Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
File: TuFxPha0_Y8zAYh95qERmARJsp4.mft (raw, json)
Hash identifier: Y6pMWWqtOIVXEu55MuB/BgwfGkmRR6xlqeUBzRjjn2I=
Subject key identifier: E6:A7:40:18:1C:DD:16:92:BA:4D:21:70:3D:00:E2:3B:4C:1A:5A:70
Authority key identifier: 4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
Certificate issuer: /CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Certificate serial: 0194BD1766B97668B07A6ED29B1F6901E7E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:14 +0000
Manifest this update: Fri 31 Jan 2025 16:00:14 +0000
Manifest next update: Sat 01 Feb 2025 16:00:14 +0000
Files and hashes: 1: IJqJkkG32juZ9JC_-n807ugagLE.roa (hash: a5ckR7gAH5+zi6QRTimZRXE/Wgs09xk/gP8A83O6nQM=)
2: TuFxPha0_Y8zAYh95qERmARJsp4.crl (hash: exj0haEzhK3ldudo+wVsau/Y7ZIXrr2oQv+DBVAkW0I=)
3: yXKulFLipTbjSUmowLRqtzSALEA.roa (hash: LNf43mdJtw9mAKFqBqZr/MgvJNf0ToK4qGWZ05MJPz4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:66:b9:76:68:b0:7a:6e:d2:9b:1f:69:01:e7:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee1713e16b4fd8f3301887de6a111980449b29e
Validity
Not Before: Jan 31 16:00:14 2025 GMT
Not After : Feb 1 16:00:14 2025 GMT
Subject: CN=e6a740181cdd1692ba4d21703d00e23b4c1a5a70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b4:22:be:23:ed:45:83:f0:0b:5e:ad:f4:1f:
62:f4:ec:58:e3:30:47:26:c8:cd:03:7e:eb:9e:3b:
0c:9f:9d:96:57:b2:97:24:b8:5f:ed:e2:99:58:89:
4e:1d:e1:96:19:34:38:e8:50:a0:f6:89:d2:c3:a1:
a5:ff:8d:f7:59:c2:d4:4d:7b:1e:13:1c:b0:a1:54:
94:e6:60:9e:fe:92:a5:e1:78:d3:27:c7:92:ce:51:
c4:d6:f7:b5:dd:b3:0e:02:d2:71:45:ee:a7:fc:99:
e7:76:6a:f4:75:8b:21:44:0f:30:00:4a:28:f1:7b:
6a:b3:07:c9:ff:0f:1e:02:c9:c7:e7:59:91:75:d4:
c4:b7:74:94:f0:57:c5:cf:90:b0:f5:e5:bf:6c:a9:
62:a2:7d:e4:95:4a:d9:a2:3e:f1:ab:48:50:42:ce:
f6:15:08:e1:44:55:7d:33:12:cc:c1:6a:f1:3e:39:
a5:de:5e:f5:1f:db:4e:7b:fa:f5:a4:1d:c4:eb:6e:
8a:6b:eb:41:48:dd:e9:6e:3c:5b:c2:40:05:28:2a:
3d:2d:ad:15:b1:75:06:8b:83:ad:7c:40:bc:90:ac:
79:c6:2e:96:d1:a8:c2:e2:e1:45:f5:9e:e5:75:ec:
87:86:87:84:73:92:3e:a5:2d:fa:da:db:6d:22:b4:
9d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A7:40:18:1C:DD:16:92:BA:4D:21:70:3D:00:E2:3B:4C:1A:5A:70
X509v3 Authority Key Identifier:
keyid:4E:E1:71:3E:16:B4:FD:8F:33:01:88:7D:E6:A1:11:98:04:49:B2:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuFxPha0_Y8zAYh95qERmARJsp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/48c9f6-5b5f-41d4-8e56-08e4b79387c0/1/TuFxPha0_Y8zAYh95qERmARJsp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:53:18:76:bf:55:7c:49:fd:bf:a9:a3:b6:0a:90:7e:96:e3:
6b:ce:7b:36:4b:01:89:91:53:f9:e2:41:a1:27:ae:35:be:bb:
58:96:d8:3d:56:f5:fa:90:77:04:97:7a:ec:c7:61:51:85:a8:
ca:a3:84:02:47:96:62:26:a9:9f:24:8f:cb:37:85:a2:2c:f3:
37:ba:90:70:56:a6:4a:f1:6c:1b:2a:3e:6e:de:95:ed:13:86:
90:83:e3:3f:f3:3e:96:91:05:c2:b6:54:cb:66:75:48:16:b1:
7d:89:45:bd:3f:89:0c:1d:34:fa:b8:a2:e1:73:38:b7:35:c2:
f0:cd:6d:6c:69:3e:21:89:53:f2:3b:32:ab:bd:64:87:43:bc:
f2:56:34:52:f8:a1:ed:df:66:f0:97:ed:2e:35:02:49:1c:f2:
d3:09:5b:0e:7d:b2:55:5d:01:ef:15:8b:c5:0d:91:90:ee:57:
2c:ce:a8:a6:b1:fc:3f:ea:7f:19:06:ee:ff:f7:9e:27:d1:00:
ac:53:0f:53:af:4d:d3:84:a9:3e:55:14:4c:4d:ef:d7:9b:4a:
e6:d0:11:9e:a3:dd:f6:c1:38:bb:d0:97:f9:a6:f4:b2:60:d3:
5d:a4:bc:0c:a0:83:4f:d3:a0:22:22:bd:46:34:dd:01:85:92:
01:b9:1d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:53 2025 by rpki-client