Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
File: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft (raw, json)
Hash identifier: UskYYjZPiUmBN355KvKH5ucbNXf85dL3w7jWLvFaedc=
Subject key identifier: 08:46:F6:D8:5A:99:3D:93:AC:0E:8E:04:33:B7:40:3D:C2:DB:54:60
Authority key identifier: B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
Certificate issuer: /CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Certificate serial: 0194BD17809CE0C09651E11AEA966BD11298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 16:00:21 +0000
Manifest this update: Fri 31 Jan 2025 16:00:21 +0000
Manifest next update: Sat 01 Feb 2025 16:00:21 +0000
Files and hashes: 1: E5ldtRDNq7PF5yZrAMEvxowWuR0.roa (hash: 4L7DIoeLgHz0Qv5KkaEDn/KJszMLQY8xsxtNREAtJGQ=)
2: tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl (hash: f81G/u7dF8913H770gOyfRXyhThtMIBZsv2tU1dJbzw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:80:9c:e0:c0:96:51:e1:1a:ea:96:6b:d1:12:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43342f17d54a8a3da0ce4d318b3b4c3fa0593e4
Validity
Not Before: Jan 31 16:00:21 2025 GMT
Not After : Feb 1 16:00:21 2025 GMT
Subject: CN=0846f6d85a993d93ac0e8e0433b7403dc2db5460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8e:f4:fe:0e:9a:82:35:08:2c:fc:7d:70:a1:
9f:ef:ae:96:8f:84:e1:93:4a:ea:4d:22:eb:8b:77:
3d:be:ff:7e:58:70:48:fb:a2:46:4d:b3:d2:72:c4:
83:a8:0f:5a:66:36:37:95:42:14:71:a7:a8:b7:69:
38:83:51:a8:a9:cb:6a:53:ce:67:0c:ce:31:3b:1f:
73:5b:ca:04:dc:97:b5:8d:a2:1c:08:4d:a7:44:48:
85:28:47:3f:3f:84:73:0b:61:dc:1e:12:a2:a9:e6:
77:7c:45:88:f0:42:e4:2b:fb:f0:91:dd:6f:71:a8:
f6:fe:1c:0f:d9:b6:6f:ee:37:33:b7:41:99:02:f7:
18:56:91:0b:c7:1c:cb:f9:b8:0b:5d:5d:96:35:b4:
0f:65:9f:22:36:35:5a:a7:e8:7b:1d:95:ef:52:54:
27:42:e7:cc:97:37:39:7e:4b:bb:19:4e:d6:d8:94:
02:5d:b1:a8:6d:b0:2c:c8:e8:77:23:ab:5f:97:23:
cc:ec:d4:fa:15:bc:e1:4a:c7:c1:75:87:c9:d4:d1:
ca:b3:0d:90:93:cc:d1:e8:83:ca:92:8b:41:10:50:
5e:f5:84:1c:b4:2c:44:93:b9:97:a8:ac:bc:bc:7c:
ab:5a:70:3c:17:5f:61:28:7a:3b:40:c2:6c:fb:b2:
28:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:46:F6:D8:5A:99:3D:93:AC:0E:8E:04:33:B7:40:3D:C2:DB:54:60
X509v3 Authority Key Identifier:
keyid:B4:33:42:F1:7D:54:A8:A3:DA:0C:E4:D3:18:B3:B4:C3:FA:05:93:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/15a2c0-5c08-48bd-a8c3-3674a9010efd/1/tDNC8X1UqKPaDOTTGLO0w_oFk-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:07:1c:a3:8c:b3:8b:49:4a:3e:a2:c5:81:0e:4e:dd:8c:f0:
10:e0:06:4f:ba:53:d4:7b:ca:ca:41:00:a9:f5:fd:e9:ce:45:
28:c8:b8:76:ac:4f:4b:6f:08:fe:2a:7e:14:a3:83:1b:9f:2f:
a9:99:86:37:86:5b:9b:9b:5e:40:35:8f:c6:6f:0b:66:5b:7a:
5e:10:59:f5:6c:07:40:30:27:24:b6:88:11:48:3b:9f:68:8d:
6a:8f:2c:f7:15:91:d6:2a:8e:67:44:83:69:66:ea:b8:75:30:
ce:d0:26:8c:86:c3:c1:f7:4a:a4:0e:89:d1:2e:af:95:34:b8:
be:47:85:00:10:ca:86:50:8b:66:cd:77:f7:b9:7b:8b:fe:30:
f1:25:59:d6:f4:20:6a:bc:64:57:b8:43:8b:07:c5:c9:f4:4a:
75:77:73:2e:41:12:32:d9:35:7f:42:50:c7:ee:25:ed:d1:48:
cc:23:de:50:8c:45:b8:7f:f6:d0:4a:eb:ad:eb:0b:f1:f3:57:
54:44:0e:ce:b1:7e:3c:b8:a8:07:74:6f:c8:88:4d:b0:4a:23:
70:10:c8:36:63:b9:50:f0:14:b9:12:70:74:93:e6:aa:8e:f5:
b4:51:3c:19:02:d3:6a:ea:ce:a3:de:39:10:36:57:57:b2:f4:
6b:9e:fa:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:39:58 2025 by rpki-client