Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
File: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft (raw, json)
Hash identifier: T8aOZd6l2+wSlw6JwB+WpwLwghGAP+6xSBxSc8qTjew=
Subject key identifier: 11:F7:9C:F2:16:9C:32:7E:61:F4:CD:09:A3:A0:19:08:66:99:F0:92
Authority key identifier: B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
Certificate issuer: /CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Certificate serial: 0194BCE0E834297FE95D761DA2C3FFAF97C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 15:00:43 +0000
Manifest this update: Fri 31 Jan 2025 15:00:43 +0000
Manifest next update: Sat 01 Feb 2025 15:00:43 +0000
Files and hashes: 1: iRWK7zhmEqe5kSfNzw4pTeBGjvE.roa (hash: x9g5RUDfgJ6Mixu1OZfai6p4BgXIl99taX8ijSdqumo=)
2: tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl (hash: KTFp9baYSIOW0xdmU0cdM8P5WnVxJTeJAqhXrtcKq0c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e8:34:29:7f:e9:5d:76:1d:a2:c3:ff:af:97:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69cb709934b99f689dd1e99d72c1b000fd872c5
Validity
Not Before: Jan 31 15:00:43 2025 GMT
Not After : Feb 1 15:00:43 2025 GMT
Subject: CN=11f79cf2169c327e61f4cd09a3a019086699f092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:75:1f:4b:0c:ff:0a:31:2f:7c:47:b8:32:b3:
f2:d3:5f:b2:0c:8a:af:fe:59:90:ed:27:a4:bb:6e:
4c:1e:32:d2:bb:21:e1:12:4d:ba:bb:d6:36:77:d0:
b7:b4:16:ba:b4:bb:f7:c3:34:39:b5:2e:cb:58:34:
3d:6a:8b:69:67:ad:17:6d:b6:71:1a:04:c0:62:44:
1e:31:7d:f5:7e:36:70:ec:91:de:29:89:08:db:38:
57:93:43:e1:16:f1:14:89:b7:3a:6e:f3:a6:65:c1:
46:12:41:bd:8f:d1:cf:4e:81:4a:9b:22:1b:b7:cd:
55:51:22:be:a1:06:07:be:bb:0c:7a:7f:a3:1f:ff:
5b:81:aa:a3:77:ae:ca:eb:3d:d6:87:c7:df:b1:b8:
5e:84:1b:ea:e1:07:5d:3b:e2:9c:c4:d7:0b:30:56:
09:b8:c1:14:db:6a:9b:b8:52:8b:11:8f:0f:bf:90:
88:a1:e0:47:39:0f:be:61:ca:da:01:4a:6c:eb:a7:
38:2d:dc:0c:0a:e9:2c:c1:3e:5c:a4:5e:db:59:25:
f0:d3:12:57:c5:f1:67:71:09:7b:3d:09:56:2a:e9:
0f:5b:24:13:80:ca:d1:9b:2a:cd:55:b3:b4:6b:5f:
6e:d7:63:45:4d:80:84:50:4c:8a:1e:d2:5b:ae:6b:
ba:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:F7:9C:F2:16:9C:32:7E:61:F4:CD:09:A3:A0:19:08:66:99:F0:92
X509v3 Authority Key Identifier:
keyid:B6:9C:B7:09:93:4B:99:F6:89:DD:1E:99:D7:2C:1B:00:0F:D8:72:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/41e287-50b4-46ef-82cc-ca3b7278dde2/1/tpy3CZNLmfaJ3R6Z1ywbAA_YcsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:14:d0:d3:72:99:cf:1a:57:09:be:6f:9f:93:ce:c0:3e:d2:
fe:72:f4:62:f1:7d:54:7f:81:86:f9:ed:87:91:90:8e:40:76:
7d:ec:c7:d4:39:07:df:bb:37:e8:5f:4c:28:e8:2b:6e:98:86:
4d:67:66:c1:86:79:cd:83:f7:5f:dc:a0:d0:39:35:a9:22:bc:
1e:1b:5b:5c:1f:55:d3:c5:33:32:bb:37:5e:3f:07:7a:c9:3d:
67:bd:b3:f4:ad:c0:6c:57:42:1b:33:68:87:6e:41:a8:a3:70:
84:32:ba:87:94:10:09:b3:35:23:6d:4e:4e:d4:31:f9:9b:94:
59:76:d4:03:48:ce:97:9a:18:75:10:c0:7e:ef:d7:f6:a4:da:
b7:73:a8:c7:76:a9:80:ac:2b:93:52:59:32:d8:fc:2a:5e:e2:
2a:7d:0a:0b:5f:0f:42:4f:06:0c:d7:d8:a4:ef:0f:93:e3:ee:
78:a1:49:d8:fc:a0:50:b8:c3:c6:82:f3:29:d5:a6:7a:9a:4f:
3f:cb:bd:7b:d3:81:c7:17:1f:42:03:f9:97:6d:54:11:e8:1c:
98:a1:fb:01:e6:b2:e0:ec:5d:de:a1:7a:56:f6:a5:58:0b:27:
7f:8d:0e:9c:24:cb:f1:c1:1f:21:df:4d:31:14:4f:40:b1:2f:
53:a3:db:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:53 2025 by rpki-client