Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
File: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft (raw, json)
Hash identifier: 5og3AyXsdUVkXPULUP4GsLm6Z2fH5W2c5cd2cwTJxcg=
Subject key identifier: 04:1D:99:9C:05:C1:6A:64:39:37:0E:D4:D2:E6:9F:8A:9D:15:14:06
Authority key identifier: B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
Certificate issuer: /CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Certificate serial: 0194BCA98B0D49918A721930392D62F04B41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
Manifest number: 0AF4
Signing time: Fri 31 Jan 2025 14:00:15 +0000
Manifest this update: Fri 31 Jan 2025 14:00:15 +0000
Manifest next update: Sat 01 Feb 2025 14:00:15 +0000
Files and hashes: 1: 3R1qEXucRzxQh626HSW1D35Fl4s.roa (hash: LtQHe1lS81VaVTgB7dK3iqoJ6l+gsJCEbPPIKSQ56qA=)
2: shBZifpLlKUixrRLPCki_9Cdo5k.roa (hash: vUCEHBiQ5vk3QwGcMpMB9RyrWPTOpvKerhzJgaIKpHk=)
3: tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl (hash: UomASAMn+uTesXEcciDuZRkR5uOveRpdSKzu7N3JX7k=)
4: xPMhM3gDhaqkEeW-0RAQthU0wZQ.roa (hash: +K0EshtD5Pam9WJWgjYOHCV5ZtA/67vGEzp1bYJI+K0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:8b:0d:49:91:8a:72:19:30:39:2d:62:f0:4b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b409168fdb52e9b7d1a7a5e8f518edfbc2c3f9af
Validity
Not Before: Jan 31 14:00:15 2025 GMT
Not After : Feb 1 14:00:15 2025 GMT
Subject: CN=041d999c05c16a6439370ed4d2e69f8a9d151406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:64:65:4b:09:54:b5:f9:ac:ed:8d:54:ff:7a:
1e:02:9a:91:15:58:36:aa:6e:f0:03:21:6a:e0:05:
99:33:e6:ef:94:c5:fa:4b:87:98:10:04:db:79:11:
cb:90:cc:6b:53:42:33:fe:38:f1:ce:93:c9:85:a4:
bd:b9:0e:d2:ff:bb:67:96:86:07:8c:43:c5:60:2a:
30:8a:46:89:70:5e:5a:20:33:c0:d5:e0:cf:1a:d2:
cb:5c:6b:99:96:07:81:cf:08:78:c4:f9:7f:34:83:
04:73:1c:a0:cd:36:15:3b:70:e5:09:8e:71:e2:bc:
39:5e:32:fd:16:66:92:77:da:ea:da:2a:07:e7:74:
71:9e:b7:2f:02:a8:9f:01:bf:a1:76:95:14:54:d9:
b6:45:a8:b3:8a:f9:d4:dc:5d:63:2f:92:dc:f1:c7:
a5:e8:b9:9f:41:39:f9:ce:e2:0c:5c:ff:72:1a:6e:
47:93:4c:ef:78:17:f7:5f:3e:a9:61:4a:5e:5b:f5:
fe:fa:38:98:58:e3:ab:6d:4e:e7:67:9b:cc:5c:b6:
fd:ca:c4:85:f1:07:26:1b:ea:5c:4a:f2:d0:77:a3:
b7:61:10:89:2a:15:09:73:37:bb:49:86:c7:74:16:
19:7d:d3:74:86:83:ef:d0:66:18:e3:eb:83:73:3a:
b8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:1D:99:9C:05:C1:6A:64:39:37:0E:D4:D2:E6:9F:8A:9D:15:14:06
X509v3 Authority Key Identifier:
keyid:B4:09:16:8F:DB:52:E9:B7:D1:A7:A5:E8:F5:18:ED:FB:C2:C3:F9:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/36ba9d-33af-4cf3-a27d-fa718ac9d758/1/tAkWj9tS6bfRp6Xo9Rjt-8LD-a8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:e7:9f:00:a1:ac:97:53:ad:96:44:dd:39:0a:f5:51:57:15:
b7:39:17:20:80:6e:ce:1d:f0:4c:ad:01:7a:27:5a:0c:03:3d:
81:21:f1:09:70:3c:fd:bc:11:f0:82:b1:94:d0:6f:2a:f5:bf:
d8:0b:b0:ff:82:26:a1:db:06:d4:14:1f:22:72:5c:27:44:3d:
da:e3:de:7e:f5:c6:42:43:f3:3b:df:23:7a:98:3c:dc:53:a1:
66:fc:b2:55:d3:aa:ae:b8:fb:e5:f8:b8:4b:97:6a:25:1e:5d:
0c:d1:39:cc:8b:55:7b:be:aa:62:5a:47:5e:88:92:76:a4:f7:
d1:3b:a4:3e:fc:d4:e8:80:26:64:d7:60:4c:41:eb:c5:bd:80:
8f:01:de:a1:f8:bf:e9:8e:77:5c:ae:8c:4a:eb:f8:4e:9a:56:
5f:ac:82:14:97:ea:05:56:2f:23:62:a5:68:be:f6:a2:f2:ac:
96:3d:d1:4c:7e:09:f0:53:05:69:5b:c7:75:5b:3b:d4:f6:17:
62:c7:4c:da:33:4c:ad:76:01:54:0b:df:9c:e4:ea:5f:12:d5:
76:29:ec:52:5f:23:c5:7f:58:53:c7:1d:26:63:8e:d6:12:ab:
22:10:1c:d4:d8:22:fc:f3:b6:ad:3c:7b:89:24:7a:27:04:39:
e4:af:4f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:05:08 2025 by rpki-client