Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
File: T5Exd1syYLEaFiQNHY52iR1_NzI.mft (raw, json)
Hash identifier: kvaPR8UqS5mqInrSTfpS4os7jf7FQ+ofBRrnAImOVgU=
Subject key identifier: FB:0C:31:11:1C:90:15:F6:04:9C:25:8B:E9:47:8E:FB:5C:7F:A0:7C
Authority key identifier: 4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
Certificate issuer: /CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Certificate serial: 0194BD17EBC53E8F619E080AFF291551BD99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
Manifest number: 08C7
Signing time: Fri 31 Jan 2025 16:00:48 +0000
Manifest this update: Fri 31 Jan 2025 16:00:48 +0000
Manifest next update: Sat 01 Feb 2025 16:00:48 +0000
Files and hashes: 1: AYVtDvGwbB6bXhQpwzhg-NOCqQo.roa (hash: slvWHqEplhTuafURcpV+s4X6e3tqlcfTB2bFVdHPC5g=)
2: T5Exd1syYLEaFiQNHY52iR1_NzI.crl (hash: MT/e5jl/tdbpdxA/Y7oI/IgWpsuziDZPwuuK8rLhkTo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:eb:c5:3e:8f:61:9e:08:0a:ff:29:15:51:bd:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9131775b3260b11a16240d1d8e76891d7f3732
Validity
Not Before: Jan 31 16:00:48 2025 GMT
Not After : Feb 1 16:00:48 2025 GMT
Subject: CN=fb0c31111c9015f6049c258be9478efb5c7fa07c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:c9:73:dd:0b:cd:be:31:15:0a:bf:ce:ee:d5:
bb:3d:16:cb:8d:21:16:cb:bb:2c:fc:71:91:c4:48:
a8:58:53:54:b6:fa:b2:54:fa:b9:bc:3e:dd:9a:8a:
de:40:23:50:06:8d:a5:ee:40:84:95:bd:99:25:a8:
46:36:ae:b1:e6:88:e8:8b:d0:5b:48:ff:e2:94:a5:
a2:75:a9:f1:91:80:15:e4:fc:06:ba:70:dc:3d:ea:
80:a3:84:f1:18:f5:4b:60:a0:84:30:b0:20:0f:70:
90:ee:ec:f1:a8:ac:74:17:1f:f7:c8:98:33:19:08:
de:37:d7:bd:e8:53:a1:7c:a4:43:3e:b2:ee:d0:04:
9d:be:ad:ea:41:7e:5b:5e:a3:30:d4:e7:75:8e:45:
8c:37:c2:26:6d:2b:17:d9:ce:1c:ac:1e:cb:9b:7f:
86:0d:cf:35:13:35:1b:41:38:15:03:fe:69:5d:03:
2c:d1:3e:dd:d3:6a:ec:59:cc:e2:86:68:bd:0e:8b:
a2:4f:82:96:7e:3f:d0:f9:06:28:3c:46:48:27:f3:
ad:ea:66:d4:e1:3a:ae:06:2b:40:0d:f3:8c:5b:27:
a8:2e:63:11:ca:11:a3:b8:2e:72:ec:78:02:6d:a8:
2a:50:f5:b9:8a:cb:9e:19:93:47:b7:ab:b6:76:1f:
a9:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0C:31:11:1C:90:15:F6:04:9C:25:8B:E9:47:8E:FB:5C:7F:A0:7C
X509v3 Authority Key Identifier:
keyid:4F:91:31:77:5B:32:60:B1:1A:16:24:0D:1D:8E:76:89:1D:7F:37:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5Exd1syYLEaFiQNHY52iR1_NzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/89962e-b11c-4e69-b413-ab63d45f4b6a/1/T5Exd1syYLEaFiQNHY52iR1_NzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:37:c0:97:2d:21:b3:7e:eb:08:bc:b3:fa:4c:73:65:aa:e5:
a7:7a:8e:4a:8b:95:16:d2:d9:a2:78:47:31:53:a8:8a:b0:7e:
b1:ad:cf:77:c1:7b:e1:8a:63:ef:89:b8:3b:e3:32:a2:95:c7:
0c:0d:b1:11:2f:62:8f:8c:58:df:15:03:9d:1a:ca:dc:8d:7f:
df:a3:ce:bc:b4:38:2b:73:ec:b2:2d:ec:24:81:84:4b:75:0b:
c7:c2:91:ec:fa:b1:62:b3:76:c5:d2:12:df:df:76:31:98:2e:
bd:a4:b3:c5:bb:22:e8:ba:6d:d9:52:92:1a:69:5b:57:fd:a7:
75:43:3b:6b:b5:75:ee:09:07:4e:aa:01:98:2d:a2:4f:b3:b0:
fe:8f:75:a6:a0:9f:4a:e7:39:e3:c1:80:03:90:2a:5e:10:34:
31:38:58:ee:bb:97:d4:77:19:fc:e0:49:6e:2a:50:69:5d:0e:
be:d6:fc:14:23:92:f4:3a:07:b1:09:40:91:84:fe:cd:06:6b:
b8:db:d7:d5:35:71:ee:08:49:dd:19:88:f8:75:6e:41:c6:e1:
3a:52:89:1e:9e:8c:50:ee:78:84:7d:45:14:d8:80:f6:bd:72:
fc:e2:32:97:9f:41:29:d6:da:4b:2f:ca:84:1b:8d:1a:7d:cf:
f7:53:b1:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:03:32 2025 by rpki-client