:e2:8d:65:68:6e:b8:d9:6a:0c:8b:f1:a6:af:d3:d3:
4e:af:36:4a:da:42:2f:24:fb:73:5d:fe:f3:d5:48:69:de:a0:
97:97:83:b8:4a:88:8f:71:6c:85:b7:01:a5:28:72:62:b2:da:
5b:ab:9e:76:eb:13:c3:75:e9:e5:5d:20:27:95:84:72:78:5b:
29:24:32:8f:9a:d8:9d:5f:22:f0:80:54:65:22:b1:b2:78:a9:
59:62:e0:60:e7:c2:fe:55:c8:5c:4d:a8:32:cf:c9:fb:e0:43:
57:54:63:15:e6:8a:ab:1d:8a:19:80:a0:9a:55:18:e7:77:3e:
af:cf:2c:63:f0:df:87:42:12:98:ed:17:46:3b:4c:09:cd:7e:
d2:76:74:a0:b3:22:bc:6f:2c:b4:67:12:c0:95:2e:7e:f7:be:
f9:a6:d9:6e:3d:4f:80:9e:62:1f:f0:f0:7b:7e:2d:f4:83:a0:
b2:4e:3b:fa:d8:ad:dc:1b:58:ff:8c:02:90:a4:d5:78:c3:67:
e9:8c:47:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 04:31:10 2025 by rpki-client