Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
File: tYUi2sa83oxIEzNZkTKhYgDmpb4.mft (raw, json)
Hash identifier: ZX6NMwiPUDn4SqAC9ByupxP2hreBUqCkCrxUr2q+lhE=
Subject key identifier: 4A:DB:27:BB:2F:3E:96:92:17:F8:41:CB:F4:11:42:3C:A3:A2:BB:CE
Authority key identifier: B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
Certificate issuer: /CN=b58522dac6bcde8c481333599132a16200e6a5be
Certificate serial: 0194BBCE7D2FA30C388465165319387CC42C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
Manifest number: 0784
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: 5moGvKAoN95-3rdirRXOwCahhvs.roa (hash: SkhAzMm5Jb5vcIiM14h4SYz3DQTRyqaR2eF+qq4Rdl0=)
2: RuuQV8FVAOprAh_8jcQjyKszeBc.roa (hash: kX89cdA0JPKtfSqgIarOumMCZ1cTxgD0uR8aSG1ObUs=)
3: tYUi2sa83oxIEzNZkTKhYgDmpb4.crl (hash: tJxxcZ7qXECaO80LOLbS2m6Dlt0ODZSFGCqFTT2JRKQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7d:2f:a3:0c:38:84:65:16:53:19:38:7c:c4:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b58522dac6bcde8c481333599132a16200e6a5be
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=4adb27bb2f3e969217f841cbf411423ca3a2bbce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3d:9f:f5:df:1d:35:07:5d:67:25:31:f4:82:
d8:aa:d6:dd:c4:da:e3:bf:eb:75:61:3b:f8:c1:48:
f2:43:50:dc:71:c3:67:98:6d:56:65:ec:06:e6:b3:
7b:00:84:b3:0f:c1:b8:f0:46:ee:98:7b:33:de:5b:
dd:05:e2:d4:79:11:37:72:76:69:cd:84:3a:4e:4b:
24:bb:69:50:04:39:02:52:f0:06:df:d0:14:10:5b:
05:73:4d:81:d1:83:3c:42:41:30:f0:5e:56:15:75:
53:5c:c2:0b:47:bb:0d:5d:74:b7:e7:68:bf:b2:29:
83:4f:6c:31:7e:5d:52:70:37:35:ba:3c:34:de:c5:
b6:79:3e:23:6a:86:89:82:3e:6c:cd:63:37:50:ff:
95:4c:2b:b9:c8:c3:2d:40:dc:e7:6b:a3:63:c1:23:
8d:a7:8e:ca:c3:2c:db:00:08:ee:76:c0:bf:9a:36:
76:09:55:da:bd:92:7e:a4:56:ec:27:e1:cd:08:27:
eb:4e:1b:ad:39:2b:46:b3:dc:52:10:5e:60:ac:2e:
99:fb:7d:bf:44:f9:ae:a5:5d:62:d0:cb:54:98:03:
f2:3e:cf:a1:ca:3d:b7:05:c2:36:6b:81:ff:07:e9:
e6:63:f1:90:0c:3b:f8:c2:0e:2d:5b:b2:13:5a:6d:
fe:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:DB:27:BB:2F:3E:96:92:17:F8:41:CB:F4:11:42:3C:A3:A2:BB:CE
X509v3 Authority Key Identifier:
keyid:B5:85:22:DA:C6:BC:DE:8C:48:13:33:59:91:32:A1:62:00:E6:A5:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tYUi2sa83oxIEzNZkTKhYgDmpb4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/8b5d2a-4bc4-406f-97d5-ba3947c9b22b/1/tYUi2sa83oxIEzNZkTKhYgDmpb4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b4:92:b2:3e:05:b2:b9:53:2c:d6:6c:5b:47:10:60:6e:56:
e8:42:63:87:3b:86:81:ac:4d:6a:70:2f:99:66:8c:35:b6:0d:
e5:4f:da:d6:42:ec:b4:3d:7c:a9:dd:a3:9f:c3:f2:75:47:54:
82:61:f9:31:40:71:e4:73:e7:9b:a5:67:75:ed:d1:d0:99:dd:
33:a9:fa:dd:f0:2e:6e:74:4c:7f:83:33:81:f1:cd:84:20:17:
ca:8a:10:16:26:f8:42:92:26:73:c8:48:1f:9d:fd:c8:7d:e9:
01:a5:5d:f7:5b:27:50:a8:68:0d:a3:a7:92:96:83:dd:7c:c2:
d5:65:c4:15:2c:01:52:a8:50:23:29:1b:ee:15:98:1c:d0:17:
36:6b:f2:20:ce:35:55:d1:3f:ef:8f:6c:c3:47:77:b4:99:37:
ab:5e:4e:3b:95:b2:45:4a:ea:4c:d0:a0:f7:60:d9:22:6d:3e:
bf:35:4c:c6:dc:3e:d0:38:e9:1d:01:5b:af:46:30:5c:ec:32:
4d:a5:b8:a1:a5:44:66:38:0e:38:0c:80:14:a6:bc:bc:86:f4:
e5:53:8d:27:34:f1:93:be:c8:72:fd:da:49:ac:eb:e4:80:23:
25:69:93:86:7f:ee:e1:ce:25:4f:82:22:b6:21:6a:45:dd:42:
d4:6e:79:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:15 2025 by rpki-client