Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
File: tAifhEgwV6w2RkfIChsjyXa5MBY.mft (raw, json)
Hash identifier: g5SU++Swe4LHMfV2ql7/vAv9qiL3JenmKNX9WAjs1/w=
Subject key identifier: BA:BA:8B:D1:C2:9C:62:04:24:75:EA:D3:6A:66:8C:44:5D:AF:1F:C5
Authority key identifier: B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
Certificate issuer: /CN=b4089f84483057ac364647c80a1b23c976b93016
Certificate serial: 0194BBCDF312F98F70AB731F4EF49773D968
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 10:00:24 +0000
Manifest this update: Fri 31 Jan 2025 10:00:24 +0000
Manifest next update: Sat 01 Feb 2025 10:00:24 +0000
Files and hashes: 1: ZZlyR1qePInNwWMshU_T-zKOIRs.roa (hash: 1/uH+W7Kksp46/1+HMCQDG/zqQ+/+VqifvgRn9tMf2U=)
2: tAifhEgwV6w2RkfIChsjyXa5MBY.crl (hash: A3nhhIxrMewWLzTb1Fo2mlTFCVKffbWKb7OYXZxrwHg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:f3:12:f9:8f:70:ab:73:1f:4e:f4:97:73:d9:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4089f84483057ac364647c80a1b23c976b93016
Validity
Not Before: Jan 31 10:00:24 2025 GMT
Not After : Feb 1 10:00:24 2025 GMT
Subject: CN=baba8bd1c29c62042475ead36a668c445daf1fc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fb:70:2d:e5:f6:60:86:70:ab:18:65:1c:2f:
74:a2:f9:43:03:65:ec:8d:0f:f5:a4:82:5a:f5:f5:
43:ce:87:2f:43:24:6a:33:cd:28:5d:50:66:1a:16:
9d:d6:74:92:4f:af:5f:28:46:de:d8:b6:22:a4:b7:
28:f0:c8:d2:e7:f8:bf:97:17:75:46:f1:c1:3a:40:
dc:24:33:be:4b:4c:fb:b5:bc:7f:db:47:a0:39:1a:
37:ff:a5:83:66:8e:4a:dc:aa:d0:40:51:a4:0b:48:
a6:56:57:ce:d0:4b:48:b8:61:d4:46:9f:be:06:d2:
31:2d:fd:67:bd:f7:8a:48:3a:39:55:2f:06:67:c3:
2e:36:be:60:61:df:99:06:22:0d:3d:3e:81:5e:ef:
97:0a:5c:3f:c0:d1:b7:8e:46:d3:c8:73:06:7a:6e:
b9:72:69:e0:f0:eb:e6:31:ca:f6:5f:33:3f:35:ef:
b2:f3:a2:60:27:e5:db:77:7a:b0:c3:ff:74:17:cc:
07:0b:bf:c0:0c:ab:68:08:4e:c3:59:50:d4:94:10:
e5:98:17:c5:5f:69:da:0f:e9:d1:b0:b3:65:52:5e:
5d:5e:45:74:17:6a:32:d9:3a:87:5c:27:97:f9:84:
0a:6f:3d:31:06:a5:df:11:82:36:a1:97:6c:2f:d8:
67:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:BA:8B:D1:C2:9C:62:04:24:75:EA:D3:6A:66:8C:44:5D:AF:1F:C5
X509v3 Authority Key Identifier:
keyid:B4:08:9F:84:48:30:57:AC:36:46:47:C8:0A:1B:23:C9:76:B9:30:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAifhEgwV6w2RkfIChsjyXa5MBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/645f6a-2653-4d31-bb4e-1f87976137a0/1/tAifhEgwV6w2RkfIChsjyXa5MBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:4e:21:b2:a0:53:cb:03:34:e4:d4:25:9f:24:49:1a:07:25:
24:f7:42:67:0a:aa:17:ac:cd:75:7d:32:7c:06:10:9d:d5:61:
d0:d0:3c:e5:c2:e1:9b:37:b4:dc:d1:a0:e6:90:4d:4e:56:d7:
64:1f:e5:ee:bf:26:bb:75:6a:99:d0:6c:90:6a:c5:d9:32:18:
40:06:5c:13:34:9c:3f:46:2a:29:6e:51:d4:bf:25:4e:fd:34:
67:9f:63:2f:24:84:78:df:0d:52:97:ce:de:68:cf:98:24:9d:
72:28:b8:7d:5f:da:05:21:36:af:a8:7f:e1:af:39:8b:ca:37:
d6:7f:1c:bc:c1:5b:f3:9f:e3:30:1a:a7:17:dc:74:a4:ae:9c:
11:7e:33:fe:19:31:e9:7e:0f:a4:cc:fd:c2:cc:c2:b6:33:b9:
6a:e3:fd:75:6c:df:a8:21:a4:0f:fd:fa:4a:8c:5f:c5:75:d9:
62:43:51:8a:40:3c:d3:3a:79:77:77:33:e3:f3:0d:c5:3f:9e:
ba:5c:67:ba:92:56:9b:bd:fa:7a:1a:7c:d9:99:47:0f:ce:46:
40:9f:90:7e:c3:1e:93:f1:82:e7:4f:0b:15:cc:0f:09:9a:da:
29:69:09:10:ba:8f:5e:26:ea:56:46:23:66:9c:be:29:70:30:
9f:02:5e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:10:00 2025 by rpki-client