Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
File: tFOob9MIG4A-3BDSO77akdeTICU.mft (raw, json)
Hash identifier: cc7rh/mZHKtdWLSxm+XRUfSUYbxSSx/6dH9l+rz3rIE=
Subject key identifier: EA:2E:A1:C6:A9:C7:7B:D3:69:75:E2:4A:B6:37:62:88:4E:2B:D5:3B
Authority key identifier: B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
Certificate issuer: /CN=b453a86fd3081b803edc10d23bbeda91d7932025
Certificate serial: 0194BD178DE9735DFB2DE139380D122675C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 16:00:24 +0000
Manifest this update: Fri 31 Jan 2025 16:00:24 +0000
Manifest next update: Sat 01 Feb 2025 16:00:24 +0000
Files and hashes: 1: h8oFDHIXTub3TgbD4vBpQOwCmWM.roa (hash: lwyf55gn3PMFr0CsrdeYlJw82BVP+7eUtEsfzrm/dIo=)
2: tFOob9MIG4A-3BDSO77akdeTICU.crl (hash: ZPRj0oqHR6BST+DiyfqFhm+3xVcOm73/F2Wj2nMtnmM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:8d:e9:73:5d:fb:2d:e1:39:38:0d:12:26:75:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b453a86fd3081b803edc10d23bbeda91d7932025
Validity
Not Before: Jan 31 16:00:24 2025 GMT
Not After : Feb 1 16:00:24 2025 GMT
Subject: CN=ea2ea1c6a9c77bd36975e24ab63762884e2bd53b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:1c:7f:41:83:cd:c8:57:87:69:3c:b6:ed:a2:
74:03:15:38:c7:49:1f:e6:54:05:3f:aa:18:93:91:
ef:20:12:8e:a1:6e:05:a6:e5:ae:ea:9d:88:5f:eb:
22:2f:bf:c7:8c:98:f6:7d:68:01:79:d3:0c:c3:1c:
67:19:6b:e1:dc:bc:77:44:ca:eb:8d:4e:fb:d2:44:
95:1c:0c:fe:af:13:db:ce:fb:76:9e:b8:f6:16:29:
9d:cc:03:69:0f:21:36:f0:77:f2:a0:f9:2a:e4:f8:
57:22:b9:e2:36:00:10:47:bf:13:c5:fe:d8:46:dd:
6d:88:28:97:27:84:bf:d3:52:04:60:51:13:2c:c8:
55:d3:51:49:13:e2:29:07:21:ba:e8:27:40:40:b4:
66:0d:0a:0f:2b:23:da:fb:d4:57:b0:9e:1c:64:5e:
27:f9:e3:42:13:ec:21:da:13:84:09:f7:1e:6f:c3:
5f:43:25:02:69:03:70:6c:bc:d1:80:32:76:1a:54:
e1:28:65:5d:68:a9:e2:6c:ab:d0:f1:c7:61:92:56:
3a:14:78:af:5a:e6:77:44:07:3f:58:65:71:fa:a7:
92:a6:e9:1a:fd:dc:c1:46:c7:c2:c1:2e:00:c4:4f:
9e:f4:7f:4d:69:cb:f4:a7:7d:44:e4:76:7e:ef:98:
25:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:2E:A1:C6:A9:C7:7B:D3:69:75:E2:4A:B6:37:62:88:4E:2B:D5:3B
X509v3 Authority Key Identifier:
keyid:B4:53:A8:6F:D3:08:1B:80:3E:DC:10:D2:3B:BE:DA:91:D7:93:20:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tFOob9MIG4A-3BDSO77akdeTICU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/225af9-f3f5-49e4-ba10-f5ea012b84fc/1/tFOob9MIG4A-3BDSO77akdeTICU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:a2:29:c3:5f:e8:05:5a:e9:0d:e9:44:e0:96:34:25:d9:73:
ff:c2:5f:91:a2:d7:1d:cb:c1:24:5d:2e:2a:4c:48:f8:95:43:
b0:d0:67:fd:5a:53:60:56:4e:2c:8c:ea:12:7c:32:10:2b:d5:
80:e6:c1:c2:e7:fa:1d:95:8d:f0:9c:6c:60:c2:81:52:2a:9b:
a9:c4:0e:cc:98:c0:df:76:00:62:ce:a4:df:1d:48:0f:99:7e:
df:58:00:42:06:38:9a:7f:f4:6d:85:1e:e5:e4:86:1f:a8:48:
32:62:71:64:d4:b5:79:f7:71:de:df:7e:31:22:34:39:97:79:
63:23:4f:a2:7d:f8:51:cb:c4:3c:b7:8f:89:55:4e:9d:84:b8:
a3:38:16:14:da:d0:05:09:b3:b1:50:73:ce:cf:6b:a2:ac:57:
de:5a:e9:ba:18:48:a5:7b:1f:de:1e:2e:b5:a0:c5:33:96:87:
e5:f2:82:a2:05:19:a0:86:39:3e:dc:4e:8c:06:49:2c:3a:03:
45:a7:49:b4:bb:43:04:a3:ea:da:62:eb:13:b6:e0:e8:d3:36:
fa:80:53:5a:6f:47:f0:90:fb:f7:af:b7:a9:4e:be:e7:36:d1:
56:ae:4b:b0:6e:96:32:ef:72:2e:7e:6b:d7:54:2f:97:7d:ec:
df:c8:47:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:03 2025 by rpki-client