Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
File: Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft (raw, json)
Hash identifier: tznA/1Lp40MhLt+IPdLGvmzJbdcuL6xXi6wwhUkPeqE=
Subject key identifier: 65:EA:73:1A:5A:C3:22:1E:89:84:EE:52:34:1E:AF:5F:66:85:70:D2
Authority key identifier: 4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
Certificate issuer: /CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Certificate serial: 0194BC3BC80B74567367BCD88E993143ED1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
Manifest number: 1107
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl (hash: GsBPvCcsSq2vMgTyOUJb1TOfi4D57C1v0/ia2Awe0mc=)
2: fQVuwKT50hbkCaxxsedkAc4v4DM.roa (hash: 7+f7vmuufbnUl5kubA16fvBKejBnvUX170UQ3Kwi8yM=)
3: yI_RXXqJUefuh1flF2oTn9wC4DI.roa (hash: j2h6Y5w4TEDmVG2v4OM8fOFhUfhpchqy4oEvpRV83t4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c8:0b:74:56:73:67:bc:d8:8e:99:31:43:ed:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dbd0b135a7dfd6b6aa1b1849eb163402de8e1b1
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=65ea731a5ac3221e8984ee52341eaf5f668570d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f9:6f:a4:9a:cd:06:1a:b6:6e:aa:40:16:3b:
fa:18:b6:bd:34:56:b8:7f:55:45:87:36:e3:07:49:
00:3b:49:70:88:37:6b:e6:2d:31:f7:bc:f2:47:40:
3c:69:53:c7:ff:b5:9f:56:49:1e:fe:97:42:26:54:
0c:81:ea:72:f0:8e:1d:e0:5c:a9:fb:ba:33:34:e9:
61:be:af:fc:08:73:5e:56:74:fe:96:a0:d8:65:bf:
9d:ab:32:19:c1:22:a1:16:ee:ea:9c:6d:ef:c1:f4:
a5:6f:7f:66:09:cd:6d:ca:08:82:fe:cb:fc:d4:d2:
0b:76:ad:17:19:d1:fa:88:82:17:d0:f4:e3:4a:bc:
6e:23:a8:ad:8e:8f:ee:75:d8:8b:6d:6c:63:d8:99:
fc:5e:42:a1:27:b8:91:bd:c0:09:95:d8:b2:bc:09:
e7:93:f7:f6:50:9a:f9:b3:dc:9b:8e:20:a2:53:10:
b8:38:de:61:40:ad:4a:89:9e:00:cb:ab:1e:31:7c:
be:1b:8c:83:81:fc:35:cb:0a:2d:4f:25:ec:ed:78:
86:45:dc:1b:d8:e1:40:aa:4c:42:cd:7d:f8:78:ec:
0a:0c:72:aa:bd:11:b6:f0:8d:13:f9:42:bd:0b:ef:
62:65:7a:3e:0f:2e:5b:35:f3:d5:b3:22:37:16:4d:
cf:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:EA:73:1A:5A:C3:22:1E:89:84:EE:52:34:1E:AF:5F:66:85:70:D2
X509v3 Authority Key Identifier:
keyid:4D:BD:0B:13:5A:7D:FD:6B:6A:A1:B1:84:9E:B1:63:40:2D:E8:E1:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tb0LE1p9_WtqobGEnrFjQC3o4bE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/247ee2-2365-4768-977f-fefa1abaedcf/1/Tb0LE1p9_WtqobGEnrFjQC3o4bE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:76:f7:55:af:96:46:82:a1:68:31:9a:38:ca:8d:cd:53:9d:
d6:51:90:09:1a:ae:01:a6:6a:e5:cd:88:0f:e7:c8:65:7e:a4:
7a:14:f3:87:78:1a:b9:58:71:91:4e:3c:dd:60:13:e2:14:ec:
d4:c2:f2:81:ed:85:69:77:91:d0:f0:29:8b:c5:39:3e:b7:87:
11:b9:f2:1c:e1:86:ba:cb:a7:db:d0:1e:ad:69:f1:6f:ab:ab:
e6:a4:d1:73:32:33:c9:93:65:cd:59:47:f8:d8:68:99:ed:1a:
0c:a9:f3:79:2a:0a:6a:51:e2:ab:79:e0:9c:41:dc:aa:7d:63:
25:da:db:7c:56:d8:da:d8:5b:75:5f:7e:f2:5f:76:bb:ba:23:
d2:1e:d1:17:69:7d:7e:f0:38:90:f9:a2:ee:c9:32:5b:51:23:
86:38:20:a1:af:d6:bd:c5:43:36:77:c7:56:63:0f:52:09:f5:
03:a5:52:43:c0:45:69:db:1b:41:70:c2:21:3e:87:98:36:07:
29:ad:ec:8e:00:2f:d5:7a:df:8a:b6:ef:d6:19:14:97:87:7a:
c1:0c:34:05:a3:76:a6:9c:10:6f:89:54:a8:b9:bb:a6:26:59:
6f:89:28:0c:0e:49:fa:28:93:6c:37:47:14:2a:8f:e9:85:bc:
14:c0:18:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:20:49 2025 by rpki-client