Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
File: tBhner86ruA2zUrdd9ZhlvzeTG0.mft (raw, json)
Hash identifier: hdtHpzqYeE0P9vDKVh8IPTdD+QVZlHiUOaDXANpgw4Q=
Subject key identifier: 59:82:49:B3:4D:F8:71:55:50:5C:3F:04:1B:68:D0:8E:A6:23:38:04
Authority key identifier: B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
Certificate issuer: /CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Certificate serial: 0194BC3C0DBDAA4FA555FD2201FC90EB8F71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
Manifest number: 0CF9
Signing time: Fri 31 Jan 2025 12:00:39 +0000
Manifest this update: Fri 31 Jan 2025 12:00:39 +0000
Manifest next update: Sat 01 Feb 2025 12:00:39 +0000
Files and hashes: 1: GluX1bXAOCEKoiPGiqd94CJ3PnQ.roa (hash: Ni4Tstwu0GgIgTRS0r/kMJY1nK24hB/s3xhSSr7BatI=)
2: sUg9MVJbpnKjp6n_qVdxGGSeJB8.roa (hash: iazJ3Yw/lvASdOuiaEdBPRq3HWHdL5Kxvj+o3m8saWE=)
3: tBhner86ruA2zUrdd9ZhlvzeTG0.crl (hash: olWqFHOTZQAhocq1oF69iH5dbVZrJHPdjR57uHQR+yU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:0d:bd:aa:4f:a5:55:fd:22:01:fc:90:eb:8f:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b418677abf3aaee036cd4add77d66196fcde4c6d
Validity
Not Before: Jan 31 12:00:39 2025 GMT
Not After : Feb 1 12:00:39 2025 GMT
Subject: CN=598249b34df87155505c3f041b68d08ea6233804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:57:3a:b7:d4:ea:1b:b7:aa:da:cd:6e:03:48:
31:3e:00:c7:4a:de:3f:86:90:13:74:ff:cb:25:bc:
16:22:d3:44:21:69:93:40:c0:49:0a:0d:10:17:e2:
b4:4f:65:b9:80:5c:bc:f7:41:98:2c:9b:05:45:e8:
81:66:6f:f8:26:ef:5e:73:8c:da:32:8d:8c:ec:1e:
3e:6f:4d:4d:e3:a8:56:05:72:1a:2a:29:0c:91:22:
d7:d0:de:0b:28:9a:01:64:6a:65:f6:ab:ce:b4:8e:
4c:7f:b4:8c:07:97:fe:11:8a:ca:91:f5:bb:8d:ee:
f1:d7:96:53:cb:00:80:95:a6:23:e9:c2:0f:d1:26:
8e:1b:ed:05:bc:d9:71:60:56:29:a2:c3:82:f7:50:
0a:95:6d:2b:17:45:64:c4:c9:e1:d0:b9:52:34:86:
9a:46:99:5e:90:fa:20:3b:a4:a2:eb:c9:a2:03:63:
0c:83:5b:d3:58:b0:50:ac:8c:3e:59:2f:2a:2f:d5:
98:cf:40:bc:8d:c4:01:95:c8:f6:27:fa:14:66:23:
33:1e:21:0c:8d:41:98:e6:eb:81:8b:88:6c:04:d8:
2c:a0:ea:9e:fe:56:df:cc:20:83:20:59:40:32:91:
27:d9:47:2f:d7:62:8e:d1:98:d8:34:46:37:3f:ac:
56:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:82:49:B3:4D:F8:71:55:50:5C:3F:04:1B:68:D0:8E:A6:23:38:04
X509v3 Authority Key Identifier:
keyid:B4:18:67:7A:BF:3A:AE:E0:36:CD:4A:DD:77:D6:61:96:FC:DE:4C:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tBhner86ruA2zUrdd9ZhlvzeTG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/da25c9-4fe1-45da-8e74-2bea34b8938b/1/tBhner86ruA2zUrdd9ZhlvzeTG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:29:d3:1f:48:f6:b6:2a:bb:89:2c:42:06:31:10:e0:22:40:
00:93:9a:44:2b:5a:20:16:16:b7:16:f3:02:15:7d:0b:8c:41:
34:f8:d1:4d:3a:0e:d6:3e:99:61:65:1d:e1:20:88:e2:aa:c3:
3d:06:40:73:60:32:99:1d:e2:bf:2d:76:54:59:c6:a8:1e:35:
16:c9:0a:12:7b:7b:39:e4:4d:f6:09:2e:b6:15:2e:89:26:81:
37:d4:e8:30:32:ec:fa:a6:e8:18:38:ea:fa:8d:53:91:55:fc:
76:ab:4d:f3:22:95:5b:e6:15:25:3f:60:4e:8d:32:d1:84:ea:
60:2d:ea:7e:96:ca:e3:d2:9d:e8:cb:9a:b0:4f:29:3a:91:ef:
e4:e7:96:7f:53:65:1b:cb:1c:18:88:be:70:31:6d:8f:a4:2e:
e2:f0:ee:a9:98:1d:a3:9d:d1:39:01:ac:fa:7a:01:45:35:1a:
d8:b3:6c:a3:77:17:ce:40:57:fb:b5:4a:99:d5:4d:d4:f0:14:
a7:d7:5c:d9:5d:be:36:9c:7c:28:8b:81:e2:f1:38:42:ba:26:
fa:1c:35:46:f1:45:1a:e6:db:8a:9c:dd:09:c1:79:e3:ec:6b:
88:d9:1b:4f:58:81:a4:44:76:9e:5f:c2:9e:04:c2:fb:98:fe:
18:34:fe:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:39:55 2025 by rpki-client