Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
File: tqiXx5jwGbJHexqc47I7tddhZsM.mft (raw, json)
Hash identifier: nNAIefhrYkk+6y/OD0rK4mSaZVB3hd0d9cTcWWGuP8c=
Subject key identifier: 99:66:4F:31:1F:88:28:12:9D:2F:85:F9:80:90:BD:41:6E:D2:3B:2D
Authority key identifier: B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
Certificate issuer: /CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Certificate serial: 0194BCA9B4BCCD07B5BB5F0F1F9BDE656BE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
Manifest number: 11CB
Signing time: Fri 31 Jan 2025 14:00:25 +0000
Manifest this update: Fri 31 Jan 2025 14:00:25 +0000
Manifest next update: Sat 01 Feb 2025 14:00:25 +0000
Files and hashes: 1: f9JCdqsJLWfadd987fFlDNk7mdM.roa (hash: 5CurkeU+eAkjrTT560cBjUlbg7hvGNi0G0d/Uo5/6r0=)
2: tqiXx5jwGbJHexqc47I7tddhZsM.crl (hash: DM7ZmAGCwZ6BdMNNgXvUw89H0Y4qWcd0PhN343L7+Hk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:b4:bc:cd:07:b5:bb:5f:0f:1f:9b:de:65:6b:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6a897c798f019b2477b1a9ce3b23bb5d76166c3
Validity
Not Before: Jan 31 14:00:25 2025 GMT
Not After : Feb 1 14:00:25 2025 GMT
Subject: CN=99664f311f8828129d2f85f98090bd416ed23b2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:a0:65:f2:52:8a:2f:b5:92:22:98:5c:42:
24:53:28:cf:3c:6b:eb:0b:d6:34:31:c8:92:71:34:
c4:9f:03:a7:56:e9:37:39:ef:7d:d4:c7:13:a6:ea:
dd:80:34:88:0f:d1:04:9b:c3:53:90:d2:f2:2a:33:
45:51:30:68:f6:76:7f:fe:dc:5f:f1:ad:b5:52:7d:
f4:a2:17:87:ab:3d:4d:a5:fc:34:16:0f:cc:a6:99:
bf:a0:90:be:6f:aa:52:42:4f:6c:35:14:8a:f4:ba:
61:37:e8:12:c1:68:73:84:75:5c:ac:50:00:94:31:
13:23:97:d9:c1:10:db:c3:6f:a0:65:70:9d:fd:c0:
62:3f:d1:ef:cf:bb:cc:64:9f:20:26:c3:67:7c:01:
d4:ec:c8:15:24:c1:fe:10:db:0d:09:f1:fd:94:5a:
31:5b:5f:51:3c:d3:76:0f:cf:f9:62:39:19:7f:48:
59:e2:86:13:69:83:0d:9e:d8:30:5a:ee:53:6a:e3:
d9:f4:a7:4d:93:1a:f4:c7:b8:d6:d9:95:ab:b4:b3:
66:35:0a:2a:af:de:4e:9a:b8:ae:42:56:a8:59:12:
58:35:1d:69:f9:6b:5d:df:53:82:10:1f:94:c8:92:
9b:14:33:e0:b9:59:3a:ce:60:e7:94:9b:70:b9:98:
48:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:66:4F:31:1F:88:28:12:9D:2F:85:F9:80:90:BD:41:6E:D2:3B:2D
X509v3 Authority Key Identifier:
keyid:B6:A8:97:C7:98:F0:19:B2:47:7B:1A:9C:E3:B2:3B:B5:D7:61:66:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tqiXx5jwGbJHexqc47I7tddhZsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/497dd7-7f7c-494d-b886-52f850ca55c6/1/tqiXx5jwGbJHexqc47I7tddhZsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:85:a1:06:e8:d1:9a:62:ca:7b:2b:e6:6f:c6:47:46:27:5a:
98:50:64:ad:d5:f6:0f:7b:dd:a8:8f:03:b3:28:b3:e3:3f:45:
02:78:ad:29:a8:57:83:d1:bb:ee:19:7b:ec:dd:81:fc:78:32:
8b:15:97:0d:3a:4a:8e:bc:a8:91:9b:46:51:2c:62:3d:26:bf:
1e:8d:fe:38:72:d6:c4:d0:bd:8a:78:a4:41:0d:2c:ce:cd:5f:
de:f0:1c:ce:50:ff:1e:30:fd:eb:f9:a3:79:09:59:9e:46:7b:
8a:d3:bb:c6:86:e0:1c:31:0b:c9:c4:0a:2e:9e:7c:24:d9:af:
75:2d:06:5e:13:0c:ee:84:a1:a1:c4:60:ce:5e:47:2e:42:41:
a5:5f:2e:75:ce:15:3e:ee:41:81:2e:27:70:07:3b:ca:86:13:
6e:4e:2e:33:8d:5a:a5:18:26:84:b1:8d:b7:7d:90:6b:96:fc:
cc:59:b0:25:52:8c:f5:fa:6d:ce:34:c9:33:f2:88:43:b4:7b:
b4:9d:54:a1:3f:c5:08:49:0d:9d:6b:bb:60:43:d3:a8:b5:e2:
94:fe:47:c4:fb:65:be:6c:c7:69:12:87:70:59:41:45:90:97:
a9:dc:f7:6e:52:44:57:bf:e1:1b:ae:cf:ef:80:60:01:99:f2:
d3:a6:83:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:12:46 2025 by rpki-client