Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
File: toqZTkLmDaT0pUdbFfXidRbHzxQ.mft (raw, json)
Hash identifier: C8zyEQM42bdvidHkbiR1JLWPUVuZbOOcLQXmGh8ZeM8=
Subject key identifier: 2B:30:E9:99:67:E5:3F:BC:31:FF:4D:E1:E2:C4:11:4F:D1:D1:3F:CC
Authority key identifier: B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
Certificate issuer: /CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Certificate serial: 0194BD8540CAACBB57177474EC52F5B74918
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:14 +0000
Manifest this update: Fri 31 Jan 2025 18:00:14 +0000
Manifest next update: Sat 01 Feb 2025 18:00:14 +0000
Files and hashes: 1: Gqb6OgiiPyPHWY86Q4S-zwTF1xY.roa (hash: Os7YNQWNXg8f2DoDK3e2S/uuUULEf5X8h6dOyySYafw=)
2: toqZTkLmDaT0pUdbFfXidRbHzxQ.crl (hash: 98OuR6MGMUUyuoJgnap3e4qLHe1vMVUXCVitL/vmh1Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:40:ca:ac:bb:57:17:74:74:ec:52:f5:b7:49:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68a994e42e60da4f4a5475b15f5e27516c7cf14
Validity
Not Before: Jan 31 18:00:14 2025 GMT
Not After : Feb 1 18:00:14 2025 GMT
Subject: CN=2b30e99967e53fbc31ff4de1e2c4114fd1d13fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4e:39:54:29:6e:aa:db:24:8e:d3:90:96:c4:
ae:09:3c:08:60:1b:9e:21:cc:36:78:c7:61:69:ba:
38:63:68:c5:5e:0c:e3:08:57:e1:ba:36:e9:b1:76:
d4:98:9c:52:db:81:b6:a7:51:ac:c2:a9:c1:47:1e:
64:4d:97:d4:25:60:9d:51:46:f4:42:c0:ee:a3:12:
20:ce:84:ca:7d:55:d0:91:54:20:19:ae:69:65:d2:
39:24:d3:0a:f8:14:18:fa:3a:8b:5e:d4:ea:3e:c4:
fb:e1:cc:77:fd:a8:54:8d:28:11:e4:46:12:af:47:
6d:b1:96:f5:f6:b1:0f:2e:cd:13:7c:4c:4c:eb:b3:
74:93:09:23:5f:93:a9:5f:36:00:51:48:2f:a1:85:
26:9c:2b:23:d8:cd:9e:41:2f:48:33:0d:e0:09:c9:
31:4c:b4:97:6b:a1:8c:6c:b4:77:b4:50:47:e5:34:
cc:ec:0e:ca:e1:0f:f7:67:e6:b8:1a:d1:ca:5a:98:
96:4b:6c:57:34:9e:ee:13:d1:ee:7f:1e:38:eb:71:
b6:35:e1:59:cc:31:9a:f4:7f:24:7e:0f:24:02:ba:
7d:88:cb:90:98:d8:58:41:8c:f4:23:de:4e:ed:f5:
2f:3e:2c:d4:cd:4b:51:80:26:43:19:26:ab:49:99:
bc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:30:E9:99:67:E5:3F:BC:31:FF:4D:E1:E2:C4:11:4F:D1:D1:3F:CC
X509v3 Authority Key Identifier:
keyid:B6:8A:99:4E:42:E6:0D:A4:F4:A5:47:5B:15:F5:E2:75:16:C7:CF:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toqZTkLmDaT0pUdbFfXidRbHzxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/f3804d-e8ad-4d08-990e-bd3bebcddeb3/1/toqZTkLmDaT0pUdbFfXidRbHzxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:0f:ef:83:2d:e5:f8:e2:12:6d:68:c2:7f:c3:70:ef:5e:7e:
53:8b:ce:5b:c0:b7:50:11:42:f9:5b:36:82:4f:c7:fa:7f:08:
b7:5d:eb:ba:1a:7b:f2:a6:7a:25:63:9e:e9:aa:ea:8c:93:23:
1c:a8:a9:ad:80:e6:75:1c:4e:7d:bd:9b:b9:64:03:1e:4a:10:
29:c3:0a:fe:3e:91:37:84:f3:1f:f5:60:45:ee:8e:1f:95:ea:
cc:96:1a:95:5d:2c:3a:33:d0:29:5c:99:56:9e:1f:fb:62:e1:
b2:a7:f8:6d:66:89:7d:1a:73:d2:ee:e2:33:74:6e:db:a0:19:
fd:32:b3:b9:d4:47:82:f9:08:62:7f:15:77:f5:69:cc:5c:b5:
50:7d:99:e3:e9:51:be:ad:52:39:5d:b7:db:d5:d6:0b:75:81:
7b:ea:41:42:5b:28:ae:e8:1c:7e:74:98:17:f9:f8:9b:96:f3:
52:a0:51:62:d1:d3:93:39:06:ed:9b:81:af:11:30:16:a9:d6:
fd:b9:90:d3:71:b2:3a:cd:70:38:f0:31:04:c7:95:9e:aa:08:
93:52:12:87:d4:73:eb:0a:89:b7:67:cd:8a:39:68:c7:0b:63:
90:c4:2b:00:49:de:b2:d6:a8:2e:03:35:d0:42:13:be:79:04:
80:80:0b:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:11:10 2025 by rpki-client