Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
File: TJMCnFsmOc0pufndUpTMlO9S1q8.mft (raw, json)
Hash identifier: k1ox6Zd6QDi8OKpL3lRO0qGPcPdHPMSmFXOBm1mM9B8=
Subject key identifier: C9:53:B0:81:3A:36:80:52:50:05:C0:E0:E1:26:8B:0E:31:15:37:65
Authority key identifier: 4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
Certificate issuer: /CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Certificate serial: 0195E0469349AEA9DE6856C5E57A8C519FFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
Manifest number: 0AF2
Signing time: Sat 29 Mar 2025 05:01:16 +0000
Manifest this update: Sat 29 Mar 2025 05:01:16 +0000
Manifest next update: Sun 30 Mar 2025 05:01:16 +0000
Files and hashes: 1: TJMCnFsmOc0pufndUpTMlO9S1q8.crl (hash: qT9gBlRxFUty51629zMzA3BR+2VSxXf63jiFNG8elEc=)
2: gm0FjeCIRrnMhU3d57SvCilXQ6Y.roa (hash: uUS5qc0jED6lwxU3POQRNrHoJ8s1cSrD4ysUmIZNtjw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:46:93:49:ae:a9:de:68:56:c5:e5:7a:8c:51:9f:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c93029c5b2639cd29b9f9dd5294cc94ef52d6af
Validity
Not Before: Mar 29 05:01:16 2025 GMT
Not After : Mar 30 05:01:16 2025 GMT
Subject: CN=c953b0813a3680525005c0e0e1268b0e31153765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:60:34:db:ce:61:b3:bc:3d:1a:5d:4e:09:0d:
b1:49:ac:45:c2:62:50:73:f1:5c:34:b1:56:c7:a9:
7b:e9:64:f7:2a:53:03:cf:0f:b8:f2:1b:de:fc:b4:
a6:0e:8d:33:09:2e:44:7d:45:1d:da:6a:85:f5:74:
b1:e4:d8:2a:eb:54:83:15:05:0e:50:08:7d:24:78:
38:b3:68:2a:72:cf:04:78:9f:d9:d3:e3:22:15:e1:
5d:56:42:f3:23:2e:43:49:46:9e:10:0a:28:75:c9:
1e:2d:a1:45:55:75:78:e4:50:1d:45:ee:1a:25:77:
84:90:1a:19:93:bb:19:f2:fe:d8:e6:d2:08:44:10:
b4:f0:07:ec:b5:71:67:fd:3d:32:e7:e5:ac:6f:c3:
81:68:54:b8:b3:e1:b7:c4:02:15:e7:de:57:76:8f:
26:ac:03:b6:0a:81:8f:6f:a0:8d:11:c3:c1:d8:5a:
82:9f:39:0a:e1:03:a4:b9:cd:55:1f:f9:52:9e:fd:
b4:ad:b1:c8:17:88:a4:5e:08:e5:cd:9b:45:e5:5b:
2f:1d:88:22:78:9c:01:da:4a:85:ea:8e:17:88:2d:
15:22:e9:f4:c3:64:e6:06:48:7b:21:e9:fa:39:4a:
1d:d6:f1:96:01:a0:e8:68:cf:c4:4f:68:c2:c8:a0:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:53:B0:81:3A:36:80:52:50:05:C0:E0:E1:26:8B:0E:31:15:37:65
X509v3 Authority Key Identifier:
keyid:4C:93:02:9C:5B:26:39:CD:29:B9:F9:DD:52:94:CC:94:EF:52:D6:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TJMCnFsmOc0pufndUpTMlO9S1q8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/7bd729-98e5-43ff-afe6-187b1f77c1a5/1/TJMCnFsmOc0pufndUpTMlO9S1q8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:a1:00:2e:4f:a7:38:55:6f:e7:45:52:db:0c:00:ed:47:b8:
5d:ca:ee:bf:f0:4b:4a:77:00:05:63:21:8a:dd:ae:79:af:b4:
1f:3b:f8:0a:3a:10:28:a8:2c:f8:a8:98:ab:a9:76:27:06:e7:
7f:4b:95:80:8a:e1:96:d0:5c:78:5e:2b:af:43:d3:c2:2f:ac:
6d:74:94:46:b6:43:01:d5:b6:d5:da:9d:2f:33:7f:e7:77:77:
c0:7e:49:88:e5:be:79:0f:98:ff:98:97:e4:49:c1:75:d8:a2:
b6:a1:a9:61:e9:4e:ac:fa:d5:b6:a5:59:83:43:b4:ba:05:16:
06:32:5c:03:bd:96:46:6d:4a:e6:b2:8b:94:e4:fa:9b:c8:f8:
d1:65:a0:cc:82:63:84:95:2f:fc:db:8e:1a:79:56:a2:b2:8e:
8c:79:92:e9:9d:69:ef:9c:fb:ba:28:f9:25:a1:55:2d:fb:54:
c4:cb:19:80:df:89:44:80:5b:a7:36:36:97:f7:42:2d:08:77:
98:0b:59:61:0e:08:9b:25:eb:74:dd:7b:91:70:2e:2c:af:87:
09:4f:f3:06:09:1d:9d:c6:06:12:03:7a:2b:a3:cf:5c:29:13:
3c:a6:09:72:20:e9:d9:78:ce:25:9b:0c:ee:57:dc:39:9e:02:
0d:03:79:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:06 2025 by rpki-client