Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
File: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft (raw, json)
Hash identifier: sCIRZTnq1BWc5Ne5kJ/M7zNccBdnHVE69FiY745UD+w=
Subject key identifier: 69:DC:29:1C:73:98:67:C0:D4:62:C8:94:CF:C1:FA:4E:8A:13:E6:4E
Authority key identifier: B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
Certificate issuer: /CN=b40c95867c3084c4c16a2febb46651090f3247e4
Certificate serial: 0194BD177D14CF78797BDA7BE9F9A58843C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
Manifest number: 0AA8
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: lEEZzzybqBVZbE52j1UTaBha8S8.roa (hash: M0ghNe8I1TZs4KtvQ8xKIi7A+x2ciHjaRyld8EsOpko=)
2: tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl (hash: tQaw7sGTGZQZiWWh2bz7TAYqvABNb1U3TYt0BCZrGug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7d:14:cf:78:79:7b:da:7b:e9:f9:a5:88:43:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40c95867c3084c4c16a2febb46651090f3247e4
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=69dc291c739867c0d462c894cfc1fa4e8a13e64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:5b:6f:38:34:56:f8:02:ed:9d:c1:a8:24:d0:
9c:fd:80:90:8b:ac:6b:0e:14:08:f0:f2:00:58:6f:
52:d1:c4:1d:66:fe:fe:8f:bc:73:fd:df:17:c1:82:
b9:43:a5:06:1b:87:73:15:a2:3b:de:fd:82:d3:63:
16:9e:de:ba:65:12:41:5a:d0:e8:51:53:30:41:6e:
7e:98:18:78:5f:28:e2:99:26:d1:01:2f:c3:4c:3e:
73:93:d5:9f:51:94:50:01:70:c2:1f:84:17:53:eb:
54:97:09:73:8d:4a:8b:46:88:cd:82:31:76:45:e9:
83:e4:24:ce:c5:53:84:40:97:ce:c9:54:e1:58:d0:
fd:82:8a:35:af:13:5a:63:ee:bf:26:b0:23:e5:5c:
c7:04:3c:db:b3:fb:b7:7a:75:0d:e9:3c:fe:c7:bd:
6d:e5:96:3c:17:50:c8:73:ff:b8:18:58:20:e8:43:
27:cc:a2:27:d0:cd:a2:0e:9e:4c:97:a8:45:0e:28:
68:c1:26:b5:e5:bf:73:fc:02:a7:ab:ca:c1:22:1b:
2b:f6:00:fb:f8:4d:f7:b1:ba:ba:35:ad:b3:e8:47:
c4:b0:60:9f:63:12:41:bb:33:57:93:d8:23:08:d1:
1f:97:de:07:14:db:f2:74:6f:18:49:ea:f0:13:bf:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:DC:29:1C:73:98:67:C0:D4:62:C8:94:CF:C1:FA:4E:8A:13:E6:4E
X509v3 Authority Key Identifier:
keyid:B4:0C:95:86:7C:30:84:C4:C1:6A:2F:EB:B4:66:51:09:0F:32:47:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/3182ce-9d2f-4b22-abcd-acd9a2eca33f/1/tAyVhnwwhMTBai_rtGZRCQ8yR-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:82:4b:30:0e:03:84:82:ec:d0:7d:0e:6b:45:8f:3e:d9:92:
75:da:5c:d2:a2:57:30:2b:3f:28:bf:cf:f4:5c:c1:91:8a:17:
42:1b:7d:64:a4:98:f5:f4:08:68:e4:07:1e:51:75:3f:24:9b:
f3:1a:a1:1a:c2:56:0f:63:e2:09:12:89:f5:ce:fb:26:5d:46:
ee:1d:30:e6:f0:4e:4c:7c:78:43:91:ce:05:d4:9d:1c:84:19:
71:a9:54:5e:8e:7e:d4:19:fb:ea:b4:78:39:51:cd:fa:10:c8:
ff:77:a3:a3:6b:0e:42:0d:37:99:e0:dd:d7:27:44:a1:13:f1:
20:3f:c3:7d:8c:d0:1a:92:ab:ce:94:f4:90:8d:bf:3f:f4:b3:
52:0c:4c:ec:eb:3f:29:fa:42:c5:a4:62:59:0e:1b:32:e3:1b:
da:fb:c5:53:8e:bd:a0:b8:34:68:d8:fb:1f:2e:f4:aa:ce:3a:
d3:c4:d0:cb:e5:0f:74:3f:ed:7a:50:8d:57:35:28:5b:15:e5:
1c:e6:31:ff:53:14:b4:a6:db:a0:94:bb:18:ed:6e:b2:c2:38:
df:8c:a9:f6:44:43:0d:f3:59:db:b6:9b:15:92:a4:f9:0e:17:
51:c1:55:94:f4:3c:3d:17:7f:23:8e:27:d4:a4:60:75:b2:43:
d8:c4:a1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:42:22 2025 by rpki-client