Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
File: tDycG90eFSiKuTDUAFGzZTywnno.mft (raw, json)
Hash identifier: FeFtfH3lTCQYoTWPbiFN4i1T7H1+TLan8/TOMESJBrI=
Subject key identifier: 3B:AB:9C:EE:13:0A:10:C1:65:C8:D5:B3:87:08:57:D8:EE:62:2F:03
Authority key identifier: B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
Certificate issuer: /CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Certificate serial: 0194BC3BE13D6E40FB032EA4949553F069FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:28 +0000
Manifest this update: Fri 31 Jan 2025 12:00:28 +0000
Manifest next update: Sat 01 Feb 2025 12:00:28 +0000
Files and hashes: 1: tDycG90eFSiKuTDUAFGzZTywnno.crl (hash: EPZcDVWRqB7rgfWAaBlGpM4C63dMl+DJL7kx9dIsU5k=)
2: yUpCnFh46Tqx7sCXg4QHc_cNe3o.roa (hash: cp+PmQthE9hblxpquCO9Uz9at9P5Zu4kvGvMw6tU+Ug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:e1:3d:6e:40:fb:03:2e:a4:94:95:53:f0:69:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43c9c1bdd1e15288ab930d40051b3653cb09e7a
Validity
Not Before: Jan 31 12:00:28 2025 GMT
Not After : Feb 1 12:00:28 2025 GMT
Subject: CN=3bab9cee130a10c165c8d5b3870857d8ee622f03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9d:c1:e6:be:80:a0:20:fe:8f:91:c1:de:a9:
99:07:49:99:60:c7:0a:9d:e8:50:ed:3a:36:18:cf:
8b:40:8f:93:53:f6:96:3f:9a:2a:db:02:bb:95:72:
e5:b4:20:ea:c2:94:e9:5b:bd:ea:a6:eb:f0:a1:ba:
c3:85:35:ce:06:d9:6c:79:f8:58:1b:f1:81:25:5c:
fb:90:72:0c:ac:26:d2:23:3b:85:aa:09:c9:77:93:
15:eb:56:89:6c:fc:db:89:84:1d:d5:73:e1:f1:7f:
fb:73:0e:78:d9:36:91:03:72:51:03:b2:11:58:f8:
90:58:54:25:b9:3f:1a:b7:16:5e:b2:65:05:66:a1:
05:f0:92:af:14:47:d8:f5:10:a8:d2:8b:c6:87:8a:
19:b3:9f:3c:05:d5:82:0d:24:47:9f:d7:16:2d:13:
4f:f7:a4:ea:4a:3a:bf:42:3c:21:82:29:aa:74:1c:
04:f2:d4:49:b7:d7:4a:fd:7b:91:db:9a:f3:5a:84:
c2:1e:ba:ce:4f:d0:6c:e2:c1:d5:6a:bc:03:b8:43:
d1:dc:33:50:dc:7b:27:96:92:61:84:ee:30:ec:38:
45:82:74:fa:88:f0:a5:fa:2d:ed:4a:33:2a:1e:e1:
25:3c:e7:a1:22:4d:e4:e0:68:a2:b1:91:b3:f9:01:
c4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AB:9C:EE:13:0A:10:C1:65:C8:D5:B3:87:08:57:D8:EE:62:2F:03
X509v3 Authority Key Identifier:
keyid:B4:3C:9C:1B:DD:1E:15:28:8A:B9:30:D4:00:51:B3:65:3C:B0:9E:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDycG90eFSiKuTDUAFGzZTywnno.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/03b79a-30ed-4d26-8585-9c5d351526b3/1/tDycG90eFSiKuTDUAFGzZTywnno.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:70:79:02:5a:29:d7:45:0c:9e:e7:ec:64:bf:69:00:6f:dc:
48:ce:83:1c:55:c8:ac:4e:70:bf:ba:e8:de:00:ab:6f:41:47:
78:78:38:d3:b6:99:19:fb:8f:64:72:d4:cf:48:07:ce:0c:36:
15:f6:f5:b5:f4:aa:e0:ac:73:88:ae:d4:f5:cd:de:e6:cd:17:
b7:57:c1:cf:14:c6:2a:05:35:5d:68:f3:bd:33:be:33:7f:ed:
f2:f5:45:5f:64:55:97:4f:a2:51:1b:a2:4d:d8:27:91:57:10:
42:1f:90:32:58:3f:ba:77:3f:ef:89:dc:e8:7e:35:3a:09:76:
8a:22:ac:90:c0:46:eb:e4:92:12:8e:e4:2c:36:a8:c2:9b:f7:
8d:ab:f2:3f:6f:a5:20:33:a9:90:6f:69:a3:af:19:04:1f:ca:
fe:28:62:f5:e6:d7:e5:c6:2c:3c:da:fe:31:ec:46:01:55:00:
8b:b8:0b:a1:a8:1f:9e:fa:30:0b:80:43:0e:d3:46:c4:26:07:
41:49:0c:f9:68:51:e8:ac:3c:9c:83:67:70:25:40:5b:1f:0d:
57:9e:69:b4:a1:1b:f7:07:e6:63:75:ac:cc:84:20:60:e9:1b:
ab:9c:0d:16:0f:64:61:2a:0d:1d:45:92:11:06:a6:88:2a:58:
72:6e:30:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:32 2025 by rpki-client