Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
File: tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft (raw, json)
Hash identifier: WPpU3TnFrk+adpwhh3QKgB1wvPC2p7tAGt2gGHwLuEs=
Subject key identifier: 86:F5:7E:B0:C7:A9:B5:52:56:87:E8:31:52:C4:D8:1A:3C:77:7D:3D
Authority key identifier: B5:43:EF:9B:C3:C2:13:23:61:C1:24:09:72:A1:80:91:2B:F7:A8:59
Certificate issuer: /CN=b543ef9bc3c2132361c1240972a180912bf7a859
Certificate serial: 0194BBCED7154F837DF99FD9219BC380A366
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
Manifest number: 0FD7
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: 3_-c02s70_bWI80EfV5nMZhCjHg.roa (hash: 1ZDiW1elfufjNKaqhAw29FTOI2soWhXtopSXVjj/ruY=)
2: 9XYzuBVHhZfQ-Z8_PdIStP3gEJU.roa (hash: 45mg1wTAOjryTd4LOjOOGQdcDwneEtBdS+C0gsQtj+o=)
3: tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl (hash: t7cH7uoiwQ7/iFaCieH2QaGoDbk/bPP6i1VOmNLqU64=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d7:15:4f:83:7d:f9:9f:d9:21:9b:c3:80:a3:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b543ef9bc3c2132361c1240972a180912bf7a859
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=86f57eb0c7a9b5525687e83152c4d81a3c777d3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:bc:88:4b:67:69:ea:32:d4:e5:25:47:cd:34:
6f:7d:53:f8:a7:c2:64:7d:be:54:98:39:b2:ed:15:
ef:d3:b0:91:d9:58:66:34:ae:d2:38:60:2f:c5:a3:
b4:59:12:d1:2c:31:06:f9:f7:9a:b5:47:de:52:98:
dd:02:ef:0e:d3:6d:4b:cc:96:3e:84:a0:20:f2:78:
3e:dc:ad:1a:7c:0d:5c:1c:39:b3:19:86:07:34:39:
6d:60:1f:dd:93:bc:0b:b8:0f:37:29:61:71:5a:6c:
7d:ea:ac:39:f7:40:d6:d5:a5:5d:ac:77:17:6c:f3:
8f:a0:76:44:05:ac:54:cd:fb:b7:e7:07:f8:10:4d:
89:65:ff:cc:c2:61:94:0a:30:54:20:de:88:a1:c1:
fd:96:bf:12:a5:b4:a5:d8:02:33:d4:f0:57:94:9a:
19:3f:31:72:be:ae:0b:3d:10:49:8a:d5:a2:12:6e:
e0:a0:ad:17:0e:60:fa:1b:d5:5d:4d:a5:c1:bf:61:
05:38:26:fe:9f:fa:17:4f:34:8b:14:b2:d1:be:02:
45:e1:08:b5:28:ef:bc:f8:b5:4e:5e:b9:af:bb:1e:
ab:e3:ef:20:97:2d:03:23:f7:34:16:90:e6:fe:27:
09:86:ea:ff:01:17:9f:75:4b:9a:fe:57:54:bf:61:
ec:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:F5:7E:B0:C7:A9:B5:52:56:87:E8:31:52:C4:D8:1A:3C:77:7D:3D
X509v3 Authority Key Identifier:
keyid:B5:43:EF:9B:C3:C2:13:23:61:C1:24:09:72:A1:80:91:2B:F7:A8:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tUPvm8PCEyNhwSQJcqGAkSv3qFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/25e6d6-ced1-4283-8c9f-c84ccba4e607/1/tUPvm8PCEyNhwSQJcqGAkSv3qFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:5c:c1:cc:63:f0:33:7e:ee:e4:c6:31:d1:1a:4c:cc:1a:61:
ab:44:76:70:63:61:2e:b8:d7:08:22:d9:8a:a4:b0:95:ca:de:
19:30:24:46:70:e6:c0:b1:d7:d7:7f:43:16:e3:5f:2c:a4:d5:
48:e6:82:d2:4a:ca:ce:3e:d5:1f:24:65:e3:df:4e:d2:d7:cc:
92:54:f2:2e:c1:42:cf:9e:39:58:33:dd:4a:45:8b:71:0f:ba:
ca:97:58:30:39:94:ec:a0:17:80:53:98:2d:e3:16:ab:f2:f1:
26:ff:f6:eb:21:da:ab:d7:da:d1:7f:ce:15:65:80:b9:5f:22:
53:87:4c:fd:8f:1d:ab:08:ca:dc:b6:4e:70:fe:fe:66:22:e4:
d3:fc:d2:85:60:16:c0:af:a0:5f:10:a4:95:6c:19:38:4d:00:
c9:0d:3c:80:40:84:5c:b2:a9:0f:49:9c:d4:02:4d:47:ce:4a:
d8:b6:57:c9:aa:56:7f:06:83:b6:27:51:2a:e9:a7:19:8a:e0:
dc:8b:c3:5d:68:c6:5c:c4:88:81:a1:31:5b:7a:85:1c:91:d0:
c8:77:e4:98:39:c2:6b:04:62:a0:af:80:fb:ea:ea:4e:84:7b:
37:12:f9:fb:51:0f:95:64:32:ae:cd:83:c4:15:21:da:a7:05:
68:7a:fc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:37 2025 by rpki-client