Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
File: Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft (raw, json)
Hash identifier: 5DY8+wIwVPQ+iNt+xVP/IzOP2fQW8Qd6K1vP4TTxS8o=
Subject key identifier: 7D:CF:27:BE:64:AD:6A:E8:32:2F:50:1D:9B:44:E1:80:49:32:2C:CB
Authority key identifier: 4E:BF:6B:37:B9:4F:95:B4:90:5C:F8:C6:A2:1D:88:03:EA:BF:A7:7E
Certificate issuer: /CN=4ebf6b37b94f95b4905cf8c6a21d8803eabfa77e
Certificate serial: 0194BD177B7E584F5DE5764EED3B034D937A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
Manifest number: 15
Signing time: Fri 31 Jan 2025 16:00:20 +0000
Manifest this update: Fri 31 Jan 2025 16:00:20 +0000
Manifest next update: Sat 01 Feb 2025 16:00:20 +0000
Files and hashes: 1: 2YHBxyZ_z4Fcrt68TQqMf0wkwmM.roa (hash: KMD/ALL2N2LqU8y7+1f9YpFqy5OsmhRXi+hfcZ2aIxY=)
2: Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl (hash: VkkvPmmOIh7EOSSTGAHp15ae0eh6Hbq2yH97xO+5bgc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:7b:7e:58:4f:5d:e5:76:4e:ed:3b:03:4d:93:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ebf6b37b94f95b4905cf8c6a21d8803eabfa77e
Validity
Not Before: Jan 31 16:00:20 2025 GMT
Not After : Feb 1 16:00:20 2025 GMT
Subject: CN=7dcf27be64ad6ae8322f501d9b44e18049322ccb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2f:2f:5d:3e:f9:76:92:4b:22:95:f1:5b:0a:
a1:bb:6b:a2:7d:01:14:d5:4c:08:36:98:2c:74:b4:
52:64:ee:b4:4b:3e:56:f3:3e:a9:51:8c:43:16:02:
88:2f:f7:4c:01:19:b5:43:4c:67:cb:38:03:f7:06:
ae:b0:ef:e9:a4:e6:9a:78:96:f4:c0:06:d2:4f:92:
dd:ec:1c:6f:d2:24:59:5a:47:59:2b:b0:a6:d9:85:
67:9e:15:17:b1:ed:57:12:fb:c9:0f:dd:7d:a6:a4:
53:77:93:d1:e9:15:61:33:89:c6:07:27:29:1d:d9:
a6:ab:5a:7d:65:55:80:d9:40:10:da:7c:5e:4f:cd:
b8:17:de:a3:ed:7a:1e:83:be:14:0d:db:4d:27:46:
be:dd:a4:b3:33:b2:69:08:f5:90:01:36:3d:3c:5a:
97:f7:3a:c6:7f:44:b3:20:ff:08:ca:69:8a:6d:29:
61:e5:23:1d:f0:fc:9c:f4:1c:3c:31:47:86:0e:7b:
01:32:98:34:a2:94:d3:e2:9b:b5:07:34:26:f0:07:
a2:4b:08:b9:7a:5a:13:f1:1e:23:69:f3:05:e4:22:
9e:a1:1a:af:5a:ff:51:59:2b:13:5a:44:b8:57:ea:
8a:ab:2b:46:3c:0c:b5:b5:fc:0c:d2:35:90:a2:fc:
87:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CF:27:BE:64:AD:6A:E8:32:2F:50:1D:9B:44:E1:80:49:32:2C:CB
X509v3 Authority Key Identifier:
keyid:4E:BF:6B:37:B9:4F:95:B4:90:5C:F8:C6:A2:1D:88:03:EA:BF:A7:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tr9rN7lPlbSQXPjGoh2IA-q_p34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/a2172d-b651-43da-8acf-e7e74db721d2/1/Tr9rN7lPlbSQXPjGoh2IA-q_p34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7f:fc:b3:83:de:4c:4d:3c:38:ab:94:79:60:a9:9f:cf:81:
62:c8:a0:1b:dc:c7:ad:f6:b2:dd:90:2b:2b:94:93:86:96:cc:
5e:f4:51:2d:94:47:3c:d1:51:d4:57:da:b7:82:d0:94:46:19:
6c:a2:06:a3:ed:c8:28:b9:04:42:ac:25:eb:a0:01:1c:a7:e1:
f3:35:70:dc:9b:23:9d:98:8a:e8:c6:e6:57:62:21:30:c0:bd:
30:4a:3d:16:ed:74:ff:67:5d:4b:df:fd:36:dc:99:45:3d:be:
ec:55:ab:79:2c:3d:2a:95:db:62:ba:79:3f:ed:15:11:77:e3:
4a:62:e8:ab:24:0b:ea:2b:f9:05:b8:db:89:15:c5:e3:67:06:
5c:89:80:d6:57:32:5f:c0:6a:e9:eb:b6:02:a0:08:32:2f:6c:
a2:06:9a:8d:47:3d:79:ab:e1:29:59:f5:42:1f:b9:82:0e:ac:
89:50:d2:45:9c:e7:42:aa:3e:f2:d0:05:86:4a:94:56:4e:55:
e1:70:00:6e:5e:52:0b:92:0f:7a:6a:64:52:a1:87:44:a8:8c:
94:eb:0a:79:5d:0f:d7:1f:4b:dc:a2:4e:5a:da:9d:c2:d1:fe:
18:7b:36:80:b5:b2:31:13:a8:12:a6:01:36:4f:ac:b9:93:ea:
6a:fb:8a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:27:25 2025 by rpki-client