Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
File: tWyxebPbXGs2zTMINAgB_tsrfRk.mft (raw, json)
Hash identifier: c40hnkX5DhJFZOmffdApqLwx0bf+Q9qU0jlk5RPnQvE=
Subject key identifier: 97:2B:C5:2A:32:EE:E1:FA:1A:CE:64:7C:89:8A:EE:05:87:9B:CF:81
Authority key identifier: B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
Certificate issuer: /CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Certificate serial: 0194BC3C8CE3B12FE2EA8A96A2E92D9436D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:01:12 +0000
Manifest this update: Fri 31 Jan 2025 12:01:12 +0000
Manifest next update: Sat 01 Feb 2025 12:01:12 +0000
Files and hashes: 1: egERklG4JDoNVaiZcO7pQtm8HwI.roa (hash: UCPCOxDDKaXVSI1SbOM7CcRIC7mRuotxlKVUCRUv8VQ=)
2: tWyxebPbXGs2zTMINAgB_tsrfRk.crl (hash: nbIQp+tKgqctuN0s5cRZIamuUL7nWlrEItTvqXadqnQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:8c:e3:b1:2f:e2:ea:8a:96:a2:e9:2d:94:36:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b56cb179b3db5c6b36cd3308340801fedb2b7d19
Validity
Not Before: Jan 31 12:01:12 2025 GMT
Not After : Feb 1 12:01:12 2025 GMT
Subject: CN=972bc52a32eee1fa1ace647c898aee05879bcf81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:33:5b:90:6b:a6:42:d8:be:e4:96:2f:ca:5e:
9b:6a:ba:e0:48:93:d2:2e:77:dc:c7:d0:c9:a1:6c:
cf:4c:07:54:b8:42:aa:f6:86:f5:7e:c8:5c:40:a9:
55:ae:4c:bc:e4:66:df:0e:c8:25:ed:b1:68:e2:4f:
8f:f5:e8:2a:2d:18:6d:f0:1e:e4:26:a3:ac:ed:68:
44:2a:85:8b:b6:54:da:c3:c3:83:2d:db:8f:f3:73:
43:f1:2f:6b:23:7e:f0:53:74:5f:1f:c8:f2:d9:f8:
6c:e8:95:9a:c9:f2:19:56:45:19:2d:c7:bb:be:1b:
2f:85:38:02:f0:7e:13:ac:42:c1:5c:68:1f:3b:50:
15:84:f4:6b:15:05:25:ab:c4:ba:bf:cb:87:ff:27:
0f:e7:20:07:5d:2f:d5:84:18:fe:12:70:42:68:4a:
93:4d:d9:38:4e:92:76:15:db:18:65:33:b8:e1:5b:
0e:a0:65:a8:db:97:47:71:44:12:28:eb:1c:68:04:
78:dd:e1:c3:3b:04:59:ef:9e:c5:bd:f3:51:93:19:
29:44:24:0c:d9:17:96:d1:fa:d2:ca:44:81:de:9c:
08:1f:d9:d7:89:3b:02:aa:aa:4f:db:49:32:e5:ad:
f7:3f:40:8b:d2:ec:49:19:4d:8d:8b:75:da:ff:82:
09:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2B:C5:2A:32:EE:E1:FA:1A:CE:64:7C:89:8A:EE:05:87:9B:CF:81
X509v3 Authority Key Identifier:
keyid:B5:6C:B1:79:B3:DB:5C:6B:36:CD:33:08:34:08:01:FE:DB:2B:7D:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWyxebPbXGs2zTMINAgB_tsrfRk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/649a98-339a-4f4b-8750-6e9d3b732b08/1/tWyxebPbXGs2zTMINAgB_tsrfRk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:de:e0:09:68:35:20:05:37:d6:95:52:5a:73:7e:72:a2:de:
87:fd:60:75:f1:ed:e5:32:4d:f3:03:26:2b:2e:aa:4a:6a:46:
1d:44:23:1a:1b:ad:e3:c0:20:8e:14:ad:6d:7d:eb:63:84:97:
4e:11:5b:ce:74:6e:61:85:f6:2c:6a:40:45:4e:cb:df:53:9d:
db:59:61:33:a4:eb:7f:23:39:4d:13:24:ca:df:a1:06:04:f5:
bb:b4:a1:8e:5e:0d:5f:d6:71:93:13:2e:56:ef:3d:2e:a7:ef:
f4:8b:ac:1a:46:62:9c:5d:0a:e8:20:bd:32:b3:fe:57:af:76:
ac:f0:51:e1:56:12:c6:dd:02:d3:58:d8:21:35:8b:3d:71:01:
73:42:8c:1c:93:29:a7:cc:ac:31:40:50:ef:6a:90:17:f8:0e:
27:97:8c:f8:a6:e5:5e:24:68:48:db:fd:d8:37:90:72:6c:bb:
e6:90:45:60:ac:44:f1:d3:89:7a:4c:71:0d:8f:60:e9:cd:20:
30:8d:6b:cf:9c:7b:3c:9a:04:85:0a:eb:d3:b6:45:43:60:4e:
37:df:32:73:b5:8e:46:35:ee:b4:9e:bd:1e:7a:63:4d:db:c4:
94:4d:e8:17:d7:14:60:d9:e8:3c:d6:35:8d:e4:56:b6:c1:91:
fc:91:0d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:40:09 2025 by rpki-client