Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
File: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft (raw, json)
Hash identifier: A1vz8JF3rSGoAV2nTb+l+4JIAKBao1edyWU25HQEjno=
Subject key identifier: 8F:B8:71:40:D4:E2:F0:53:9C:01:D4:4E:57:37:71:4C:03:A5:C1:CC
Authority key identifier: 4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
Certificate issuer: /CN=4da3711dc5de45f2f5b47901659e956d938272fe
Certificate serial: 0194BD17B9A709C161E170D05149DC765B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:36 +0000
Manifest this update: Fri 31 Jan 2025 16:00:36 +0000
Manifest next update: Sat 01 Feb 2025 16:00:36 +0000
Files and hashes: 1: 7YKaewqyZbI9lVFIivFUL2FPVzU.roa (hash: wf42n7crwFg9XaXHUPxEE3NTHiwbzXO1xRDVNEMLG6A=)
2: TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl (hash: FjF2gCKQsa2sHBgNQwooR73hAsHonPZCJ0qSnLvRW7s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b9:a7:09:c1:61:e1:70:d0:51:49:dc:76:5b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4da3711dc5de45f2f5b47901659e956d938272fe
Validity
Not Before: Jan 31 16:00:36 2025 GMT
Not After : Feb 1 16:00:36 2025 GMT
Subject: CN=8fb87140d4e2f0539c01d44e5737714c03a5c1cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5e:0c:34:2f:90:4b:c8:08:05:89:39:97:15:
5e:22:05:ea:1e:ff:7e:2e:c2:77:0f:f8:e4:0e:de:
ec:ad:88:6f:a8:86:3a:67:6f:1e:c2:6a:02:53:c9:
51:48:3d:59:c1:0c:19:c6:1f:8a:a3:74:9b:a1:84:
bf:10:a5:18:39:f8:6d:4b:27:0c:cf:06:5a:57:72:
6b:6b:26:53:6a:92:59:24:76:73:00:a0:26:8e:dc:
18:5f:43:01:92:4e:aa:1b:e7:94:57:39:6e:d9:2b:
59:56:b0:61:f0:af:78:7c:7c:c5:79:1e:91:b8:86:
b4:49:6d:98:ce:f7:82:ac:5d:f2:28:f1:79:a4:c9:
33:b8:5d:2a:fc:5e:f9:6d:5d:72:f0:55:ff:9d:5d:
6d:e5:33:aa:2a:b8:b8:91:79:81:c3:f6:30:f9:6b:
de:a1:77:61:b8:3a:05:64:19:5d:82:0e:13:ee:ca:
ef:4b:60:45:74:b0:44:a7:e7:a8:3e:ff:60:12:23:
ce:81:0f:d1:93:9c:5b:1d:65:27:1f:0d:03:b9:49:
2f:34:51:23:71:ef:55:0a:c7:a6:a5:5c:a7:f7:23:
94:fd:49:b1:89:b9:80:5d:d6:9b:5d:17:08:96:12:
95:bf:6b:b3:f9:90:a7:b4:cf:fa:50:ee:db:4e:9d:
cf:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:B8:71:40:D4:E2:F0:53:9C:01:D4:4E:57:37:71:4C:03:A5:C1:CC
X509v3 Authority Key Identifier:
keyid:4D:A3:71:1D:C5:DE:45:F2:F5:B4:79:01:65:9E:95:6D:93:82:72:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a831c0-457c-4ba8-bec7-e251109bfd19/1/TaNxHcXeRfL1tHkBZZ6VbZOCcv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:4a:e3:dc:49:79:6e:a7:ea:bd:d8:e6:b8:2d:88:c4:f0:36:
ef:39:51:a8:3e:f8:09:c4:c6:ba:40:71:a9:ed:b2:ec:62:85:
f8:b8:33:ad:5d:3d:de:32:e4:9b:5b:a2:d2:c1:b4:c6:f7:c8:
b9:41:4b:65:73:37:d7:e6:f1:0f:8f:97:c1:01:b2:d3:d1:24:
3c:9a:56:a3:ba:21:18:db:16:3f:38:09:86:d5:21:4e:83:e3:
4e:93:d5:c7:62:e5:1f:c9:36:cb:42:cd:f5:6f:73:11:e6:50:
f6:3f:99:1d:23:2a:31:dd:29:67:33:ec:2d:9e:0d:8a:35:3a:
7a:f1:ba:db:d3:05:26:2f:8d:62:dc:1d:5e:2a:e7:a7:e4:65:
3c:1c:94:5b:ba:05:75:8a:5e:e7:c2:a7:ec:a4:3a:52:13:50:
68:e5:b2:22:71:10:21:e8:36:60:5d:f8:5f:ac:53:0f:49:cb:
c2:39:bf:2b:5b:77:43:6f:51:44:a1:8e:a7:da:af:0c:68:bc:
b6:81:b5:dd:a2:ae:61:6b:b0:76:b7:aa:8d:24:ab:19:93:07:
92:1e:ca:23:03:27:c5:fc:c4:2b:a5:6b:d4:e7:d1:d1:1a:70:
27:2d:87:1a:86:50:c2:70:6c:3f:3f:36:b4:5a:dd:d4:6f:7d:
7e:fd:d0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:42 2025 by rpki-client