Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
File: tI9Br9xglWj7Izj9sgstDEIrcjs.mft (raw, json)
Hash identifier: FQSR8j/vK2/+CAxCF3NtIVdVgC3SJ9b9XFmLGzVqjPU=
Subject key identifier: A9:C0:FD:51:86:B5:F2:E6:BC:79:34:DA:33:6B:13:31:AC:EF:68:DE
Authority key identifier: B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
Certificate issuer: /CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Certificate serial: 0194BCA97CB729F0D6D5949EDFCD3CA8B899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 14:00:11 +0000
Manifest this update: Fri 31 Jan 2025 14:00:11 +0000
Manifest next update: Sat 01 Feb 2025 14:00:11 +0000
Files and hashes: 1: pA8DlYtcvRNA-jdEe_3R7YRB6rk.roa (hash: XB3O2NdSBoC9ldQGDUty/6gqx/qt/ZpvhUOCQP6iI1c=)
2: rg67AeqtMD0wJ1IIvMd4YeaFTyI.roa (hash: po3w7Qi8ZlRiTSE2vYAsVYJZWCbY0SnfvN8Hrjn9vnc=)
3: tI9Br9xglWj7Izj9sgstDEIrcjs.crl (hash: QvmcNFCLaq1ahCwiXgMSIhJGKavYI0oPnx5gzYNqBJI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:7c:b7:29:f0:d6:d5:94:9e:df:cd:3c:a8:b8:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b48f41afdc609568fb2338fdb20b2d0c422b723b
Validity
Not Before: Jan 31 14:00:11 2025 GMT
Not After : Feb 1 14:00:11 2025 GMT
Subject: CN=a9c0fd5186b5f2e6bc7934da336b1331acef68de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0f:7d:90:24:9a:f5:b4:4d:b8:9e:05:53:c7:
ca:2b:d1:32:45:f2:39:3e:82:e2:28:f3:62:19:ab:
96:5b:65:93:ff:58:5a:cd:89:73:c7:5f:e5:b2:d2:
88:09:58:d3:b8:a8:2b:91:f4:75:e1:5b:91:ef:46:
fd:b1:4a:95:fe:86:ec:67:57:8b:ee:8b:a7:cb:30:
cc:c4:39:93:8b:09:d6:fc:21:41:99:f4:75:47:85:
14:37:2c:28:ce:31:82:dc:57:46:92:22:a1:ec:4f:
fd:40:1b:f5:fb:69:57:c0:77:5b:48:85:01:3f:66:
86:a2:45:9c:42:10:4a:5c:c0:13:a1:ce:5b:11:77:
ab:00:de:14:b0:ab:34:da:cd:87:b3:bd:69:55:6d:
b6:b3:c7:d3:f8:7d:58:bd:1a:f6:30:4b:1f:5c:70:
a6:d3:bd:b6:8c:45:91:13:13:d8:38:ed:6c:0e:a4:
ed:e8:93:4c:3f:60:39:50:2b:97:10:e3:b0:d2:c5:
e0:9d:37:81:32:92:bd:f5:f7:94:56:46:90:33:14:
3d:60:b5:9f:ca:d2:68:88:61:74:dd:a4:e6:5d:dd:
49:15:30:a3:a3:fd:80:24:5a:09:a3:6a:92:42:fc:
cd:3b:d5:1e:e3:d1:c7:1c:54:24:c6:12:2d:f6:0e:
cd:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C0:FD:51:86:B5:F2:E6:BC:79:34:DA:33:6B:13:31:AC:EF:68:DE
X509v3 Authority Key Identifier:
keyid:B4:8F:41:AF:DC:60:95:68:FB:23:38:FD:B2:0B:2D:0C:42:2B:72:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tI9Br9xglWj7Izj9sgstDEIrcjs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/485769-5835-47f4-a9ff-8ec68e7886e2/1/tI9Br9xglWj7Izj9sgstDEIrcjs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:03:73:06:17:4b:42:ba:77:a9:c2:39:20:91:14:4c:73:d1:
5f:46:47:2e:67:d2:cf:dd:95:9c:b1:36:0b:04:8a:1a:43:8a:
ca:10:5c:16:64:f4:22:a2:b4:7d:eb:57:9d:38:65:75:e9:af:
0b:b5:af:03:dd:30:d8:87:7a:87:f5:03:3f:cb:67:0d:86:7d:
68:d4:4f:4b:e3:77:3f:4a:ca:89:bc:2e:62:af:34:ba:99:28:
95:d3:b9:4c:fb:00:bc:1f:55:e5:0e:5a:d1:ac:e5:1b:5f:86:
1f:04:09:83:64:92:8d:d8:b4:6d:55:4a:41:b0:35:8b:d5:a2:
56:2a:7f:81:26:2c:14:18:3a:da:c5:75:15:7d:54:97:3d:65:
2e:65:49:31:db:c5:d4:51:9e:95:c4:fa:a5:73:b1:58:ca:65:
9d:83:9c:ef:e6:32:33:9c:c9:57:ff:8a:ab:6b:82:03:b0:42:
c2:b4:de:90:3d:88:9f:cc:f1:ab:67:ea:b7:cf:07:85:9d:6a:
41:6b:8d:dd:e9:f4:2c:b2:14:b6:4c:5b:c8:78:f0:9f:a4:da:
72:a8:be:af:9e:a2:a6:78:45:9e:da:58:c6:b9:9b:a4:a2:98:
f3:01:2e:6a:69:a7:ec:90:f8:60:0c:2a:3a:9c:3a:10:cc:5d:
a8:11:4d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:36 2025 by rpki-client