Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
File: ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft (raw, json)
Hash identifier: BY1n2THFpaleRd2dzQT7VsGU0Qd/TPMtmMVoYkYxIZE=
Subject key identifier: 10:69:62:B3:01:9C:82:8F:A9:76:A1:09:DE:FA:6F:93:C5:66:42:0B
Authority key identifier: B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
Certificate issuer: /CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Certificate serial: 0194BD4E5983667F6340FFBCAFE45BB5EC38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
Manifest number: 0300
Signing time: Fri 31 Jan 2025 17:00:16 +0000
Manifest this update: Fri 31 Jan 2025 17:00:16 +0000
Manifest next update: Sat 01 Feb 2025 17:00:16 +0000
Files and hashes: 1: mgO2bfWYu0Z3yfKtycB0eHY39X8.roa (hash: 60DQx4kpFtDfON86MP27ODodoK2c+Xs/qbF18XYACcg=)
2: rg97vUvro1QUCZLNC-zT_PYGVh8.roa (hash: iZBiJSmpj/Q8UocwtFDbOX3xmzAVEyiNjKTvOdI8ZqE=)
3: ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl (hash: ga4YUz9HjeXWg1O7bqyHMhm53GEYn+iLFVUIte9ZtxI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:59:83:66:7f:63:40:ff:bc:af:e4:5b:b5:ec:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6d7f368fa1cf5b1aaaa76b0f1f23c06750a8426
Validity
Not Before: Jan 31 17:00:16 2025 GMT
Not After : Feb 1 17:00:16 2025 GMT
Subject: CN=106962b3019c828fa976a109defa6f93c566420b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5f:6e:28:8c:8c:f1:d0:08:10:4f:18:44:e5:
c9:44:0f:b5:8b:c7:9a:bd:43:5a:23:4a:50:53:a6:
99:83:84:79:4b:6d:6d:4f:72:5e:d7:1a:d2:29:0a:
32:85:b8:d9:54:d4:68:43:42:04:95:c2:f7:41:98:
5d:1e:ea:75:c9:5d:bf:80:33:a3:88:35:47:0a:98:
3d:4e:f4:66:ff:df:6e:6b:14:4b:6b:40:88:ba:70:
ef:a2:74:ba:75:eb:4e:cc:48:c7:48:8a:93:79:0b:
a5:05:c2:55:12:23:7b:f1:71:9d:fd:6c:fa:71:e9:
3c:d0:aa:26:a4:a6:ee:0c:18:0c:27:4c:f3:d1:f5:
56:0d:ea:28:ce:cb:6a:15:df:c1:c6:09:5c:55:11:
24:4e:b0:10:f7:92:e9:a4:81:fb:e8:24:2d:9d:52:
be:7b:e1:8f:dd:7a:17:b3:e8:fd:6b:94:db:7d:36:
9c:5b:e0:55:27:2c:5c:56:2d:cb:ee:7c:c6:47:5b:
4a:64:10:d0:7b:27:3f:78:9d:8d:6d:6d:37:9b:f7:
16:75:53:40:65:fb:27:50:ff:8b:ac:de:32:b5:ca:
13:34:2a:86:a8:51:8e:80:db:23:4c:de:b0:db:ec:
9b:32:d9:54:5b:f7:1c:20:5f:56:fd:23:a5:3f:05:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:69:62:B3:01:9C:82:8F:A9:76:A1:09:DE:FA:6F:93:C5:66:42:0B
X509v3 Authority Key Identifier:
keyid:B6:D7:F3:68:FA:1C:F5:B1:AA:AA:76:B0:F1:F2:3C:06:75:0A:84:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ttfzaPoc9bGqqnaw8fI8BnUKhCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6d15f4-86a2-46d9-b3ed-08aedc2f2639/1/ttfzaPoc9bGqqnaw8fI8BnUKhCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:3c:01:27:4a:d2:3b:31:e1:24:6c:6a:ad:d0:e4:4d:4c:50:
88:a7:4e:35:3f:ab:ac:9b:96:3a:ff:0d:f9:4b:07:78:5b:4b:
27:0e:ef:87:b0:28:75:f4:c5:56:8b:94:a9:89:cb:ad:36:94:
71:ee:b8:8d:8c:1c:8f:25:98:77:4c:b5:74:9f:92:07:b9:c2:
70:d1:ec:0a:94:9c:19:61:f1:64:02:1a:fa:62:06:c1:d1:dc:
3e:99:be:ba:fe:16:e6:18:ec:a5:84:cc:d4:f7:8c:9b:83:71:
cd:5b:7b:ab:76:57:08:db:dc:38:13:c9:fa:49:ce:78:89:c3:
da:74:6b:b8:49:6c:19:03:1a:5a:90:66:66:5a:62:aa:53:a7:
9c:fd:c3:b2:51:4c:72:df:30:e8:de:2b:80:38:a2:af:a3:e7:
1e:9c:10:bd:0c:9b:91:68:74:2d:db:dc:01:a0:be:52:01:47:
97:b6:42:54:4e:00:e3:53:92:a7:3f:65:06:ea:17:65:e9:ef:
6f:a2:e8:ef:8c:8d:71:be:c5:05:7e:de:0f:93:29:67:e5:08:
f6:2f:4e:79:1b:52:b4:c4:e9:19:a2:25:13:ec:bd:dd:d6:35:
ec:fc:d9:e5:bb:35:4e:28:20:64:ff:ff:1c:e5:d0:d4:be:04:
e4:f0:0e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 10:51:52 2025 by rpki-client