Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
File: tu1iBVpRkcAuxREulRgaiawGDOs.mft (raw, json)
Hash identifier: TCP6o5Mj5vXdyjyvjmVCq4InYR4xc7Hn9JlU5dA9xIM=
Subject key identifier: E0:11:E1:3B:04:0B:B7:8C:EF:A1:8F:3D:97:BE:AE:D1:98:57:FB:33
Authority key identifier: B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
Certificate issuer: /CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Certificate serial: 0194BC3BDA31EEA612A31A09868D9F0BE679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
Manifest number: 0984
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: iOo8WZeBs16BOwEjC7IsPMOtPO0.roa (hash: FC5R1Hrtvnbfsyec/XOyQavDbuFW5mY0wSOTHI+QutE=)
2: tu1iBVpRkcAuxREulRgaiawGDOs.crl (hash: q4tHpEB/1v7aCvBtJ+gO2gz6QNt28eMaJ5QfANRBQns=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:da:31:ee:a6:12:a3:1a:09:86:8d:9f:0b:e6:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6ed62055a5191c02ec5112e95181a89ac060ceb
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=e011e13b040bb78cefa18f3d97beaed19857fb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:21:2a:f9:cc:4d:7c:53:c7:72:ad:5b:cc:aa:
a0:bf:48:e8:79:84:ea:7e:77:29:34:7d:a4:16:6d:
57:b9:40:a7:8c:33:36:af:92:50:94:8a:80:e3:c3:
01:90:a7:6b:f9:1d:9c:ed:05:92:e7:93:69:50:be:
1e:c8:0c:76:c7:48:46:94:ac:e4:8d:49:3f:82:85:
86:72:58:62:57:37:29:87:5e:31:3a:fd:c8:1c:a0:
5b:19:d6:db:8f:ec:f1:1d:ba:91:52:ff:cd:f5:1a:
6f:b8:19:33:5f:7c:ec:8c:51:ef:4d:b9:e8:5f:0b:
92:8e:ea:2e:2b:5e:84:0e:07:dc:d6:7a:54:fe:77:
8e:7d:ad:f0:f3:b0:7f:80:06:08:94:1d:d3:21:55:
8c:79:d1:47:21:eb:2d:75:d9:71:af:6d:07:d5:dd:
79:20:8e:6e:b2:ba:bd:5c:eb:19:f2:c8:5e:41:63:
48:47:47:ee:15:1a:3e:f3:6b:c1:79:c2:1e:3f:38:
fc:f4:77:cf:68:be:43:5b:2f:f9:0a:99:39:92:f8:
31:3f:1a:85:96:c0:ad:2c:fd:93:18:d7:3e:12:3e:
87:02:1e:07:73:2f:b8:e0:4f:25:92:ec:ed:83:74:
8e:d8:88:7e:89:62:19:7d:e9:86:f2:7c:ee:bf:40:
7e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:11:E1:3B:04:0B:B7:8C:EF:A1:8F:3D:97:BE:AE:D1:98:57:FB:33
X509v3 Authority Key Identifier:
keyid:B6:ED:62:05:5A:51:91:C0:2E:C5:11:2E:95:18:1A:89:AC:06:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tu1iBVpRkcAuxREulRgaiawGDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/dc13c1-de56-449f-9c29-c81266b7c49e/1/tu1iBVpRkcAuxREulRgaiawGDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:63:c0:80:c8:b8:5b:9b:fd:61:ca:7f:1b:91:41:99:91:b9:
b7:84:9f:e6:a5:c8:7b:86:45:f8:8d:4a:5d:51:80:4a:d2:22:
3d:e1:d3:07:71:9d:f9:f7:93:b7:5d:ae:6b:7a:0a:a6:fe:dc:
76:1b:53:d6:d5:c6:04:66:79:0c:39:da:21:fb:76:be:23:dd:
3e:89:6d:b4:85:19:f0:63:df:4c:01:70:8a:d8:9e:19:c7:25:
7a:c8:b5:6c:0a:06:c9:fb:6f:48:49:ce:9a:c0:ff:ed:ac:e1:
3d:ad:4e:e5:73:b9:4e:63:9f:5b:63:fe:b0:3f:ee:b9:ad:95:
16:f2:ff:89:6a:f2:3e:d6:d8:f5:46:7d:04:e4:98:ed:1f:06:
b7:de:b2:0e:a6:a4:3a:c3:a6:76:79:ca:30:6e:73:9a:75:a3:
f4:04:cb:84:63:c9:fb:53:a6:3e:ab:bb:41:f4:f9:25:6b:92:
9f:ee:cd:cc:31:8b:1c:f1:61:a9:ae:84:b3:25:58:43:ee:1c:
28:4a:44:b8:bd:27:41:73:9c:9b:64:62:45:21:81:67:01:ad:
f7:ea:32:00:b7:64:97:99:3b:4b:40:3e:cc:2c:d0:6c:54:fe:
0b:1d:18:7d:75:f5:15:c6:91:df:82:47:6f:d3:e2:7a:07:cb:
c2:44:c0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:33:36 2025 by rpki-client