Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
File: t6XbvIM8xastSukpfi6rl18cGX0.mft (raw, json)
Hash identifier: HeWMB3eWUtaSOb3ChgIUITGzdngEoOQUKwGGhnOdOo0=
Subject key identifier: 01:57:D6:EA:DC:59:E3:8F:28:91:F9:3D:BF:1E:C0:4C:9E:14:D1:9A
Authority key identifier: B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
Certificate issuer: /CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Certificate serial: 0194BC73198EB6CAD9D264C526130F7CEE7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
Manifest number: 04C0
Signing time: Fri 31 Jan 2025 13:00:47 +0000
Manifest this update: Fri 31 Jan 2025 13:00:47 +0000
Manifest next update: Sat 01 Feb 2025 13:00:47 +0000
Files and hashes: 1: pKIlg5YmNEiNHDYBMKXqIV0XhFU.roa (hash: 516yZ2viMH4DtygFn77E9hucmTi9jK0KgNTpnz+3JZI=)
2: t6XbvIM8xastSukpfi6rl18cGX0.crl (hash: Z9ycWKvZn61ai0D2/ltyTA5gIVCzp7eS31yhtA2mDfc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:19:8e:b6:ca:d9:d2:64:c5:26:13:0f:7c:ee:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7a5dbbc833cc5ab2d4ae9297e2eab975f1c197d
Validity
Not Before: Jan 31 13:00:47 2025 GMT
Not After : Feb 1 13:00:47 2025 GMT
Subject: CN=0157d6eadc59e38f2891f93dbf1ec04c9e14d19a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e8:66:72:52:a7:8c:e5:72:64:62:80:34:9d:
26:58:a1:ed:af:30:66:d0:c2:5d:9d:e6:d6:58:f1:
9d:d0:4c:57:d8:ec:25:fd:91:1a:6f:1b:91:90:df:
e1:71:15:91:3a:c1:85:bd:5a:96:5b:9f:27:42:6e:
98:cb:08:1e:62:76:7c:18:6c:54:1d:f9:af:56:c2:
57:4d:ae:5b:f2:e1:72:06:b1:97:3f:fa:e9:19:9b:
f1:f8:c3:0b:a5:ab:8d:e5:4f:1d:41:1d:29:cb:6e:
85:39:d9:8c:f5:43:4a:08:01:ca:15:81:1e:17:3d:
4d:b9:3c:4a:cf:c6:26:b9:3c:0d:59:2e:a2:29:2a:
48:e8:75:55:99:35:0e:b6:e5:2f:b6:33:4a:d1:3e:
a1:61:10:fb:49:63:07:81:19:5e:66:33:f3:7e:2f:
21:5f:ef:65:74:dc:96:f8:c5:ff:6d:39:4c:83:2e:
96:76:62:0f:c6:96:88:c1:12:48:3a:d9:51:15:71:
c7:2b:23:b5:ed:c1:21:37:1c:f6:a0:a7:3d:6d:b5:
fa:a4:6c:73:59:d4:f7:f3:cb:ec:1d:cd:fa:f2:82:
df:6a:4c:4d:18:66:74:18:da:62:4a:c2:2a:58:90:
3d:cf:a3:be:91:c9:7b:c3:83:80:1b:df:82:04:17:
aa:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:57:D6:EA:DC:59:E3:8F:28:91:F9:3D:BF:1E:C0:4C:9E:14:D1:9A
X509v3 Authority Key Identifier:
keyid:B7:A5:DB:BC:83:3C:C5:AB:2D:4A:E9:29:7E:2E:AB:97:5F:1C:19:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6XbvIM8xastSukpfi6rl18cGX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/429ff9-0265-476f-9035-4192a357eab7/1/t6XbvIM8xastSukpfi6rl18cGX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:ef:d2:cf:11:3b:4b:ba:15:aa:97:4a:e9:ad:89:2e:c7:96:
2c:b4:6f:c6:4d:a0:ae:d8:77:47:21:57:08:ec:fd:e7:dd:43:
d9:80:db:22:13:a0:20:12:1f:d3:d6:0c:2d:6c:88:93:0e:37:
d9:24:d5:85:a4:49:c8:8d:23:d2:63:1d:8f:fe:93:0b:53:44:
bc:78:70:33:e4:1b:c8:b2:f8:6e:a2:76:42:aa:0e:cb:17:87:
62:ec:c3:3f:b6:7f:e1:e5:de:06:9c:2b:a1:0d:7f:95:f0:b2:
ba:b5:17:32:13:b8:38:c6:c0:af:fd:d9:5a:e8:df:0e:08:02:
c4:17:22:a5:04:78:fa:7e:cf:77:9d:8f:d2:74:f8:3f:35:5e:
29:4e:1d:30:48:90:14:64:92:fa:b2:74:60:87:3f:21:7f:52:
3f:89:f6:02:19:67:d4:ae:ac:22:75:48:45:6d:7e:92:7f:94:
d7:ee:14:ce:c0:28:56:78:6d:ea:ee:9a:5c:05:4c:9f:c5:81:
b6:c9:2d:b5:e4:d2:1b:36:ae:a8:c4:a8:32:fa:45:bc:60:52:
78:55:54:ed:24:fa:dc:fd:2f:9f:2a:4c:d1:88:a5:29:41:91:
38:94:40:60:52:d7:4f:74:c7:c5:d3:cd:21:de:1b:71:8c:2a:
16:de:a7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:16:38 2025 by rpki-client