Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
File: tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft (raw, json)
Hash identifier: NayC4zUIkizmG/iYzYkCWO+lQ1sjE0sXrdsX0F09T4w=
Subject key identifier: 3B:3C:E4:73:9F:4A:EC:BB:F2:4E:A9:9B:08:66:47:23:E7:23:B3:9B
Authority key identifier: B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
Certificate issuer: /CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Certificate serial: 0194BC3C50F82A0E5E3B164CEBAF6F21DC62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
Manifest number: 142C
Signing time: Fri 31 Jan 2025 12:00:56 +0000
Manifest this update: Fri 31 Jan 2025 12:00:56 +0000
Manifest next update: Sat 01 Feb 2025 12:00:56 +0000
Files and hashes: 1: HeDUncvNrC9DXvqHmX3LCuEEQFk.roa (hash: pkL8awVC+vif3Sv8BEo/gQroGPTBLCBBOJrEXIA/gLU=)
2: tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl (hash: esWzhxweunJMrTU/ReswFzTSAomdGehdlo7RUKyfv9Y=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:50:f8:2a:0e:5e:3b:16:4c:eb:af:6f:21:dc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4fa4d081b36887f3e5ca6537f7469eee21d71ae
Validity
Not Before: Jan 31 12:00:56 2025 GMT
Not After : Feb 1 12:00:56 2025 GMT
Subject: CN=3b3ce4739f4aecbbf24ea99b08664723e723b39b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:25:33:c7:28:40:5b:74:27:a9:56:87:34:35:
63:b4:1e:76:f5:34:fd:4e:88:e4:dc:b0:49:92:a7:
8a:60:c8:66:5c:0b:a8:55:a2:a4:19:75:7c:65:2d:
be:7d:c4:8c:af:4c:06:e8:86:10:7d:b5:64:be:ff:
3e:17:d6:79:30:d5:5e:93:01:76:c2:ca:b8:9b:fd:
88:74:44:d2:8a:7b:30:dc:42:c2:6f:a2:ef:6c:fb:
3c:89:ec:e8:4c:9b:03:20:4d:79:55:8c:22:59:28:
b5:49:0e:f4:8e:a0:98:8d:4c:de:dd:50:36:08:e6:
b8:0d:94:d4:51:bf:9d:90:fe:65:0d:b4:d8:f9:54:
fd:2a:14:41:fd:b6:1a:c8:8b:b7:b6:ad:44:c0:e9:
96:fb:3f:88:05:f3:18:03:45:83:f8:29:1a:ca:81:
fb:d4:ea:1e:b2:bf:98:7b:2e:ee:c4:a0:7f:58:8c:
06:f2:95:1b:a3:d4:9f:4f:ca:b7:05:22:7d:a4:3e:
05:eb:ab:a8:91:84:ce:47:cf:9d:0b:2b:c2:ac:0b:
81:b4:36:3f:a4:46:c7:5b:4f:81:61:e7:10:e2:5b:
06:c4:62:5d:68:7d:1c:64:88:fe:f4:be:3f:99:2e:
21:6f:ba:6f:b9:1b:4b:7a:19:b9:9b:6f:94:2d:56:
d1:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3C:E4:73:9F:4A:EC:BB:F2:4E:A9:9B:08:66:47:23:E7:23:B3:9B
X509v3 Authority Key Identifier:
keyid:B4:FA:4D:08:1B:36:88:7F:3E:5C:A6:53:7F:74:69:EE:E2:1D:71:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPpNCBs2iH8-XKZTf3Rp7uIdca4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/0cfe3e-729f-4418-9cf4-863daecfc2e8/1/tPpNCBs2iH8-XKZTf3Rp7uIdca4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:92:f3:f1:38:1f:81:37:fc:f4:be:bc:f4:b5:9c:c1:99:de:
5f:df:54:16:ca:80:69:b4:a6:c5:46:77:d0:0d:bc:e9:f3:15:
c2:5c:25:8b:c3:1d:9c:e3:26:ac:49:31:c4:ff:d4:11:87:d5:
e9:b5:82:b4:a6:40:35:92:6c:ac:7c:e0:31:07:82:69:7a:e0:
bb:88:eb:ac:27:1d:bc:fc:83:f4:eb:9f:09:e1:93:61:61:ae:
90:30:53:66:a9:3d:52:a9:41:57:00:8e:ef:ea:3e:3d:37:45:
fb:17:5b:c8:c7:6d:21:2a:dd:22:7a:1f:72:a8:d8:89:30:36:
c3:88:60:0a:f4:46:5a:15:81:38:b1:83:79:2e:5d:a3:c9:eb:
c6:93:8c:ab:76:ef:91:6e:6d:de:3d:be:e8:df:b6:02:a8:bf:
d4:79:70:2d:cf:7b:80:63:94:de:1a:cc:2c:63:03:67:c7:58:
f8:f5:04:53:eb:25:dd:52:a8:dd:d9:1d:b7:01:14:b6:48:0f:
ec:62:dd:2d:a7:78:4e:d8:59:9d:5c:8f:94:76:6d:71:12:b9:
cf:b6:4a:fd:80:c7:94:fd:65:68:49:ff:ec:72:80:bf:ff:bf:
f5:78:38:99:cb:e4:81:a5:b6:e2:67:2e:70:68:2f:d1:ee:fb:
91:aa:cc:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:59:06 2025 by rpki-client