Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
File: tfrsS42ZLda5zYmoSJ08OmUq7NI.mft (raw, json)
Hash identifier: 0eiGhZfBcsG7++L3FrUqIEqVKsKFXaAquUkshiDizG8=
Subject key identifier: 6B:11:A8:4B:10:DE:C4:AA:06:A1:24:0B:BC:56:46:1B:B1:F1:8B:A7
Authority key identifier: B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
Certificate issuer: /CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Certificate serial: 0194BCAA19B400062317D6A5CDE0DC2069D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: 4yLFcyM54Hv8nF5ON-TIrD-1oYQ.roa (hash: hE+OT4FiIcXi0TRuDiRDYqpuBeR4hhUYci4sdFCd/CY=)
2: jKEy0LJLh7AqTPNLnCDWho1dIJ0.roa (hash: BKRsVG5h+FxIv9YJSObhtgL9EqcN1BIPxpc/4d7NHx4=)
3: tfrsS42ZLda5zYmoSJ08OmUq7NI.crl (hash: DZYDOnEXSB2SDw7Ung5HJErn89lp00oBXBz8w+e2t/E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:19:b4:00:06:23:17:d6:a5:cd:e0:dc:20:69:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5faec4b8d992dd6b9cd89a8489d3c3a652aecd2
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=6b11a84b10dec4aa06a1240bbc56461bb1f18ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a4:0a:b2:d3:52:65:15:a3:3c:b8:fc:90:82:
92:cd:92:2f:ca:98:5e:67:6c:74:52:a4:69:e4:1c:
50:d3:70:c2:43:f8:c1:e7:ed:c6:6f:e8:21:11:f8:
aa:59:02:4a:18:5f:59:d2:80:fc:86:b8:70:b1:a8:
e8:1c:fe:25:4c:7f:d4:90:1b:32:23:c5:07:5f:1a:
42:72:2a:e6:23:85:2b:66:90:0e:7b:2c:11:3f:b2:
ca:e0:3f:c3:72:62:30:b9:67:56:dd:be:e6:e2:03:
73:00:0a:d5:93:b7:1d:f3:c7:6f:0a:8f:f5:c0:32:
86:60:61:7c:4c:8e:e1:01:68:01:44:ab:33:96:2a:
be:13:d1:23:a1:f1:03:6b:0f:2c:39:50:99:58:dd:
31:4e:ac:92:de:14:33:1a:de:38:6e:d9:8c:4b:a6:
0e:1f:dc:5d:3e:3e:91:a9:dc:b1:46:99:99:50:fd:
3e:36:2d:86:af:60:59:86:34:7e:ef:45:f8:99:c1:
17:df:96:80:15:95:2f:cd:28:ce:40:a0:b6:3b:50:
04:6b:71:a5:b9:eb:29:83:cc:43:2b:a1:d0:0e:fe:
00:87:cd:d5:2c:ea:bf:55:de:0c:7e:e4:9b:ed:e9:
ae:f3:77:a2:0e:67:16:d8:9a:5f:df:95:bc:e3:8d:
4e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:11:A8:4B:10:DE:C4:AA:06:A1:24:0B:BC:56:46:1B:B1:F1:8B:A7
X509v3 Authority Key Identifier:
keyid:B5:FA:EC:4B:8D:99:2D:D6:B9:CD:89:A8:48:9D:3C:3A:65:2A:EC:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tfrsS42ZLda5zYmoSJ08OmUq7NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/68c296-69b2-4070-9ff9-4243decad360/1/tfrsS42ZLda5zYmoSJ08OmUq7NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:9d:f8:e7:3e:8f:c9:22:ee:ad:95:0a:e1:48:67:87:c5:d6:
37:ce:e3:aa:5e:67:72:26:a7:20:f3:d7:b2:44:bb:b6:05:2e:
16:ea:ca:0e:81:99:8c:aa:51:56:2a:68:8d:9d:84:bd:2d:fa:
c5:d5:6d:a5:02:75:36:89:cb:5e:ba:0a:ac:3d:d1:53:22:db:
25:dc:4b:77:da:34:2d:56:87:47:12:76:23:95:6f:75:fc:dc:
fe:bb:f0:7a:3d:70:cf:d5:3c:eb:c4:10:25:25:46:6f:f2:0c:
7c:5d:8e:d3:f4:0b:6c:a6:4b:d0:8d:0e:c5:85:96:63:83:87:
b2:c4:e3:79:9b:e6:44:68:8e:56:58:66:a6:5e:38:80:8d:eb:
83:80:07:b8:a6:0c:e3:ef:82:00:fb:59:02:db:ec:c4:38:43:
55:0e:84:0a:9e:ec:e3:e4:8b:0d:ef:bd:b0:7f:67:e2:ce:e3:
47:e4:5a:bd:37:6c:80:bf:df:04:11:d5:b1:e9:94:86:c4:ef:
80:2d:c2:c2:23:97:7c:33:9d:1f:74:a2:5a:4b:bd:03:5d:64:
12:4e:96:a2:86:45:71:13:7d:dc:30:db:c0:33:67:4f:1f:0a:
9c:20:84:74:c0:9d:00:5d:9e:a3:8b:99:53:89:27:87:75:7e:
a2:63:12:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:20:04 2025 by rpki-client