Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
File: tKfQVIK4TTu2BPCZvK-eftNGiJo.mft (raw, json)
Hash identifier: pQztPHJzJAnXh20Jhmwij/ZAnMngxgsMjrvMfcrmTvo=
Subject key identifier: 21:D3:5F:E3:B4:05:EB:DC:AC:8C:2F:2F:D6:19:BD:89:12:4F:6D:89
Authority key identifier: B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
Certificate issuer: /CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Certificate serial: 0194BC733E6B5CE3725E7229E8936C7AD8E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
Manifest number: 1428
Signing time: Fri 31 Jan 2025 13:00:56 +0000
Manifest this update: Fri 31 Jan 2025 13:00:56 +0000
Manifest next update: Sat 01 Feb 2025 13:00:56 +0000
Files and hashes: 1: ojB_2XE9-VR6PiNiRu6ANmUyiuo.roa (hash: YbnnkO0HBRUHzkxo3r5IQRGQe30uxmuUwdAmB24B6sc=)
2: tKfQVIK4TTu2BPCZvK-eftNGiJo.crl (hash: rPVDcnMPdEDRniVrOjtWuKVMmVoK8MknLSek5kUJIHQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:3e:6b:5c:e3:72:5e:72:29:e8:93:6c:7a:d8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a7d05482b84d3bb604f099bcaf9e7ed346889a
Validity
Not Before: Jan 31 13:00:56 2025 GMT
Not After : Feb 1 13:00:56 2025 GMT
Subject: CN=21d35fe3b405ebdcac8c2f2fd619bd89124f6d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:30:43:f4:33:1f:e4:52:8f:6a:bb:f1:b2:b9:
53:6f:15:31:51:16:6f:73:a0:b5:28:36:e6:6a:ed:
80:50:7b:12:49:51:f0:e5:8b:7d:68:5f:2e:bf:bd:
a7:29:2d:3d:bd:bb:ce:e0:9c:78:93:03:1d:36:ae:
c8:12:dc:3e:a5:0e:44:f2:ee:53:de:eb:88:8f:01:
cb:5a:f6:5a:12:db:47:1b:55:a1:2a:3e:c2:52:20:
42:ed:45:11:1f:f2:23:90:66:aa:12:c7:10:33:1a:
c4:0f:1a:ab:eb:5d:a4:d5:fc:98:70:93:b3:fe:6c:
50:b8:db:29:22:1c:bc:0a:ad:8e:4e:b1:69:50:b9:
46:0e:5a:69:d9:5b:98:fa:dd:cb:be:25:a5:b8:36:
cd:d4:72:a6:f9:9a:bc:75:4e:8f:3c:1c:c9:b1:c2:
b5:75:26:d7:5d:7e:b5:e8:aa:5d:e8:67:c2:99:8f:
cc:3c:5b:1c:a5:d6:f2:a1:81:5b:71:3e:2d:0d:c9:
29:59:db:4a:61:74:7c:93:83:68:8f:48:65:ed:f4:
0b:da:c4:ab:a0:78:24:da:65:f8:20:1e:19:14:67:
0c:66:08:9d:99:b5:9c:54:7e:ab:2e:ed:5a:a5:ad:
fd:0b:69:e4:56:35:ce:a3:12:8b:19:c3:c1:d5:91:
eb:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D3:5F:E3:B4:05:EB:DC:AC:8C:2F:2F:D6:19:BD:89:12:4F:6D:89
X509v3 Authority Key Identifier:
keyid:B4:A7:D0:54:82:B8:4D:3B:B6:04:F0:99:BC:AF:9E:7E:D3:46:88:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKfQVIK4TTu2BPCZvK-eftNGiJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/9dd8ae-4afc-44c1-9bd0-c532195eef49/1/tKfQVIK4TTu2BPCZvK-eftNGiJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f4:d7:9b:3e:4d:2b:08:28:af:44:38:02:d9:5b:4a:da:0e:
25:6b:9e:8c:50:21:ad:3f:47:62:42:6d:61:0d:79:88:5b:c3:
94:c6:b1:f9:78:da:6a:d4:03:2d:67:2d:3e:4d:74:ec:02:39:
c7:7c:13:8c:05:73:45:8b:e0:ce:7d:c1:83:81:e8:a4:f9:53:
c6:d6:78:d5:4e:42:1b:bb:8a:d4:39:30:66:ae:61:ae:83:a0:
a9:86:1b:cf:d3:e9:ef:6c:0e:48:20:3a:e6:20:aa:ae:3a:fa:
5a:06:38:83:29:77:4d:ea:46:d7:3d:05:a6:84:55:f3:02:c4:
e9:59:12:3f:ef:3b:4a:55:74:ce:40:2c:39:06:ee:b1:18:34:
c9:3c:e6:78:76:11:5f:dc:01:1b:cb:48:d1:33:c0:88:de:81:
40:04:60:0d:84:1e:40:21:54:f6:6b:99:49:05:e6:d0:7d:10:
7a:69:13:75:5a:c0:da:aa:82:33:d1:c9:1b:e8:87:7a:72:d5:
8b:b1:17:a4:fa:25:4e:96:eb:95:51:56:1c:f9:08:16:36:3c:
7b:2c:17:d4:ad:38:3e:a0:20:66:45:e6:56:a9:ca:22:2e:9c:
ed:37:2c:2b:7b:cb:96:e7:33:54:a1:48:d6:54:4b:7e:f5:e8:
a7:ca:54:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:53 2025 by rpki-client