Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
File: tn8bh-Z1L0VDm4UozJaLR3CloPs.mft (raw, json)
Hash identifier: azcZ0IEXqiiUPmcfnpdcrKGP3qhJNHsI4i2uNuwK/CA=
Subject key identifier: 34:EC:7D:ED:6F:87:59:E3:AF:A6:79:BB:1F:B3:94:C4:93:1D:A6:03
Authority key identifier: B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
Certificate issuer: /CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Certificate serial: 0194BC3BC0B0520E73394C59B82944F24667
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 12:00:20 +0000
Manifest this update: Fri 31 Jan 2025 12:00:20 +0000
Manifest next update: Sat 01 Feb 2025 12:00:20 +0000
Files and hashes: 1: kYfhtSfEKW3P-62E9GiF_Ua9EUo.roa (hash: p1no5bz1+uk9Sv3KCtgs/QuEn0taiRhnvBxPn7m9ACY=)
2: tn8bh-Z1L0VDm4UozJaLR3CloPs.crl (hash: W0wWHJTq4dfEouqlrPS0t84EqGdTiOWyVe0RzJuGBlg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c0:b0:52:0e:73:39:4c:59:b8:29:44:f2:46:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b67f1b87e6752f45439b8528cc968b4770a5a0fb
Validity
Not Before: Jan 31 12:00:20 2025 GMT
Not After : Feb 1 12:00:20 2025 GMT
Subject: CN=34ec7ded6f8759e3afa679bb1fb394c4931da603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ad:42:b4:42:64:dd:c2:bf:9b:77:c1:15:7a:
e4:d4:22:09:d6:21:e4:ce:6d:26:65:42:f2:2d:47:
30:53:5f:bc:2c:30:4a:4e:3a:56:7f:9b:35:2d:3d:
8d:70:79:dd:d0:19:ca:b5:8f:9d:fd:17:db:03:0d:
c4:51:85:c7:73:be:e1:c7:fe:c0:a6:5a:75:a4:0e:
4a:bf:f0:5b:52:1c:28:18:5b:e9:36:e8:03:aa:30:
74:5a:89:70:cd:fc:25:9b:6a:c8:a0:00:75:08:bf:
d5:b3:8f:ab:57:83:8a:7d:4f:f8:05:ab:56:9f:a5:
43:16:90:c6:70:9f:fe:c7:4e:c1:d8:ad:29:b3:08:
16:f1:44:a5:6e:64:bc:6f:b0:19:6e:d8:99:7c:be:
86:57:90:75:54:37:39:c2:76:87:e3:24:4a:0f:cd:
03:e2:d3:b8:b3:75:bb:97:a6:ae:78:1f:dc:01:3d:
31:7c:a3:fe:62:c7:c1:e5:35:80:4d:74:1c:7a:3c:
55:21:ef:ca:45:29:21:df:cb:f3:54:91:98:06:a7:
e0:6a:1a:fa:62:7c:59:3e:d8:9d:bf:96:9c:ee:80:
f3:4e:1d:b1:1a:b3:f8:83:44:88:8a:33:bc:aa:dc:
2b:d5:f9:aa:41:8f:48:30:98:73:1f:e2:5e:12:9d:
57:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EC:7D:ED:6F:87:59:E3:AF:A6:79:BB:1F:B3:94:C4:93:1D:A6:03
X509v3 Authority Key Identifier:
keyid:B6:7F:1B:87:E6:75:2F:45:43:9B:85:28:CC:96:8B:47:70:A5:A0:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tn8bh-Z1L0VDm4UozJaLR3CloPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9ff43e-f817-4ebe-a0d9-7a18931d985b/1/tn8bh-Z1L0VDm4UozJaLR3CloPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:02:89:61:17:b9:00:96:78:07:bc:df:98:90:6d:97:db:e6:
59:df:47:46:90:07:98:a8:e7:ec:69:d9:86:66:46:68:13:6c:
36:f5:cd:20:99:0b:6a:d1:a0:3e:a8:39:df:68:27:9f:d7:e5:
5d:f6:32:88:61:7e:c0:41:e4:22:d5:ad:3b:7d:17:91:b4:f2:
8e:71:37:4b:df:77:a6:15:9f:01:60:23:be:2d:67:2b:34:d8:
05:4d:fa:46:56:2d:b1:eb:db:10:5d:f5:2b:cc:8e:6b:cd:23:
32:54:e9:a9:04:13:81:53:d8:b1:b7:fa:f4:ce:77:c0:06:8e:
c4:75:08:92:fc:3d:18:0a:e9:d8:79:62:e7:b7:5a:1b:26:2b:
01:0c:3a:5a:88:ae:fa:78:00:18:24:85:fa:7f:01:4f:ba:ed:
8b:ad:bf:aa:a0:a5:bd:c8:9b:ed:3b:df:67:07:7d:97:a6:fa:
3e:29:49:ea:ac:d1:b3:3a:49:7b:24:f9:01:dc:39:7b:d2:a7:
68:4d:83:51:a9:b6:94:30:ca:5a:d7:25:5f:9e:7d:e2:84:2a:
b5:f8:cf:91:80:24:d3:a6:0d:0b:a0:2c:a4:df:5e:34:a1:b6:
be:0a:29:43:b6:47:91:2f:eb:c4:a7:ec:ca:c0:a5:8b:22:a7:
67:90:87:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:19:20 2025 by rpki-client