Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
File: TiopnxgqH9UdSwNimXr3qq4Na-k.mft (raw, json)
Hash identifier: GaP0/sjjA/DuTTYWLrimGvvdxYx/UbDdqlAr3D45WtY=
Subject key identifier: 65:D2:07:C8:CE:B7:8E:1F:F0:14:2D:7B:B7:66:1F:87:D0:E3:AD:23
Authority key identifier: 4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
Certificate issuer: /CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Certificate serial: 0194BCA9EF875B435467735DCDBEC3E138C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 14:00:40 +0000
Manifest this update: Fri 31 Jan 2025 14:00:40 +0000
Manifest next update: Sat 01 Feb 2025 14:00:40 +0000
Files and hashes: 1: 6L1wb6rk6JRmH0kdueo5VHSR6sA.roa (hash: v/vwNDFKpqZbOrt+k+dslXb31bPIeE6v/BAFBhGcR04=)
2: Q1ID3jqh-PT7k00It8t9krcFrp0.roa (hash: 53/LWfxj68LBwdUpxNq1PQF6QDcY5qwZBSFj5Skh+H4=)
3: TiopnxgqH9UdSwNimXr3qq4Na-k.crl (hash: WENAANNxIxrusU5pIMBPoexCcWqp0W6Oqlef6kvyZu4=)
4: uAwoVI3dpDeVF6OQWKoCJ5jN8xY.roa (hash: tIErXtWim6v8+5J+f3v+yr7n8hWCWnrcd2Ahi85yzJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:ef:87:5b:43:54:67:73:5d:cd:be:c3:e1:38:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e2a299f182a1fd51d4b0362997af7aaae0d6be9
Validity
Not Before: Jan 31 14:00:40 2025 GMT
Not After : Feb 1 14:00:40 2025 GMT
Subject: CN=65d207c8ceb78e1ff0142d7bb7661f87d0e3ad23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ad:e3:5c:ec:52:8e:12:7c:90:53:02:7f:2b:
19:54:c8:cb:fc:19:5b:c1:e5:f6:50:e7:55:0d:56:
e0:35:1f:d6:2c:20:0f:40:07:83:b3:fe:a2:d8:f6:
36:e7:db:ec:59:4e:c1:5a:f8:03:d7:9c:cf:a9:76:
21:ca:80:e7:5f:26:ac:c8:6b:42:7f:e4:2e:56:77:
ca:85:e4:e9:c3:c9:69:7a:71:02:97:92:2f:f2:31:
b6:a4:c9:e8:3a:78:b1:44:50:06:0f:c0:39:53:4c:
ca:11:d1:cb:f9:a5:ed:9b:94:f7:1f:37:d5:a1:59:
35:95:bf:35:f1:18:9e:2c:19:d9:31:90:38:5d:7b:
07:5e:f7:3b:59:a7:56:1a:09:51:2d:47:d2:6c:10:
8d:fe:3c:b3:58:58:ca:6d:77:bf:87:85:19:b4:f9:
b7:a9:d5:d6:be:19:2a:0e:05:ea:76:6d:65:4f:f9:
85:1c:92:86:b1:14:c8:75:ef:7a:29:a0:e1:53:d9:
10:fb:77:29:0a:9e:21:34:d0:6e:9a:4e:f6:43:0c:
23:aa:2e:9a:4c:6e:05:1b:ec:90:b9:ef:36:fe:11:
dc:32:e8:27:5b:28:4c:e3:73:b4:df:ec:de:a6:cc:
18:3e:1b:a2:9b:6b:f9:53:47:9f:ea:c1:1d:b2:72:
b0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D2:07:C8:CE:B7:8E:1F:F0:14:2D:7B:B7:66:1F:87:D0:E3:AD:23
X509v3 Authority Key Identifier:
keyid:4E:2A:29:9F:18:2A:1F:D5:1D:4B:03:62:99:7A:F7:AA:AE:0D:6B:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TiopnxgqH9UdSwNimXr3qq4Na-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d3df26-3db5-4539-8030-f2ce77e3191e/1/TiopnxgqH9UdSwNimXr3qq4Na-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:3e:62:d9:36:65:f2:cb:28:3a:ef:8d:25:bf:0b:18:df:f2:
aa:df:4e:c6:65:b4:a0:2e:2d:e6:8e:eb:cd:22:45:47:ef:91:
f7:4e:80:fa:a9:a4:cb:6b:9c:16:a9:ed:b2:ba:83:5c:76:46:
9f:11:21:68:1d:24:8a:30:d9:0c:d1:0d:bb:05:19:88:01:c7:
2f:26:d2:8f:65:9f:eb:22:a8:26:6b:68:bb:eb:fb:ed:b1:35:
28:c9:64:0a:dd:14:83:2e:ff:46:95:9a:43:06:fa:2a:5a:96:
55:3b:7a:ec:2a:a8:3e:b1:03:cc:31:a9:9d:37:94:12:f0:f7:
a4:b7:ab:94:dd:af:bb:13:6c:33:77:0c:9f:ce:c8:31:6a:6e:
4c:bc:66:8f:7d:f1:2d:d9:02:91:5a:0a:0e:4f:16:c1:cb:04:
7e:98:bd:06:8a:d7:20:ae:ee:a3:aa:76:e5:5f:34:44:ad:ec:
26:c5:0d:37:4f:ac:a0:fe:98:c2:70:f2:d9:53:c6:c1:03:88:
ac:78:0a:de:30:15:32:6e:d2:5c:74:9e:a4:8c:5a:cf:e5:b3:
b6:16:59:84:ad:f9:db:1d:62:f3:29:72:5d:5b:a4:68:66:0b:
1d:a6:f4:61:7e:66:5f:a0:84:d9:6f:cc:e1:1e:e8:8e:25:e1:
7b:6b:ef:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:09 2025 by rpki-client