Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
File: t3M-nelIW0RnHI5RHaIh5BU8cRs.mft (raw, json)
Hash identifier: /KzGystJnmgaNUhTvKAoqbRqlMyCdujQHgl9lH3FM0c=
Subject key identifier: F8:07:95:93:AB:95:39:53:D3:D6:3C:D0:5B:D9:56:51:14:BC:30:DE
Authority key identifier: B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
Certificate issuer: /CN=b7733e9de9485b44671c8e511da221e4153c711b
Certificate serial: 0194BD856A4FF8B5524200856D58353585D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
Manifest number: 1439
Signing time: Fri 31 Jan 2025 18:00:24 +0000
Manifest this update: Fri 31 Jan 2025 18:00:24 +0000
Manifest next update: Sat 01 Feb 2025 18:00:24 +0000
Files and hashes: 1: 2EKjaUidRu8zIjzcab1-hzlZXps.roa (hash: RjRGogC1LZx6lUyAkvVmWnOFSCZxMDAz52KYObtnMx4=)
2: t3M-nelIW0RnHI5RHaIh5BU8cRs.crl (hash: Nn3A69cPLbW+cqsspti1NlHHBehqv1/XGrA6WvkVCXk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:6a:4f:f8:b5:52:42:00:85:6d:58:35:35:85:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7733e9de9485b44671c8e511da221e4153c711b
Validity
Not Before: Jan 31 18:00:24 2025 GMT
Not After : Feb 1 18:00:24 2025 GMT
Subject: CN=f8079593ab953953d3d63cd05bd9565114bc30de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:24:1c:36:90:01:9d:e2:ee:64:7d:d5:e2:
9e:d9:74:9c:48:dd:c3:ba:ac:33:91:ec:66:bd:23:
ae:df:f2:11:90:0e:af:04:43:1c:56:9f:3d:5a:40:
45:0d:a7:8f:9a:73:e0:5f:ad:5a:46:27:32:1f:a6:
56:5e:af:94:d1:20:b0:91:6c:f2:0d:a6:78:80:eb:
de:bc:09:dc:95:4a:de:90:fd:71:ea:46:83:3f:38:
46:1a:96:09:d2:0b:88:91:ba:74:3a:c0:f7:37:be:
36:e4:c6:87:ad:c6:8e:0b:a6:fc:fd:3d:dc:3b:80:
df:72:e9:fc:28:48:8c:6b:61:0d:79:58:a2:5f:86:
ab:11:09:97:b4:6e:81:ca:74:cf:58:40:8e:7f:bf:
1b:fe:0b:86:50:fd:6c:35:ac:d2:fd:4e:1a:48:55:
65:68:fe:91:eb:af:43:27:c5:62:e5:e3:af:58:3b:
02:ff:66:c4:7e:1f:02:e9:6d:03:c6:fc:5b:f1:ef:
9c:91:05:04:93:f5:61:b8:72:a0:14:f9:b7:b1:88:
1f:ee:da:67:db:04:68:2f:43:e9:5c:7d:93:38:87:
88:df:2a:cd:62:54:5d:f2:1a:29:07:b4:d6:e6:08:
54:b1:ab:36:9c:a4:1a:96:8c:99:e3:1d:0c:45:ab:
e3:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:07:95:93:AB:95:39:53:D3:D6:3C:D0:5B:D9:56:51:14:BC:30:DE
X509v3 Authority Key Identifier:
keyid:B7:73:3E:9D:E9:48:5B:44:67:1C:8E:51:1D:A2:21:E4:15:3C:71:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3M-nelIW0RnHI5RHaIh5BU8cRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/17e450-8818-4a27-9f35-518cd14713eb/1/t3M-nelIW0RnHI5RHaIh5BU8cRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:0b:93:07:42:59:b6:13:4e:05:24:d5:b8:98:38:3b:d6:8c:
27:98:b3:40:e0:aa:75:c5:95:d8:0d:b1:23:c8:c4:3d:da:d3:
44:d2:ac:ff:02:5e:87:36:22:1d:47:22:98:0f:aa:e8:bb:42:
7e:09:61:0c:c1:00:4c:0a:84:fd:f1:c5:da:17:08:df:20:d7:
b8:f3:c8:2d:0a:f9:e7:c5:55:91:6e:c2:b6:89:b9:7d:f7:18:
8d:a8:ba:cf:11:8f:d8:59:dc:1b:d5:05:42:44:0b:35:40:61:
ba:e7:84:90:d6:35:62:8e:d5:7a:d0:e7:77:8d:74:d3:8a:be:
8f:2e:98:97:9a:ad:ca:9a:b9:dc:5b:a4:54:b7:1c:a5:a9:bb:
29:7b:eb:51:00:12:f0:be:92:87:80:38:10:ed:bf:6b:de:87:
7f:47:85:96:bc:b9:1e:a2:f5:ee:54:3e:6f:3b:70:f3:36:55:
c3:62:14:8a:3a:d7:94:f5:ff:fa:b2:24:a5:77:bd:f3:e6:2a:
42:76:0a:b1:1f:e1:f9:ee:54:a4:ce:33:c0:b8:2b:d2:ee:39:
68:92:6d:13:3b:17:45:63:c0:a1:bb:fb:4c:ef:d6:26:fc:b3:
6b:04:7b:a4:1b:86:e0:ed:34:18:53:a9:e9:8d:bf:d8:9b:bd:
2d:56:91:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:56:41 2025 by rpki-client