Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
File: Ts9hevNfNyTn2oYOv75OwTiuGAA.mft (raw, json)
Hash identifier: 068JGmEPYytKTpn/TM+RiV65xmS7R/SdoZ3e8WKn9U8=
Subject key identifier: C2:0E:7D:5F:91:2F:19:5D:72:15:77:CD:CC:44:76:39:4E:05:6D:1B
Authority key identifier: 4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
Certificate issuer: /CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Certificate serial: 0194BD17DC3AC0B5C9B3055F05DC8AEC293E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
Manifest number: 116F
Signing time: Fri 31 Jan 2025 16:00:45 +0000
Manifest this update: Fri 31 Jan 2025 16:00:45 +0000
Manifest next update: Sat 01 Feb 2025 16:00:45 +0000
Files and hashes: 1: PhMpSawzWF4ex2C_9UJlDInR9Qw.roa (hash: 8Mwytw2cAElmiryd1WCNePGo22yW+hClbYeRH6uFgoU=)
2: Ts9hevNfNyTn2oYOv75OwTiuGAA.crl (hash: F3IyY/A4ivGgQdb46mitiBWgEbSncKmBCut4cStnm1Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:dc:3a:c0:b5:c9:b3:05:5f:05:dc:8a:ec:29:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ecf617af35f3724e7da860ebfbe4ec138ae1800
Validity
Not Before: Jan 31 16:00:45 2025 GMT
Not After : Feb 1 16:00:45 2025 GMT
Subject: CN=c20e7d5f912f195d721577cdcc4476394e056d1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:2a:2c:5a:ae:85:99:f1:31:57:02:11:d9:
17:a8:c4:95:3f:8a:72:4d:5f:ea:47:d1:58:1b:b3:
d1:83:e0:63:76:31:c1:c9:41:59:00:74:56:6e:4b:
40:df:6f:6c:ce:8c:c1:b3:a0:fe:92:cc:a8:59:86:
aa:9f:de:97:ea:92:4f:f2:d5:cc:d9:1a:04:32:1e:
0e:a0:e4:8e:03:91:20:bf:43:8d:e1:28:6d:7d:cc:
cf:a3:a6:49:3a:a1:b0:ad:96:93:77:bf:e9:4a:b6:
8f:18:bf:de:88:52:09:26:e1:da:ee:92:47:04:f8:
9f:73:f8:73:8a:53:2f:80:a9:d9:b8:99:f3:d4:c8:
63:21:59:25:31:16:2d:68:cb:c8:2b:70:52:b8:24:
62:77:d8:e7:eb:8b:2f:09:6a:85:a6:ec:4c:f2:5b:
38:cd:65:4e:5d:a0:7e:01:fe:35:e9:c7:2e:3f:aa:
72:18:07:de:88:09:c2:83:8f:ab:fc:86:ee:58:99:
b6:00:95:c3:f7:4f:f2:a8:36:a6:1a:e7:2d:c1:21:
e5:b7:3d:27:ac:be:91:3d:77:09:f8:db:6f:16:b0:
b5:88:4a:a2:ff:02:f5:cb:b4:93:3c:f6:48:ef:17:
ab:ad:00:64:26:3c:aa:26:e4:65:9d:6a:f8:5f:39:
aa:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:0E:7D:5F:91:2F:19:5D:72:15:77:CD:CC:44:76:39:4E:05:6D:1B
X509v3 Authority Key Identifier:
keyid:4E:CF:61:7A:F3:5F:37:24:E7:DA:86:0E:BF:BE:4E:C1:38:AE:18:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ts9hevNfNyTn2oYOv75OwTiuGAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/975c5e-6b05-4a47-9e91-13699365c3c7/1/Ts9hevNfNyTn2oYOv75OwTiuGAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:34:06:1b:8a:09:91:6a:73:b5:52:9d:8e:64:db:ba:bc:0a:
17:2d:b5:1f:53:eb:4f:aa:46:91:f6:41:47:66:57:08:89:24:
6c:19:b1:74:c1:97:70:26:91:ed:4f:c4:b1:e7:dc:5c:db:29:
f6:c6:4f:76:89:46:65:26:77:e9:b9:26:2a:49:7b:67:63:3a:
44:e8:29:e7:7b:7f:91:1d:06:c3:34:e1:41:a6:08:93:99:2d:
4f:20:a4:75:14:af:ac:40:fc:97:92:69:9b:7f:cc:5c:d8:2f:
9e:f7:25:9b:04:ac:f1:04:ce:db:92:18:e8:c6:4c:42:4c:2d:
0e:c6:cf:e8:e4:70:e9:e1:b1:29:83:2d:e1:ee:d8:dd:9f:19:
a7:b9:43:76:5d:50:b6:a9:05:5a:74:6a:38:36:dd:6c:54:f8:
65:61:5e:eb:03:4e:a8:95:d4:79:be:04:29:f7:1b:7f:59:f4:
d3:d4:8b:d4:8f:19:4f:38:38:5d:56:7f:b0:83:98:17:da:70:
a0:21:79:79:fa:c4:1e:f7:90:d6:a4:1a:2a:0c:f7:dc:e7:4c:
d6:ab:f5:4a:16:b7:0d:db:be:48:e7:70:53:41:31:76:94:56:
7c:a6:83:70:af:9a:2a:f3:eb:5f:24:4f:d6:1b:a0:27:12:f9:
f5:db:b6:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:43:02 2025 by rpki-client