Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/TPu6QuVNXC6430lF99AVlmoLcA4.mft
File: TPu6QuVNXC6430lF99AVlmoLcA4.mft (raw, json)
Hash identifier: B1Hu+cT9O2zriGarB5ePNdy2+NPmmFoc+Hv3tZTgx+k=
Subject key identifier: F9:FB:4B:D3:F5:53:B0:EA:3A:AD:14:AF:C4:65:88:EF:4C:6F:81:CB
Authority key identifier: 4C:FB:BA:42:E5:4D:5C:2E:B8:DF:49:45:F7:D0:15:96:6A:0B:70:0E
Certificate issuer: /CN=4cfbba42e54d5c2eb8df4945f7d015966a0b700e
Certificate serial: 018C3D80E2F56F4D6D4D88048E31245DC39C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPu6QuVNXC6430lF99AVlmoLcA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/TPu6QuVNXC6430lF99AVlmoLcA4.mft
Manifest number: 0FC5
Signing time: Wed 06 Dec 2023 05:01:45 +0000
Manifest this update: Wed 06 Dec 2023 05:01:45 +0000
Manifest next update: Thu 07 Dec 2023 05:01:45 +0000
Files and hashes: 1: L2xP5kGC5l3IEX7lZZ9qycXt6CE.roa (hash: lWfTyuXbLmsZXpV81n7c02H1EQBhDtBnxFeOxtJW0kg=)
2: TPu6QuVNXC6430lF99AVlmoLcA4.crl (hash: xhD/BIU13j7TLOtbqRcFI9uGGPA4KxZEkKmXD8pkSms=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3d:80:e2:f5:6f:4d:6d:4d:88:04:8e:31:24:5d:c3:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cfbba42e54d5c2eb8df4945f7d015966a0b700e
Validity
Not Before: Dec 6 05:01:45 2023 GMT
Not After : Dec 7 05:01:45 2023 GMT
Subject: CN=f9fb4bd3f553b0ea3aad14afc46588ef4c6f81cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:56:95:d4:38:de:e5:9b:cb:97:88:e7:2e:8b:
3d:b1:6c:28:23:a7:91:1c:c2:21:01:fe:68:52:75:
5a:78:bc:6d:ea:90:19:c9:27:d7:29:52:a8:28:2c:
ff:c0:79:cb:f1:d0:29:eb:9f:8b:dc:b1:17:2c:c6:
00:cb:0b:a8:94:af:1f:fa:74:08:7b:65:2b:19:06:
49:cb:b7:ec:43:11:1d:b7:f7:fe:38:59:62:9a:39:
cd:74:c9:d3:a3:9b:e8:bc:c1:0e:fd:c4:0f:4b:ce:
e4:b9:ca:2e:c3:13:d1:5a:44:63:e8:c1:f1:0b:7c:
04:0a:41:e8:6a:d9:3c:39:98:3a:b4:21:30:1a:e1:
d0:2c:9b:18:1b:21:90:8d:d9:b9:fe:45:6e:58:d1:
e9:ba:18:4d:c6:1b:19:2c:a3:ec:82:47:30:93:c8:
5e:eb:aa:f2:38:54:c7:5f:72:92:f1:cc:05:2a:2e:
13:b5:dc:08:67:8e:09:df:64:ab:ab:15:6f:e6:89:
8f:0a:8a:72:14:93:6b:86:6a:e2:c7:2d:38:9a:f7:
5a:83:66:1c:17:05:7c:81:59:36:a3:22:f4:f9:bb:
19:e4:b9:05:fd:57:9f:19:1d:b0:8c:0a:a6:77:b4:
4a:bb:2f:e3:a0:e0:4c:e2:86:5f:d1:d6:9b:da:b7:
61:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:FB:4B:D3:F5:53:B0:EA:3A:AD:14:AF:C4:65:88:EF:4C:6F:81:CB
X509v3 Authority Key Identifier:
keyid:4C:FB:BA:42:E5:4D:5C:2E:B8:DF:49:45:F7:D0:15:96:6A:0B:70:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPu6QuVNXC6430lF99AVlmoLcA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/TPu6QuVNXC6430lF99AVlmoLcA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a22bf9-d945-4f20-b8ca-d62738ea3b43/1/TPu6QuVNXC6430lF99AVlmoLcA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:4f:53:3c:a6:29:ff:91:69:6d:34:bb:c3:25:ca:60:e6:2a:
4c:ed:61:1a:6e:71:e1:11:e4:1c:85:71:af:25:e4:44:df:7f:
29:c1:40:f5:d4:72:a5:3d:67:2a:63:a7:d1:5b:7d:19:8b:73:
7f:97:7c:12:84:30:29:7a:8b:72:a6:a2:fc:26:72:73:f1:9d:
76:32:90:c2:47:5e:bf:28:9e:4c:55:c8:91:41:17:a2:6d:b4:
c3:fc:dd:7b:19:35:93:18:98:eb:5e:9c:61:db:ce:62:4f:12:
eb:20:fe:e9:b5:ed:02:45:8c:44:27:a8:f1:d7:7d:84:07:65:
d3:90:86:78:39:ce:88:64:97:e6:89:e6:62:39:81:25:ed:61:
57:bb:11:91:b5:2d:f0:4f:5f:ad:b6:e3:6d:f5:96:95:7a:39:
1b:35:de:b0:34:28:37:88:50:34:0c:10:88:ea:e3:04:2b:e1:
b3:61:d9:0b:e9:4d:ae:f6:07:ef:86:2a:e9:3f:23:d8:de:ed:
c1:45:ae:9f:17:7c:7e:40:86:82:0a:97:b2:52:f1:cd:b0:ce:
a5:ff:81:93:f1:b0:42:bb:5d:ba:33:ed:35:b6:f9:16:f2:90:
34:81:6a:d7:b3:e6:ce:ec:7f:01:df:ac:81:b4:57:66:0a:37:
d4:ac:d7:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:17 2025 by rpki-client