Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
File: t0zj88XlovnYuKTHeoNh-KIW860.mft (raw, json)
Hash identifier: vFKYhkPZOHIa6rONWj7vl0le0ROwRJCxTETO1UgxmwQ=
Subject key identifier: 9B:E1:0A:BC:7E:5C:0F:88:33:36:20:77:1D:EF:95:D4:51:C6:37:6D
Authority key identifier: B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
Certificate issuer: /CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Certificate serial: 0194BCE0B40CD80F4F1E9912EB25F1BC0D65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
Manifest number: 0F46
Signing time: Fri 31 Jan 2025 15:00:30 +0000
Manifest this update: Fri 31 Jan 2025 15:00:30 +0000
Manifest next update: Sat 01 Feb 2025 15:00:30 +0000
Files and hashes: 1: CWinuPyhpx9dz9dUy6hm9U-hSH0.roa (hash: kzRVIrmXy5CpUKL1SvqWwqKDXVmBwcHxugVImN5DgH0=)
2: _YcVUBg4pBpfDLeQd5mPM0GEYXY.roa (hash: TyordHwYJ+m11Vugk833ssnB80M13ALr7nNUHskLV34=)
3: t0zj88XlovnYuKTHeoNh-KIW860.crl (hash: ksWHrHCmGFpQ6YjgIJnI9Adh2zt2/cW/r7bnoSWrSTI=)
4: yXmhizI4Z65kZAreixYHF_jmabo.roa (hash: fvFB8WtSEXeTN1SuEvO/tTJVrm8z5zv+uzQCLKVxzdI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:b4:0c:d8:0f:4f:1e:99:12:eb:25:f1:bc:0d:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74ce3f3c5e5a2f9d8b8a4c77a8361f8a216f3ad
Validity
Not Before: Jan 31 15:00:30 2025 GMT
Not After : Feb 1 15:00:30 2025 GMT
Subject: CN=9be10abc7e5c0f88333620771def95d451c6376d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3e:9b:71:16:7e:52:96:2b:f9:b6:57:f4:3f:
86:d6:37:2a:4d:81:84:00:ff:83:84:39:88:95:98:
f6:f2:c6:05:37:58:75:1e:76:87:ac:ea:c2:8a:62:
b7:40:0d:40:9a:08:0a:35:89:be:00:c7:52:bb:f9:
91:a7:ef:ff:4c:a0:3c:5b:b4:54:d4:38:fa:cb:16:
34:1f:05:40:fa:3c:da:1e:d4:23:46:ec:69:f1:be:
74:6e:e5:73:2d:57:58:61:1f:cf:56:d3:45:0f:b8:
1d:ec:72:10:fa:6b:57:76:67:3a:7e:b0:a9:a0:c0:
e6:fb:d8:5f:7f:1a:e7:7b:b9:6b:1b:1e:eb:34:08:
59:35:26:55:b9:53:36:54:05:09:c4:3b:3f:bc:89:
c1:52:e5:01:f3:e5:dc:8a:d4:eb:ae:7b:3a:71:0c:
81:0f:f0:8c:b5:9b:af:f1:24:3d:97:1d:39:a1:e8:
f8:8b:97:6e:84:a5:50:92:82:11:3e:e5:3f:97:2a:
0b:71:40:74:b6:53:c2:e5:40:4c:29:8c:2d:7a:35:
66:e9:89:89:45:62:9a:11:51:2b:7e:1c:14:9c:b4:
a9:b5:d4:35:63:be:2c:4e:32:a7:fa:cb:d6:fa:ee:
27:9a:66:0d:65:32:d5:e3:5f:89:47:7d:2a:b8:d8:
9f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E1:0A:BC:7E:5C:0F:88:33:36:20:77:1D:EF:95:D4:51:C6:37:6D
X509v3 Authority Key Identifier:
keyid:B7:4C:E3:F3:C5:E5:A2:F9:D8:B8:A4:C7:7A:83:61:F8:A2:16:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t0zj88XlovnYuKTHeoNh-KIW860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ac681f-05d2-4045-ae10-5ebdd9e2887c/1/t0zj88XlovnYuKTHeoNh-KIW860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f6:7a:09:0e:ef:34:f0:89:06:b1:3a:f1:c1:37:81:75:bb:
0c:70:a6:0e:32:bb:06:a3:43:c4:09:18:cc:e8:38:53:a5:16:
76:85:6e:db:85:43:83:87:95:3d:8d:25:ab:b3:21:4c:36:db:
e9:b9:d0:15:ba:1d:73:3b:78:23:5b:e6:cb:0c:da:0d:4c:65:
1f:36:e5:b5:80:0a:f1:a6:cd:d9:01:8e:05:ff:77:a6:88:77:
01:40:3b:9f:6e:fb:a6:2c:63:13:17:62:5c:0e:16:bc:34:2d:
b7:9b:d6:ce:ac:d1:d1:96:0d:f2:1d:9a:de:a1:e9:4b:b2:5c:
06:61:34:7d:58:31:49:33:86:b5:0b:50:87:75:9a:a3:16:0c:
de:5f:38:09:81:b2:7a:a5:f6:88:b9:a6:dd:c5:fe:bb:95:ad:
29:8d:ac:4a:3e:54:6a:56:f7:25:48:6c:3b:07:29:4c:19:a0:
07:5f:92:3a:a0:a9:c4:aa:fd:9b:3b:6e:5a:06:9c:0d:d4:82:
2e:f5:38:2a:ca:07:1b:02:3f:ae:cf:1a:da:b8:cd:df:55:bf:
26:3c:de:79:71:7b:55:76:0f:88:07:96:61:68:88:57:de:e0:
f6:23:d9:f8:2f:92:76:c9:ec:46:13:09:ae:2b:b4:dc:55:4c:
93:54:aa:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:49 2025 by rpki-client