Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
File: tIvY7E4wHJ57CkO-8PPd06RTFVo.mft (raw, json)
Hash identifier: QSQd7L4BRBNZ57RNbXkxU0rUbY1oLPcgtiE4eTvub/c=
Subject key identifier: 16:85:09:AC:EB:A1:EB:24:D1:7C:34:B0:52:9E:C2:7F:43:8E:B9:8A
Authority key identifier: B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
Certificate issuer: /CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Certificate serial: 0194BCA994CC4579579DBCAA3ED35069D5AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
Manifest number: EB
Signing time: Fri 31 Jan 2025 14:00:17 +0000
Manifest this update: Fri 31 Jan 2025 14:00:17 +0000
Manifest next update: Sat 01 Feb 2025 14:00:17 +0000
Files and hashes: 1: RB7HUixrp2_fRnv8EOUDAJuY_s8.roa (hash: 8tnZtAu3C6mP5DEQfehN4BPaOTowIhr+JO1L2V82k9E=)
2: tIvY7E4wHJ57CkO-8PPd06RTFVo.crl (hash: xTHVwFjkF3D4ymHSrTWE7/2RuBG9zkD8ZEw5YerS3LA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:94:cc:45:79:57:9d:bc:aa:3e:d3:50:69:d5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48bd8ec4e301c9e7b0a43bef0f3ddd3a453155a
Validity
Not Before: Jan 31 14:00:17 2025 GMT
Not After : Feb 1 14:00:17 2025 GMT
Subject: CN=168509aceba1eb24d17c34b0529ec27f438eb98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e5:f1:b0:e8:9f:d1:e8:66:5f:0e:a2:11:8d:
1a:33:95:ca:8c:7d:a7:55:c6:dd:61:a2:a9:e8:2e:
70:11:97:7a:9a:16:e3:72:05:04:c6:d7:10:ae:0a:
be:d2:fe:60:65:92:ee:7e:7a:a2:d0:1b:e8:27:bf:
11:18:42:c4:13:64:83:7a:74:57:c1:46:54:e1:8c:
a8:9d:58:06:a8:6b:ee:bc:d2:0f:75:71:3c:7f:6f:
4d:c0:39:0a:de:fc:ec:85:37:19:20:b8:36:49:17:
80:57:17:6a:7d:19:0f:34:da:d0:cd:ae:bc:90:23:
b6:49:78:a8:9b:a3:7c:e3:af:d7:09:55:33:b9:c6:
3a:45:0a:c3:a5:63:89:5b:c3:9f:d3:c6:59:6d:35:
53:39:ac:09:53:34:3f:d7:4e:c9:0b:c3:8d:0c:f0:
d0:ca:a7:ef:cc:8c:b5:9d:85:b8:15:28:23:7e:1d:
a0:e4:68:6e:bb:64:6a:cf:d9:02:77:18:d1:90:30:
46:44:98:b9:47:23:35:4d:01:0b:01:5f:a8:ec:de:
c5:fb:f2:80:0e:65:8f:c0:52:82:35:1a:f7:a8:fd:
00:95:28:c6:9a:bc:9f:e4:7a:a1:fe:fc:3c:75:f4:
08:5b:84:5c:86:8f:e4:b6:9f:c1:92:6b:8e:ad:72:
82:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:85:09:AC:EB:A1:EB:24:D1:7C:34:B0:52:9E:C2:7F:43:8E:B9:8A
X509v3 Authority Key Identifier:
keyid:B4:8B:D8:EC:4E:30:1C:9E:7B:0A:43:BE:F0:F3:DD:D3:A4:53:15:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIvY7E4wHJ57CkO-8PPd06RTFVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7434e1-7413-4f6a-a29c-cdc81db77531/1/tIvY7E4wHJ57CkO-8PPd06RTFVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:78:0f:eb:c1:08:44:e4:08:93:23:b3:3a:76:04:dc:08:7e:
fa:07:b1:1c:19:ff:3c:ea:cd:b5:8c:f4:20:b9:b7:49:a9:1e:
e6:8b:a5:f4:85:46:03:db:36:8b:51:76:a2:1a:8d:95:cb:82:
c7:1f:4a:0a:c3:79:d6:2c:7e:76:32:81:6d:a1:ae:f8:7d:6d:
35:d8:18:0a:ff:31:da:d7:73:1b:e3:3a:4c:4b:a5:45:49:4e:
23:02:c2:65:10:33:a8:1f:d7:5d:a3:05:ba:1c:ed:7d:4d:bf:
e1:8a:0e:68:59:a6:b7:88:30:31:b6:a6:6f:03:25:c4:ac:df:
28:a7:7a:2b:a7:bc:20:3f:6b:18:f1:89:ff:0a:bd:92:ce:c0:
92:6a:b0:41:3f:d0:77:3d:c6:46:dd:4e:ee:45:cd:db:e5:4a:
b6:a8:47:81:74:52:42:fd:62:a9:a0:51:06:68:6e:ab:da:27:
49:96:f5:52:12:dd:35:a8:b7:83:c9:90:81:66:31:b6:07:8c:
4a:8d:45:09:99:cd:95:9b:88:d4:c7:77:68:38:e9:00:e5:cc:
b7:d5:fc:b6:6f:67:00:82:62:37:e9:bf:71:cb:f3:8f:e9:66:
28:1f:b5:19:34:1f:f8:05:9c:96:80:50:97:39:87:1e:e0:42:
f6:ee:77:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:10 2025 by rpki-client