Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
File: _ToehGW_xN9wCJQ3LQuYCOi2Keo.mft (raw, json)
Hash identifier: QvSk6rtAoYj4PDy+lxIDgXwh8bSQir1Kdgxx36wLmfQ=
Subject key identifier: 3F:9A:0A:F7:84:21:8B:00:C6:CC:F3:FB:40:79:94:A0:B6:B0:16:D2
Authority key identifier: FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
Certificate issuer: /CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Certificate serial: 0194BCA9FB20379EB72EE20D9236A7575D19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
Manifest number: 142E
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: _ToehGW_xN9wCJQ3LQuYCOi2Keo.crl (hash: yy8ldLEKETnzVsrTjrt1ARVmj0fg/g+AmT/xW+RSXS4=)
2: dQcGvMsR-By8rmf63OPVeRoG1kI.roa (hash: UUTwEFWKXd8UKczRmcM1HwJqB9u2VJL8KBgLmOxv5wQ=)
3: dyesQZ9bNc_exbNvHrSwjqGWp5E.roa (hash: SPDtAhHddz/awjfh8C86lGD8fC38ASE+0AD196Bu4A4=)
4: ysibzsONFpyNAtuXpUifxvA1QaM.roa (hash: zC93yIFX6WjKFEjG+j03DkiiYurXSe8yZy0kiGE5C2E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fb:20:37:9e:b7:2e:e2:0d:92:36:a7:57:5d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3a1e8465bfc4df700894372d0b9808e8b629ea
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=3f9a0af784218b00c6ccf3fb407994a0b6b016d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3d:7b:60:58:3b:40:7d:f5:15:2b:5d:fa:fa:
3f:a5:e5:d0:c5:83:74:21:59:de:19:44:b4:6e:38:
ac:77:42:a5:8f:b2:af:95:5c:25:1b:b2:61:68:c9:
28:61:d4:04:fb:c5:c6:96:6a:b1:59:50:76:0a:bb:
1b:6e:cd:7f:a0:24:6c:f8:63:6f:c9:28:42:b7:af:
a8:9f:ee:2b:c2:13:91:a4:e6:b0:cd:8e:0a:2d:03:
a9:aa:27:e8:f6:4e:35:77:0e:d4:b4:d4:bb:c7:75:
6b:ec:ab:0d:4b:56:57:f9:98:f1:a6:34:03:fe:42:
c5:40:3a:e4:93:0c:64:3f:0c:9d:f8:97:5f:53:32:
70:48:26:3a:47:98:e9:00:6f:ae:94:df:24:e3:48:
f7:7a:bb:19:36:c4:d2:2c:f0:f7:1e:05:5b:a6:07:
1d:ba:29:a1:0d:e1:b6:a9:96:58:52:01:97:20:3c:
f0:da:f1:23:34:bf:dd:70:64:19:68:c5:68:9b:84:
39:92:32:70:b1:e7:87:c5:51:7d:a7:d6:5a:f8:73:
43:77:20:21:98:06:a3:4c:42:35:21:22:29:23:56:
e5:9a:55:b1:48:72:ae:0b:e0:95:70:97:a7:2a:20:
51:cd:15:e6:c9:d7:9e:ae:f8:c7:9e:df:4f:e7:9a:
dc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:9A:0A:F7:84:21:8B:00:C6:CC:F3:FB:40:79:94:A0:B6:B0:16:D2
X509v3 Authority Key Identifier:
keyid:FD:3A:1E:84:65:BF:C4:DF:70:08:94:37:2D:0B:98:08:E8:B6:29:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ToehGW_xN9wCJQ3LQuYCOi2Keo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/513734-a485-4c28-8aa6-9555d30f6f8f/1/_ToehGW_xN9wCJQ3LQuYCOi2Keo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:33:63:e8:d8:a5:02:1d:c0:cd:c4:92:83:d3:aa:8e:b2:67:
b0:41:93:46:b8:9a:79:db:a8:b4:7a:76:09:88:da:e2:e6:76:
2a:bd:2b:fb:ef:86:2a:e3:b1:4e:e8:4f:a0:2f:12:f4:dc:48:
8a:56:d1:67:82:5c:19:3f:67:ab:ba:92:1d:72:d4:db:ec:4b:
41:12:c2:f2:06:e6:ca:2d:d9:91:9a:08:18:e4:6f:c9:36:19:
8a:b3:8a:38:51:3d:3a:9a:b0:e4:37:fe:c4:29:06:b6:9c:0c:
54:42:59:dd:57:09:20:c2:00:10:88:d2:ba:12:98:e2:10:b6:
92:40:11:8e:b9:71:2a:d3:d3:77:d5:f5:1d:a0:c2:66:6c:9f:
12:f1:e5:b8:e8:3c:33:ca:92:80:c1:ed:bd:5a:fd:7b:a5:d4:
95:6a:c1:b5:38:52:05:fe:d4:a3:09:08:7e:f9:41:4d:86:9b:
3f:9c:9f:88:48:ce:c6:39:e3:52:cd:40:87:da:7a:4f:f2:f5:
c1:8d:57:47:d8:41:c1:4d:00:cc:cd:ce:5e:d2:f0:ef:1f:f5:
2a:98:92:1b:7a:d1:7c:3b:37:0e:e2:57:36:4e:13:64:b4:1e:
fd:c9:2f:40:3b:24:e3:4b:89:d2:83:9a:0c:d0:fe:6c:0e:46:
c6:46:28:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:26 2025 by rpki-client