Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
File: tNc6atd6j4WbQD2yznFegtHPMv4.mft (raw, json)
Hash identifier: 9zp/Eu/YgvXuyFvwRfTYrYxJ0XR1l9jYL1Ux1u8ko7Q=
Subject key identifier: D8:B8:9C:90:24:4F:EB:9A:99:B9:80:9E:19:5A:08:F6:D8:59:53:3A
Authority key identifier: B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
Certificate issuer: /CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Certificate serial: 0194BC0518BB78BD2C7D64348E7AA16205E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:38 +0000
Manifest this update: Fri 31 Jan 2025 11:00:38 +0000
Manifest next update: Sat 01 Feb 2025 11:00:38 +0000
Files and hashes: 1: YO-tGwbdqI4YYY7I1KqnEaElBoQ.roa (hash: XZFdc4B2lVuIwGuWp8Gzl21H5s/bjgOkXy1zS/FUzmY=)
2: r8uOOwHL3Wt4pGrUJebg8yZ8WaY.roa (hash: Eioa5I9ONK/XZQXZG+CzeC8xkMTpLpCoDVH43Ycxzzc=)
3: tNc6atd6j4WbQD2yznFegtHPMv4.crl (hash: 0YbqPaXf5ZG7v53FKlzzMgcSWOrSAMiC7qm/f4oH2l8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:18:bb:78:bd:2c:7d:64:34:8e:7a:a1:62:05:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4d73a6ad77a8f859b403db2ce715e82d1cf32fe
Validity
Not Before: Jan 31 11:00:38 2025 GMT
Not After : Feb 1 11:00:38 2025 GMT
Subject: CN=d8b89c90244feb9a99b9809e195a08f6d859533a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:fc:15:fb:26:7c:d7:ee:bd:3c:bb:79:1a:dc:
e8:7d:12:70:f9:ea:90:d4:43:c4:ce:cb:39:f3:61:
7e:54:d9:18:16:5f:6f:cb:69:2f:19:94:e9:55:16:
ed:45:e0:e8:aa:dc:7d:d2:bb:6a:b8:94:4a:09:ca:
76:49:cf:d1:fa:eb:e4:2f:d5:24:44:55:4e:06:8c:
40:54:3a:aa:36:e2:03:6f:3a:5f:6c:35:36:94:7a:
ec:b9:f7:37:5f:fd:79:6d:f5:0f:cb:50:e3:df:2f:
44:11:e0:17:e7:d5:3c:7f:2f:de:54:61:e8:28:55:
d1:ca:e5:a5:48:f6:09:2e:d5:e5:ba:07:a3:a1:15:
f7:9b:4c:9a:fe:27:71:b7:3b:c3:66:68:0e:4e:ed:
41:84:8f:0a:70:bf:6e:50:77:59:aa:42:a8:e4:e5:
44:37:45:94:f1:39:d0:48:d8:c3:41:ea:9c:b9:b6:
67:80:3e:42:8b:f5:fd:6d:f0:1c:53:62:30:24:71:
e6:5a:d9:f1:89:df:5e:6f:95:0a:48:dc:af:ec:98:
5d:51:d6:67:d9:89:cb:d0:de:df:4a:c7:69:35:5d:
c1:64:c6:42:de:dc:95:64:3b:5e:e7:b3:ad:8e:be:
c0:12:93:fb:e6:f1:11:74:71:b7:45:5e:13:1b:a6:
48:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B8:9C:90:24:4F:EB:9A:99:B9:80:9E:19:5A:08:F6:D8:59:53:3A
X509v3 Authority Key Identifier:
keyid:B4:D7:3A:6A:D7:7A:8F:85:9B:40:3D:B2:CE:71:5E:82:D1:CF:32:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tNc6atd6j4WbQD2yznFegtHPMv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/7e7ee7-1bd4-4435-871f-6cf8e567ff1c/1/tNc6atd6j4WbQD2yznFegtHPMv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:4e:f2:33:ed:46:09:f5:3b:0a:75:30:c5:2d:71:92:98:3c:
bb:88:4c:8d:b9:0c:bd:8c:da:5c:b6:48:6a:cc:25:fe:ef:0a:
79:3f:69:5d:0a:27:fe:d3:b8:3c:5e:c7:ae:5a:c8:7a:4e:84:
e2:b8:a4:14:84:d5:d6:9e:a4:f2:e4:8c:c8:4b:1f:ef:25:3f:
cf:2d:53:01:e9:a3:63:ce:a0:42:a1:f2:01:af:59:41:fd:34:
be:1c:68:e3:a5:bc:06:4c:1f:79:83:24:0b:97:d5:5c:3c:2e:
c1:a3:55:fe:00:49:64:85:85:ac:48:fd:87:e7:48:b7:75:a5:
10:f5:40:32:00:4b:7f:f2:20:48:23:39:b5:95:b1:ea:f0:ab:
87:6c:be:15:39:0b:27:87:78:70:4b:2b:1f:03:6f:ae:49:3b:
86:4a:ad:f8:fb:f0:14:bf:0a:9a:a9:54:6a:65:0d:a1:4e:dc:
a5:e1:43:c8:03:16:a0:a4:89:f0:ab:0d:6b:31:03:de:9d:85:
6b:11:08:d9:0e:64:c0:5e:45:4b:f8:6d:ae:b4:71:9f:8b:0c:
52:ee:15:ab:fe:2d:2f:cd:bb:30:c2:73:0c:8c:0b:53:51:de:
4d:76:0c:7b:68:51:46:98:f0:41:7d:47:79:0a:ec:5f:20:b1:
dd:c1:68:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:49 2025 by rpki-client