Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
File: t09j_Q3Bl-Uq0nInbEDT7kux15k.mft (raw, json)
Hash identifier: eBAbt/kCl6nMcYZnrm0kibX58BQh0+NW3WfgrRofwCQ=
Subject key identifier: D4:17:B4:6D:0F:01:E8:F7:00:A9:22:70:FB:D8:A9:8F:AF:7A:61:4F
Authority key identifier: B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
Certificate issuer: /CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Certificate serial: 0194BBCED78123767F8B5B96D30CA19057B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
Manifest number: 11CD
Signing time: Fri 31 Jan 2025 10:01:22 +0000
Manifest this update: Fri 31 Jan 2025 10:01:22 +0000
Manifest next update: Sat 01 Feb 2025 10:01:22 +0000
Files and hashes: 1: CTtxM-1YJnI7s2CeXEI8bJGchw8.roa (hash: m3vS1eOhVy8HVysz20rw/64QS2NyFhJNMyCoI4Eqes4=)
2: t09j_Q3Bl-Uq0nInbEDT7kux15k.crl (hash: N2U+LLeNdb+VWnAo4R51DYHARjLJOw7eVNTbcwkONKY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:d7:81:23:76:7f:8b:5b:96:d3:0c:a1:90:57:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b74f63fd0dc197e52ad272276c40d3ee4bb1d799
Validity
Not Before: Jan 31 10:01:22 2025 GMT
Not After : Feb 1 10:01:22 2025 GMT
Subject: CN=d417b46d0f01e8f700a92270fbd8a98faf7a614f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c7:63:7e:89:41:e9:2e:5d:af:44:2f:1c:e0:
64:3d:f6:71:7a:c2:10:37:26:32:b8:34:9f:a8:96:
b4:33:45:2e:7f:0b:ed:8f:2e:bd:dc:3e:c3:3f:01:
a0:01:16:b4:df:81:2b:fb:6d:e2:c3:6c:61:27:a0:
13:5d:ef:8c:c5:3e:bb:36:9a:78:d8:72:7d:2b:75:
ae:62:f9:68:e5:ec:2e:55:ac:0f:0d:0b:76:58:d6:
b5:16:be:8c:78:34:8b:31:a0:1d:a2:01:ae:e3:26:
b7:c3:69:8e:0b:82:4c:bc:45:08:57:7b:11:e0:52:
58:24:47:99:cb:7b:d3:af:bb:1f:d3:d2:62:e0:64:
2b:e8:cf:80:9a:39:8b:25:0a:43:dc:f8:e0:1b:98:
a3:17:40:6f:be:d0:fc:6e:9b:7b:6f:45:94:7e:08:
1b:82:ea:02:c8:50:38:07:af:77:7e:b5:62:b8:08:
a6:5b:fc:48:f7:5a:2f:f3:db:16:91:49:b8:6e:3f:
fc:63:17:d8:84:0f:6c:08:c9:1f:47:1f:fc:df:d1:
94:78:27:82:c9:3c:52:4e:b5:29:63:98:51:b0:2b:
19:60:a7:ee:2a:65:62:b5:9f:11:d5:6b:55:39:5f:
cd:dc:cf:b1:81:83:49:af:c9:31:c9:67:2e:0f:28:
fd:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:17:B4:6D:0F:01:E8:F7:00:A9:22:70:FB:D8:A9:8F:AF:7A:61:4F
X509v3 Authority Key Identifier:
keyid:B7:4F:63:FD:0D:C1:97:E5:2A:D2:72:27:6C:40:D3:EE:4B:B1:D7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t09j_Q3Bl-Uq0nInbEDT7kux15k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/981176-4d10-4859-ba0f-1d22b02b9b1b/1/t09j_Q3Bl-Uq0nInbEDT7kux15k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:10:b7:2f:e6:52:1a:2b:2b:19:23:de:2b:f5:cc:89:40:46:
47:2d:18:70:53:7d:27:e5:c8:96:22:86:04:a3:6a:cd:87:e1:
bf:23:6f:d8:4c:6b:d5:fc:f6:dd:6a:58:ba:4a:6f:89:c9:5c:
37:24:ee:a7:05:84:68:9f:4f:c5:01:1e:65:a0:cb:b7:0f:2c:
98:58:be:c6:7b:82:a8:19:82:a1:6e:09:17:be:0f:c5:0f:67:
28:81:52:00:54:0c:84:0b:f6:ac:55:9e:52:ad:9a:3f:63:5d:
03:e8:25:9c:45:0e:d3:1e:f5:1b:93:28:1a:25:db:0a:d8:79:
d4:58:3b:c2:4e:10:46:c8:1c:e0:a1:fb:21:01:aa:67:a8:3c:
ce:a8:9e:98:58:3a:9f:01:6c:26:58:48:81:85:93:39:96:66:
f3:7a:fe:6e:8b:ae:a8:6b:9c:7b:ed:df:1c:3f:55:71:36:3f:
c4:2e:39:75:78:05:83:17:b1:8b:bd:1b:86:06:1e:a1:fc:10:
b3:a9:91:11:33:7f:cf:fd:37:6d:0a:15:4d:9b:dd:65:a0:e2:
91:cd:2f:ee:ee:03:f3:ce:26:49:3c:11:1c:14:b3:b5:8b:b6:
1b:14:4a:a0:fb:2a:03:46:c4:ca:9a:67:d8:d8:88:d0:46:60:
84:78:34:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:25 2025 by rpki-client