Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
File: tuD-D69oRJiK8vdE1RbtucXf5xw.mft (raw, json)
Hash identifier: vv+zVOrm9DemTBOf0mijygCVvlgsUKmEwZ7zCnRCpiw=
Subject key identifier: CB:8C:E6:76:C5:EE:37:04:94:F7:E3:60:A6:F5:EB:19:DA:0F:55:C6
Authority key identifier: B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
Certificate issuer: /CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Certificate serial: 0194BD8525E781E36298DC2C655EEAA24417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
Manifest number: 0BB2
Signing time: Fri 31 Jan 2025 18:00:07 +0000
Manifest this update: Fri 31 Jan 2025 18:00:07 +0000
Manifest next update: Sat 01 Feb 2025 18:00:07 +0000
Files and hashes: 1: a_PNkPnx5ou35JrpXNK2_iqC5Yc.roa (hash: iMkdGKK1MTR9CDFy5rjVtC+a2w/5myXmTmA9XTMLkJo=)
2: tuD-D69oRJiK8vdE1RbtucXf5xw.crl (hash: DsQ2tUgT3np/im0N0F0HDWSY3pv/P+qu3WdOc8YE1A4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:25:e7:81:e3:62:98:dc:2c:65:5e:ea:a2:44:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6e0fe0faf6844988af2f744d516edb9c5dfe71c
Validity
Not Before: Jan 31 18:00:07 2025 GMT
Not After : Feb 1 18:00:07 2025 GMT
Subject: CN=cb8ce676c5ee370494f7e360a6f5eb19da0f55c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f0:13:c2:ce:f2:61:3b:3f:5c:22:67:bd:51:
4b:b1:22:b9:14:c6:eb:c2:ad:85:74:41:36:f3:8b:
35:9c:4c:e6:26:68:01:00:e7:3e:55:1d:ea:83:fe:
62:57:4b:92:16:bf:d8:b9:ac:1f:d7:2e:73:4f:f9:
95:38:43:9d:2d:2e:2b:bf:16:2d:b7:ad:f8:8c:77:
b3:92:38:c7:6f:88:ee:88:62:0f:e3:09:05:e6:29:
00:2b:45:05:b8:6e:d4:a3:7f:64:46:f4:21:2f:91:
be:87:12:dd:9c:ca:8a:ab:52:d1:0e:e2:06:2e:d5:
f8:c7:4e:62:5a:f7:a7:94:24:96:6b:72:75:06:3e:
c1:11:cf:95:55:b1:72:d5:1c:da:d7:8c:b2:13:0a:
a1:d9:31:6b:2a:bf:38:a0:25:90:e4:36:ed:e0:dc:
0e:ce:7f:3f:e5:14:7a:99:32:ce:3d:14:c8:5e:f1:
46:21:cd:17:35:bd:55:90:5b:6a:72:32:89:a3:ab:
97:b2:25:c7:f6:8a:59:cd:56:e4:37:77:3c:50:29:
1a:d8:6b:6b:54:50:12:b3:1e:95:33:b0:70:79:ae:
77:b1:9c:d8:99:cf:4b:e1:b1:db:1b:82:8d:95:d1:
7a:85:55:eb:7d:4c:4d:9d:e0:52:78:33:8c:0b:73:
1c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8C:E6:76:C5:EE:37:04:94:F7:E3:60:A6:F5:EB:19:DA:0F:55:C6
X509v3 Authority Key Identifier:
keyid:B6:E0:FE:0F:AF:68:44:98:8A:F2:F7:44:D5:16:ED:B9:C5:DF:E7:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tuD-D69oRJiK8vdE1RbtucXf5xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/d2a9bc-13b1-4b30-b563-209e1f84224e/1/tuD-D69oRJiK8vdE1RbtucXf5xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:d5:be:9a:3a:fb:5f:81:41:58:30:3c:11:6a:cf:c8:87:80:
78:94:29:c2:ec:e0:16:2c:d9:73:6f:82:28:3a:d7:22:a5:79:
a2:dd:60:d6:09:e0:95:a7:7d:c8:19:e1:0e:1b:ee:d8:9e:1b:
f4:bc:f3:5d:9e:0f:2d:99:40:72:6a:05:34:29:7e:23:9d:7f:
ca:8f:2f:eb:9b:90:11:fc:cf:be:81:28:2f:3d:0f:8c:0f:f1:
2c:65:2b:3f:3e:1c:92:c2:c6:87:e4:f1:df:41:18:7e:c3:84:
7b:01:10:9f:de:ee:1e:a9:d0:08:ee:66:a5:9d:32:c5:a8:27:
86:26:78:0c:88:97:96:6d:31:af:d1:75:0c:51:e6:32:9e:68:
f9:0b:8c:24:27:3e:05:09:e2:3d:46:04:ee:da:62:7d:1f:d8:
ac:f4:70:3e:97:1b:bf:4a:c2:74:38:7d:ac:46:dd:d2:0c:41:
14:ae:87:37:5a:a6:14:67:59:8e:bf:62:1b:b1:6c:41:5a:b3:
a6:90:c9:81:04:29:d5:b5:bb:ac:07:4e:8f:48:b3:87:d0:20:
a4:33:6f:82:ce:e1:08:44:bf:ee:a7:8f:c7:a8:ad:e0:8c:ac:
d2:2c:8c:f5:6c:92:d4:01:ef:7a:88:a5:b4:2a:f8:65:eb:90:
0e:ce:9a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:45:10 2025 by rpki-client