Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
File: Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft (raw, json)
Hash identifier: E+31xleURvaEX26qpsHsWyMwxeZunlV8/CRIsr+dep8=
Subject key identifier: 77:B6:06:3A:50:45:CF:F5:57:FC:01:0F:F7:F5:B9:4C:84:E7:4E:1A
Authority key identifier: 4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
Certificate issuer: /CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Certificate serial: 0194BCAA17154328F1E49CD5C61AA76177D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
Manifest number: 1423
Signing time: Fri 31 Jan 2025 14:00:51 +0000
Manifest this update: Fri 31 Jan 2025 14:00:51 +0000
Manifest next update: Sat 01 Feb 2025 14:00:51 +0000
Files and hashes: 1: EsNde2nZ0dUcA8Xoq5-tHg_EXc8.roa (hash: EuB6IqBcAAWKbULQ1dsjzb0/Ucv72mc0J9mJsdHmCGA=)
2: Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl (hash: EBzAtoxYNAr1gg6sgFuuRq+2ex9eicov/TED1yqh59w=)
3: eUaNjbQ13AL_bdj9OsodbJhievk.roa (hash: vqTtUX/Z4j6GrRJo/zNXECftqpV9YIa2rqV3Ge4NXvs=)
4: occ86qiOIs73r7C894le5tLORUc.roa (hash: vjqBb3FygjXd34w4UXc66ToikB55Yx9gYxFBgH7Uvw4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:17:15:43:28:f1:e4:9c:d5:c6:1a:a7:61:77:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eef6aae6fba5c61a61739afcab55a62266e89ee
Validity
Not Before: Jan 31 14:00:51 2025 GMT
Not After : Feb 1 14:00:51 2025 GMT
Subject: CN=77b6063a5045cff557fc010ff7f5b94c84e74e1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:60:47:f7:b4:2e:b9:e8:2e:c5:f9:71:1c:4e:
ee:76:b9:e5:54:36:68:63:1e:47:98:a6:2e:ed:cb:
1b:61:22:a9:39:47:f0:5f:55:06:f0:f6:0b:5d:ae:
75:5b:13:95:0a:87:c1:7b:2f:24:b4:ad:e9:95:f1:
a7:00:d9:1e:ab:da:7a:e3:d7:61:63:8c:47:48:aa:
85:c0:25:00:34:8b:e1:18:db:70:62:2e:ba:eb:ed:
3e:c4:10:63:c8:20:ce:a5:6a:85:6d:23:75:28:5c:
4e:9a:45:30:ce:ee:4c:2b:03:57:b4:d4:3e:f9:5d:
43:7b:e9:27:fd:4c:fa:8f:35:c0:68:6c:67:b0:5a:
26:0e:aa:68:c3:21:6f:f0:77:e9:3d:5f:18:06:5b:
4d:ed:66:f2:b3:2f:57:a1:f8:a5:55:73:4f:5e:4f:
e7:5e:07:0d:4a:3b:b1:a0:a2:3c:13:34:32:0a:99:
dc:cd:69:18:c6:45:4a:3c:ea:10:9f:f3:57:05:66:
6b:88:c3:78:54:31:b5:a9:22:6f:e3:b2:8b:2b:94:
a4:f0:b3:52:b4:b4:b1:72:59:0b:7c:b7:cd:7e:de:
0c:aa:90:ba:31:06:e0:43:d6:e8:71:14:f9:4e:7c:
ad:46:09:49:e2:9d:e1:f5:3e:57:2a:c2:62:a6:fe:
b3:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B6:06:3A:50:45:CF:F5:57:FC:01:0F:F7:F5:B9:4C:84:E7:4E:1A
X509v3 Authority Key Identifier:
keyid:4E:EF:6A:AE:6F:BA:5C:61:A6:17:39:AF:CA:B5:5A:62:26:6E:89:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tu9qrm-6XGGmFzmvyrVaYiZuie4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/b8e5c4-38eb-445f-b036-c37790e6d482/1/Tu9qrm-6XGGmFzmvyrVaYiZuie4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:a2:ef:e5:84:cf:3c:ef:69:72:e1:a2:02:29:fd:29:98:e4:
5a:a6:81:e7:b6:0a:d7:c4:7d:a7:ef:60:f2:2f:91:e4:80:93:
4b:ff:53:3e:29:97:c3:eb:a2:28:fc:d2:e5:70:71:85:21:43:
e6:23:6d:57:e0:b0:8f:00:63:35:d8:fd:0e:e7:a7:2e:5e:ae:
13:a5:6e:92:22:7b:c9:7b:36:bc:7c:9d:c0:85:34:06:aa:f8:
7d:7f:c4:05:5b:42:4f:d2:a1:9a:d1:c1:55:48:bc:f8:12:aa:
ea:08:32:9e:ca:b7:fc:51:fd:17:e5:24:a1:e5:ff:8e:36:ae:
81:67:9c:8a:7c:6c:da:9c:5a:45:64:a8:60:c7:a6:bd:a7:fc:
de:ba:e4:63:5c:4b:88:4c:6c:c3:3f:5c:3e:64:db:7f:57:57:
fc:fb:88:54:93:43:dc:77:09:6b:70:06:9e:f6:aa:7c:55:28:
4f:c9:a7:a9:4c:55:ed:63:7a:2f:b0:70:69:f8:37:58:d5:99:
b0:d0:38:7c:61:dd:33:a8:4f:14:ec:cc:f4:f2:1c:9a:42:c7:
e1:d6:b6:65:7c:22:8b:88:39:50:bf:99:fb:d1:a1:1d:ec:83:
de:4f:9c:4d:74:4b:5b:2d:66:d6:c3:a8:76:88:7f:3c:4a:1e:
4d:22:72:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:21:25 2025 by rpki-client