Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
File: tKIIXH3jtZgha4n7Dysdkw3mbBk.mft (raw, json)
Hash identifier: 92bT83QX+7x4tjJYRO2FAbAHPelYSWXnjMKi7UiMKqw=
Subject key identifier: AE:76:89:C5:4C:8D:77:3D:2E:66:42:04:ED:93:07:54:9D:A0:82:F2
Authority key identifier: B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
Certificate issuer: /CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Certificate serial: 0194BD4EABB83BBE387C5CF7EDAE2BB3505C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
Manifest number: 13FF
Signing time: Fri 31 Jan 2025 17:00:36 +0000
Manifest this update: Fri 31 Jan 2025 17:00:36 +0000
Manifest next update: Sat 01 Feb 2025 17:00:36 +0000
Files and hashes: 1: Bm5UACtbnF-zdFYjA8vPOBqvgzc.roa (hash: TLMH3v0yPGvBQf4sp02A0ciC7nkIzxuyV+cC5oHQvcg=)
2: KygTuxQFGUD5ATwC-VI56P0_KW8.roa (hash: +kPqhnKnrFZGjWfktqCyP4orZXjdv9+6M6sRVLgaUrA=)
3: g5Uoag6M4vCu7dJYWVycSYm4rUU.roa (hash: Ngolk11LXJPCpKR9MzzdDkX8Nba8dwgngUE2uQJceUA=)
4: kH7H7auuv6q7VTDiT7be_vcY-1Q.roa (hash: M4+McdjIhgE1/SI8bKbvFu1HsdzjwaQszRqVGjqa+wM=)
5: tKIIXH3jtZgha4n7Dysdkw3mbBk.crl (hash: HEKKid9i1a+v3xnrUihJETP9nbsvssvvBKrU6H5x21k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:ab:b8:3b:be:38:7c:5c:f7:ed:ae:2b:b3:50:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4a2085c7de3b598216b89fb0f2b1d930de66c19
Validity
Not Before: Jan 31 17:00:36 2025 GMT
Not After : Feb 1 17:00:36 2025 GMT
Subject: CN=ae7689c54c8d773d2e664204ed9307549da082f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2d:9a:03:6c:39:b7:9c:fe:6f:b8:2f:9a:15:
ad:2f:a3:e1:b4:29:8f:df:ae:25:93:dd:9e:c6:0c:
7f:5a:c2:b9:32:c6:5b:28:56:9d:d2:36:c2:c9:cb:
6c:34:00:65:f0:e0:de:22:ba:b0:e5:d1:34:a0:1a:
d8:1c:92:8b:17:60:d9:d1:b8:07:78:29:9d:f2:ef:
ba:a5:b4:63:d7:04:ee:5c:4e:3d:38:46:bd:76:cf:
33:a6:17:61:df:e4:4e:1e:1b:55:18:57:7b:d0:cc:
96:d2:f9:fe:be:67:e0:37:3b:28:66:ba:fe:f1:fd:
ec:41:c2:da:a3:bb:59:dc:07:7a:7d:e9:93:34:30:
4f:15:95:92:02:61:96:8f:68:29:5d:82:d4:44:74:
5c:ee:66:20:92:f7:c3:f3:11:c6:e7:98:bc:26:ac:
98:56:8c:23:51:21:c9:e9:2c:69:54:1b:ea:35:50:
49:22:ec:98:04:42:2f:c5:bd:1c:c1:5d:ea:a3:96:
96:26:3a:24:d9:c9:67:f0:14:d7:c7:0f:52:09:c4:
97:49:2c:f6:71:21:af:47:94:34:18:12:c7:cb:0a:
03:e9:bf:af:82:d7:8b:6b:f0:69:b0:69:63:fd:4b:
da:41:46:8d:cd:16:52:0e:b3:90:e1:bd:b6:62:00:
73:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:76:89:C5:4C:8D:77:3D:2E:66:42:04:ED:93:07:54:9D:A0:82:F2
X509v3 Authority Key Identifier:
keyid:B4:A2:08:5C:7D:E3:B5:98:21:6B:89:FB:0F:2B:1D:93:0D:E6:6C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tKIIXH3jtZgha4n7Dysdkw3mbBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d6513d-2d53-4022-8360-3117989601ad/1/tKIIXH3jtZgha4n7Dysdkw3mbBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a8:e4:08:28:73:f8:7f:59:43:e9:7f:5e:66:0b:b1:40:1c:
2a:14:18:17:18:54:c7:5b:ee:67:b3:c7:74:22:6f:01:42:e8:
96:69:9e:2b:3e:2d:46:69:90:62:d7:7f:8a:93:71:eb:05:d4:
9d:15:24:1f:68:38:ec:cf:3d:c5:05:cc:6a:01:79:ce:22:de:
d4:88:66:94:f5:49:08:0e:5d:32:4d:f0:c4:cb:00:55:37:ad:
dc:23:bd:c6:b7:ba:eb:15:2a:b1:24:d9:ad:37:16:81:d9:41:
e1:04:34:82:e7:0f:64:91:05:ec:3c:28:ed:76:6e:bc:d8:f1:
06:89:48:b3:eb:69:35:a5:e6:74:8a:ec:8e:0e:22:cf:45:86:
d5:2e:3c:eb:75:2b:ab:f9:9f:3c:0f:68:00:df:2f:2c:83:ee:
86:41:d1:db:ac:63:f0:23:d6:fc:73:1e:ef:89:c0:08:53:fe:
d6:bd:ed:4c:de:7a:29:6b:91:cd:f3:e6:a2:70:81:22:a6:c4:
61:9a:da:c2:b2:d5:89:8c:4e:19:b2:96:07:87:73:9a:04:c8:
64:14:36:97:54:24:8a:23:85:5a:11:ea:22:56:b8:c2:2a:1b:
30:b2:d6:5d:21:34:b4:80:8a:86:04:04:9f:95:88:0b:e3:a3:
ba:1d:02:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:35 2025 by rpki-client