Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
File: tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft (raw, json)
Hash identifier: GoZorR0jEwYHIVT0q0jFieXWPG8ftIStlPNBwWIByQg=
Subject key identifier: 40:B3:13:6F:5C:CD:17:76:B5:4F:D4:80:3B:3F:E2:84:99:47:B7:EF
Authority key identifier: B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
Certificate issuer: /CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Certificate serial: 0194BD174C74CF3F24D38E815B957167C5E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 16:00:08 +0000
Manifest this update: Fri 31 Jan 2025 16:00:08 +0000
Manifest next update: Sat 01 Feb 2025 16:00:08 +0000
Files and hashes: 1: 5ZQra7L-IsZsuKLO0lJjxDnzRq4.roa (hash: JgYoL2/LGVSX4nbbkirOpXIvSueW2/0GrLGHhioQgeE=)
2: _C6uo5bttBB4GIQvrIXqZn9gI98.roa (hash: 27DtKk790z3RXtd6Y19Xan8dAkYdBzq0VotWhYi1Erc=)
3: tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl (hash: H2w30duMjCbYJD8K7eQ0HBfWPvtRN+bdTAfjk0MjU1A=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4c:74:cf:3f:24:d3:8e:81:5b:95:71:67:c5:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b55d4e6317c62a1a69dac31f4f143e3bc280ba62
Validity
Not Before: Jan 31 16:00:08 2025 GMT
Not After : Feb 1 16:00:08 2025 GMT
Subject: CN=40b3136f5ccd1776b54fd4803b3fe2849947b7ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:e4:3a:e9:95:a1:65:10:6c:d7:e4:46:c1:2d:
37:fb:cd:08:a3:f0:28:30:88:ea:00:50:97:6f:eb:
72:34:40:26:d2:3e:1d:70:1b:36:9e:be:34:ff:17:
48:e6:84:a7:08:a9:7a:55:69:a2:82:ea:75:7b:a8:
f2:2c:42:68:e4:b7:04:8e:3d:75:e6:22:af:82:71:
8f:08:69:27:36:2a:4c:a9:44:43:d5:4a:b7:78:a1:
aa:d1:2e:a1:6f:f2:49:71:9d:30:39:74:4d:84:ed:
3c:0e:cc:c3:4d:7a:9c:6f:cc:e8:0e:3c:b7:71:90:
45:58:09:a7:2e:3a:0f:6c:e5:66:fe:ee:b6:5d:ec:
14:8c:ea:99:c3:31:34:c4:e1:08:0b:56:8a:a4:1a:
45:f1:b8:10:56:1d:cd:43:0e:fb:fd:7f:db:0b:8c:
2b:35:a4:64:72:18:3e:df:91:cf:7b:7d:03:ff:97:
37:8d:10:15:27:6f:f5:b5:e6:7c:c3:bc:12:9c:70:
1c:50:f4:b5:b2:76:fa:9d:81:1e:87:b0:11:de:ea:
fa:7e:72:00:99:2f:37:2d:9a:b4:d9:90:06:54:6c:
f7:8f:2a:19:32:aa:8b:0c:59:c4:fb:03:c7:43:ea:
ad:dd:e8:b6:b5:08:20:8f:e6:8b:3e:05:d0:52:14:
d0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B3:13:6F:5C:CD:17:76:B5:4F:D4:80:3B:3F:E2:84:99:47:B7:EF
X509v3 Authority Key Identifier:
keyid:B5:5D:4E:63:17:C6:2A:1A:69:DA:C3:1F:4F:14:3E:3B:C2:80:BA:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tV1OYxfGKhpp2sMfTxQ-O8KAumI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/654f36-ac5a-4292-8140-534d78898d6b/1/tV1OYxfGKhpp2sMfTxQ-O8KAumI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:16:34:f7:88:86:c3:dc:ab:56:36:0e:be:df:f2:65:a7:d3:
4f:09:61:ef:50:3a:7b:b8:6c:22:4b:0c:5c:a5:ad:5c:97:07:
74:0e:49:ec:e6:6e:bc:32:bf:07:19:f4:aa:97:26:98:b1:ae:
24:d6:b7:31:93:b9:e8:bc:75:22:f3:ad:3d:15:89:33:2c:bc:
44:9e:b5:62:04:ea:47:0d:58:cf:ac:fd:85:90:eb:c2:fa:2d:
23:32:a8:5e:2f:8b:fc:a1:10:de:32:0c:a3:46:f3:95:bd:f0:
24:67:32:b3:a5:65:e5:51:19:72:d5:5a:68:b8:59:38:3f:e8:
ce:1e:0b:29:f5:36:00:c4:94:bd:41:ad:cc:64:56:4a:9e:2a:
a2:3d:d7:c1:88:fa:d6:b8:42:51:b9:0f:03:51:b8:53:5e:2d:
76:47:30:4e:86:3e:34:f4:b6:0c:33:c5:7a:46:2f:a6:ba:fa:
5c:b4:c2:38:6f:bb:ff:e0:56:e8:9b:fd:97:f8:bc:76:ea:77:
83:98:c1:b6:62:78:1a:58:ec:a0:d5:1e:ed:82:53:32:29:91:
e6:3b:99:ca:3d:87:17:db:e6:f5:f9:74:6c:8f:6f:f7:82:19:
45:46:98:56:7b:e0:79:c9:17:5d:ac:2b:64:0d:db:63:53:ca:
ff:80:b2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 09:09:52 2025 by rpki-client