Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft
File: tIENfJv8WLngoeWRacPdMi3p9zc.mft (raw, json)
Hash identifier: lmpAmHUW7YTVv9hPs3BlanEuT+gWgqKgAaLpLnxxeAY=
Subject key identifier: E2:9C:3B:62:5E:DE:F0:38:9C:50:DF:4B:57:1F:BD:6B:57:4E:C6:2F
Authority key identifier: B4:81:0D:7C:9B:FC:58:B9:E0:A1:E5:91:69:C3:DD:32:2D:E9:F7:37
Certificate issuer: /CN=b4810d7c9bfc58b9e0a1e59169c3dd322de9f737
Certificate serial: 0194BC3BC7482D431531C61C29D35E334D49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: jHERjwHQQByovrguIT9kNAenUlw.roa (hash: fC13Nqgu9Ca7tsn1KpGgJ5T6X5W9BeqrdrYm3SZE1Rs=)
2: tIENfJv8WLngoeWRacPdMi3p9zc.crl (hash: +YvDpr8Wf+ZXdBhjLH9MSNR94xzi8ip7k1xLwiKr7MA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c7:48:2d:43:15:31:c6:1c:29:d3:5e:33:4d:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4810d7c9bfc58b9e0a1e59169c3dd322de9f737
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=e29c3b625edef0389c50df4b571fbd6b574ec62f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:db:ac:58:19:14:b8:22:3c:db:1b:4d:38:67:
a6:83:36:4d:44:f9:b5:82:e3:3b:54:11:11:f3:fc:
1b:35:df:d1:fa:e8:a9:cd:d3:3f:fd:c7:ca:35:36:
c6:5e:0c:3d:ec:43:f7:11:9c:2d:9a:03:3f:e8:ef:
ad:a9:95:fc:16:40:eb:39:1c:ca:c1:be:bb:e1:1d:
8a:38:be:8f:25:83:9f:58:4e:20:93:90:30:ed:2c:
af:95:82:40:b9:32:62:bc:d5:53:fc:a3:ff:7f:65:
f7:56:64:99:95:f0:e0:74:c4:73:2b:3b:58:ac:3c:
67:45:12:c0:db:b8:65:d5:38:aa:a9:27:69:86:67:
e4:6f:5e:93:c4:44:26:28:77:f8:ee:01:24:7e:06:
5c:51:03:33:d0:b7:62:1c:f0:9b:07:5b:2d:08:c9:
ec:60:d6:51:6e:e6:be:e7:5f:65:05:01:46:18:65:
6b:79:76:38:7b:1a:47:ed:d9:0d:5a:1a:2d:04:01:
79:ff:db:db:48:13:5f:37:44:ed:32:54:37:fb:d4:
22:f1:6e:9d:2b:de:d8:2f:f2:83:dc:29:7a:a0:b3:
2c:42:9e:5b:79:8c:ed:89:ad:67:41:eb:30:d0:97:
7e:86:91:a0:a3:6f:2f:67:6a:f9:80:5a:05:73:4a:
a7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:9C:3B:62:5E:DE:F0:38:9C:50:DF:4B:57:1F:BD:6B:57:4E:C6:2F
X509v3 Authority Key Identifier:
keyid:B4:81:0D:7C:9B:FC:58:B9:E0:A1:E5:91:69:C3:DD:32:2D:E9:F7:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:af:fa:95:47:50:5b:83:2b:55:e1:12:8d:b8:5c:98:01:eb:
5b:d9:1a:a5:5c:7e:bb:5d:bf:8d:71:f7:9d:a1:ed:c7:30:0d:
85:d3:cf:e1:e8:e1:e6:cd:39:af:71:e0:0b:86:12:c4:11:3c:
d6:0e:b8:e5:0d:0d:ae:37:53:59:dd:e7:c1:b5:01:96:f4:06:
48:f5:62:77:ad:83:ba:3f:fe:be:5c:7c:99:e5:5f:83:91:89:
60:5b:0c:d7:57:c1:e1:7f:c4:80:db:ac:6b:e0:fc:aa:b9:bf:
52:0f:46:0e:28:fa:8a:fc:d5:5e:2e:8d:b2:e3:bc:0c:0b:ef:
8d:5d:95:a4:9f:ce:a6:9b:2c:d8:18:de:d0:6e:fc:7d:8e:d6:
76:02:4b:21:07:c0:11:0c:75:88:21:d3:33:cf:8a:b5:1d:d3:
9c:43:2e:77:fd:f5:82:e9:87:4d:1e:66:63:b0:b0:24:74:8a:
8d:15:f6:33:59:29:3c:9d:89:b3:5b:fc:f7:4a:23:25:12:e3:
8a:59:78:11:fd:73:44:c2:7b:94:d7:67:7b:b1:38:e8:4c:5a:
8f:72:b2:fd:cb:d5:ac:a8:64:10:5b:85:0a:71:e5:29:3d:28:
1d:6a:24:a6:ad:0b:a8:34:9e:bd:7a:50:80:38:02:5d:10:0c:
e4:54:05:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:42:31 2025 by rpki-client