Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.mft
File: tIKj5Qem8UAPb74uFI-hZERH5s0.mft (raw, json)
Hash identifier: ju2+QXGARM+oaUuDUZE1VSBgCtmdWCsZj7QdxqsP4wY=
Subject key identifier: 1F:D2:65:9D:4A:99:01:F6:28:E4:77:EA:86:FD:D8:42:FE:39:B2:A5
Authority key identifier: B4:82:A3:E5:07:A6:F1:40:0F:6F:BE:2E:14:8F:A1:64:44:47:E6:CD
Certificate issuer: /CN=b482a3e507a6f1400f6fbe2e148fa1644447e6cd
Certificate serial: 0194BC7293B8771630226A621849717D4297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIKj5Qem8UAPb74uFI-hZERH5s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.mft
Manifest number: 0C44
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: jc3nJE4HlaAIZYtU9WTa-kp6P_0.roa (hash: ni65Uin42OxyzHPEODsDWUqZ0OwEhmfq3oGGPy0ODBg=)
2: tIKj5Qem8UAPb74uFI-hZERH5s0.crl (hash: UWTwwDgq8C9sEZEaMdz+QMYueOJH1QMDYfJgyHMAHfI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:93:b8:77:16:30:22:6a:62:18:49:71:7d:42:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b482a3e507a6f1400f6fbe2e148fa1644447e6cd
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=1fd2659d4a9901f628e477ea86fdd842fe39b2a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:ae:c7:12:81:96:17:cb:06:57:cd:fb:5c:
53:e7:62:89:ae:90:22:18:e0:04:25:6e:ce:5f:a6:
b5:73:6e:d4:6a:15:06:02:c5:5d:d1:5c:c3:f0:d5:
98:61:1f:09:3c:f5:ed:d4:e8:43:eb:1d:37:fb:1f:
9f:eb:4a:64:f3:fe:3a:d2:69:19:bb:c8:26:67:f0:
50:32:e1:5f:05:90:6d:1e:83:2a:b1:1c:4c:c8:ac:
90:b3:bd:28:08:91:73:f4:eb:e6:ee:b3:32:bb:46:
03:01:44:5e:c5:fe:b3:d9:1b:14:81:c6:08:6b:63:
93:da:18:3f:b4:ff:65:73:51:a5:b2:70:f2:7f:ce:
4b:22:d4:5d:16:c0:4e:16:0c:0b:90:80:ba:a2:ca:
4a:5e:58:7c:4e:bc:b5:25:22:e7:e5:39:ed:34:ef:
97:d3:83:df:a5:3a:eb:f9:7b:0f:f6:00:f9:31:5c:
97:b3:09:64:03:67:7a:3b:bc:22:b9:df:0e:eb:c4:
cf:6e:52:e6:8c:f1:64:ad:da:9c:74:2f:99:ce:cf:
fb:5e:d0:83:11:fa:5e:1c:00:c1:15:3c:2d:fb:3c:
5a:e9:8d:f5:df:84:97:8d:25:22:fb:0b:72:d0:24:
96:a0:2d:1c:26:b9:a8:04:8a:e6:b2:d6:00:22:fd:
aa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D2:65:9D:4A:99:01:F6:28:E4:77:EA:86:FD:D8:42:FE:39:B2:A5
X509v3 Authority Key Identifier:
keyid:B4:82:A3:E5:07:A6:F1:40:0F:6F:BE:2E:14:8F:A1:64:44:47:E6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIKj5Qem8UAPb74uFI-hZERH5s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/18ce6c-7132-447d-8f0e-756274e447ea/1/tIKj5Qem8UAPb74uFI-hZERH5s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:00:f5:a3:f0:f8:11:47:cc:38:be:a2:02:a2:d3:92:05:5b:
5d:29:8e:ce:d7:8e:c5:0e:5f:0a:df:81:a1:95:df:4d:7a:0b:
c9:b8:58:1b:cb:29:09:da:e5:07:4a:83:71:02:36:63:00:96:
ae:c5:50:08:79:55:7a:82:2e:49:78:9e:88:07:e4:a1:67:f8:
02:8e:82:48:c2:21:43:16:3e:ae:9c:e5:b4:bf:f8:d4:20:a3:
a2:8b:77:21:f2:59:52:a9:02:f3:b7:93:68:3a:d8:c2:42:38:
90:5c:2f:aa:8c:95:47:32:7e:89:97:8a:74:7c:97:7d:18:0d:
48:1c:80:49:ce:d1:6b:8f:7f:c5:5f:cf:4a:e8:81:9a:03:dd:
ba:3e:f7:d3:bf:f6:76:b4:e7:65:d2:41:b3:1b:ea:c1:b3:7b:
56:c9:9a:6d:40:4b:2d:49:31:a9:92:0a:73:47:bf:34:67:a9:
df:10:3a:66:33:a9:6f:ae:6f:fb:18:49:26:95:47:25:40:a2:
98:b9:f5:9f:f3:9a:d2:95:f3:8c:28:e0:6d:59:96:85:c8:7f:
79:23:a8:ae:9c:4c:9c:67:0a:97:d9:c1:78:e2:a5:e8:6f:61:
cf:7e:1a:42:2f:5e:6e:54:b9:68:69:32:4c:a8:aa:01:93:55:
64:c6:7b:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:54 2025 by rpki-client