
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
File: TfLG-lSozC3HHoAs-D9cd2zpdMk.mft (raw, json)
Hash identifier: PVBiOT2dxXRevnu13HULSKSrNgHttnV1hV2VMrlwPPI=
Subject key identifier: 35:F5:97:BE:6C:DB:46:65:FC:5D:1E:33:4F:1E:F5:81:EA:5D:1D:A3
Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Certificate serial: 01962DF4161CB608D1A05EEFCAE3DAA8F25E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
Manifest number: 14E9
Signing time: Sun 13 Apr 2025 07:01:33 +0000
Manifest this update: Sun 13 Apr 2025 07:01:33 +0000
Manifest next update: Mon 14 Apr 2025 07:01:33 +0000
Files and hashes: 1: TfLG-lSozC3HHoAs-D9cd2zpdMk.crl (hash: 78Ui+esNAUGe14LbVSCT6UvI8/NJBJC2z6AlVygV9XE=)
2: e4YwnyTHRcui9Qd2cuefi1c6MlA.roa (hash: LhO2Xz43s1AvMskc3d7cQoBTaqJHciWee5shF/NhU8I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2d:f4:16:1c:b6:08:d1:a0:5e:ef:ca:e3:da:a8:f2:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Validity
Not Before: Apr 13 07:01:33 2025 GMT
Not After : Apr 14 07:01:33 2025 GMT
Subject: CN=35f597be6cdb4665fc5d1e334f1ef581ea5d1da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8a:f6:9d:4e:49:d4:92:57:f6:9c:43:9b:43:
35:5f:29:71:a6:01:5a:df:36:08:52:53:ea:8a:ab:
2e:64:df:e4:04:90:45:cb:40:e3:a9:3d:76:a0:04:
d8:d2:4a:8c:29:5e:00:ee:6c:6f:ea:36:96:93:9a:
12:53:e3:e5:ba:6e:d3:0f:96:33:99:95:e4:ba:c5:
37:35:a7:01:2a:02:9b:70:85:51:8b:a2:03:2c:57:
c0:ef:5c:b7:6c:50:e7:5a:c4:40:bc:31:8c:0b:dc:
a5:db:1e:b3:e7:df:49:e9:0b:ad:44:32:ab:36:98:
50:62:68:95:18:59:33:fd:6f:bb:0b:4a:9c:9d:3b:
9d:26:67:23:f7:5e:1d:ed:3d:a0:c8:7e:9e:4d:f1:
22:a6:73:67:c1:ed:4a:7e:22:3d:3f:18:d5:b2:0c:
b0:33:ab:37:12:51:68:72:22:87:a8:4f:e3:74:86:
96:1a:d7:44:08:08:64:c8:65:5d:99:17:2e:59:d8:
12:fc:cd:0e:e8:fc:21:47:44:bf:dd:28:73:22:71:
ba:7d:4d:96:9e:92:ad:7d:b7:1c:49:72:be:72:5c:
6b:bb:60:85:76:95:a3:26:c8:82:51:fe:d5:44:0b:
27:d8:a9:2e:fb:d0:47:0b:74:4d:4b:16:49:c1:19:
03:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:F5:97:BE:6C:DB:46:65:FC:5D:1E:33:4F:1E:F5:81:EA:5D:1D:A3
X509v3 Authority Key Identifier:
keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:1b:8b:98:39:ca:4e:7c:ad:e0:40:1b:2c:58:c6:34:af:15:
06:f7:c8:70:ee:72:3e:07:9a:26:64:c3:e5:fd:4f:4d:f8:1f:
de:8e:00:0b:5a:c5:b3:43:80:e5:4c:a2:7e:bc:a7:e1:08:68:
ec:c0:81:e2:28:5b:ca:d0:81:b8:e4:54:9f:a9:a8:3f:4a:09:
ae:c7:fe:34:0e:70:f8:45:a5:59:bf:41:41:3e:63:fb:b3:e2:
77:bc:f2:6c:15:be:1b:24:f3:7f:7f:d4:12:23:bb:22:9e:f9:
55:f2:49:b9:d8:91:d5:cb:22:21:cf:29:9a:be:34:c2:e4:ae:
ac:89:1f:cb:cd:cd:c3:23:0d:5a:da:bb:25:16:24:57:11:3a:
1e:73:80:23:aa:bc:9c:6c:26:ed:a8:88:67:a0:63:69:0b:34:
6c:4d:00:38:45:ae:92:6b:7e:92:e2:7a:44:2c:fe:24:2f:29:
15:5e:b6:75:87:3b:63:de:e4:00:cf:81:8b:97:cc:23:bd:ea:
7a:ea:31:82:4d:6c:96:31:e4:6c:90:80:1a:94:36:30:cb:47:
88:d3:5e:4f:9e:14:67:03:94:01:cc:5c:6f:45:7f:b8:aa:c7:
e7:e5:dc:82:22:62:b9:be:d4:75:8c:7f:25:5b:24:66:49:7d:
8c:7f:32:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:02 2025 by rpki-client on console.sobornost.net