Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft
File: toF3Ytn8jxGwHPUjS25DHPvsG80.mft (raw, json)
Hash identifier: vm7E8k7xQ10T7F1CCO/OPN74UoOptWfr7FDvyJbaMUk=
Subject key identifier: 1C:FC:19:19:C4:6B:78:31:1A:DD:B1:D6:3F:E5:E5:B4:C6:B0:89:E1
Authority key identifier: B6:81:77:62:D9:FC:8F:11:B0:1C:F5:23:4B:6E:43:1C:FB:EC:1B:CD
Certificate issuer: /CN=b6817762d9fc8f11b01cf5234b6e431cfbec1bcd
Certificate serial: 0194BC053710810C1C11639357F7EDB64815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft
Manifest number: 078A
Signing time: Fri 31 Jan 2025 11:00:45 +0000
Manifest this update: Fri 31 Jan 2025 11:00:45 +0000
Manifest next update: Sat 01 Feb 2025 11:00:45 +0000
Files and hashes: 1: iFeMzfeEdL5eLiPhJVZH9fOR9os.roa (hash: Hluf44L3umjh9a1sEhuox24mM0+jKftFeuevrlqeW6M=)
2: toF3Ytn8jxGwHPUjS25DHPvsG80.crl (hash: IAQj0wLWIeH8wPE5wJInsaONNRU1xO2Z1CypKELSi/8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:37:10:81:0c:1c:11:63:93:57:f7:ed:b6:48:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6817762d9fc8f11b01cf5234b6e431cfbec1bcd
Validity
Not Before: Jan 31 11:00:45 2025 GMT
Not After : Feb 1 11:00:45 2025 GMT
Subject: CN=1cfc1919c46b78311addb1d63fe5e5b4c6b089e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3f:54:22:77:5f:a7:b4:e4:1f:63:58:93:bd:
de:5d:59:c8:12:e4:28:94:ea:5b:0a:07:1b:ae:c7:
c6:07:96:12:d2:89:41:7f:8e:47:f3:66:6e:17:b4:
83:62:4c:e9:56:57:47:09:cf:ec:02:73:81:70:ba:
ec:68:b4:24:c6:6e:02:1c:a8:78:83:39:98:e4:cb:
f9:52:60:9d:a2:42:5b:47:2b:90:9e:56:78:66:91:
c0:1f:d6:3f:ad:5b:ad:5d:1a:89:ad:7b:a9:5f:c4:
da:40:28:73:78:1f:69:ac:b1:a8:9b:eb:2b:3d:c4:
eb:6f:0b:b4:61:04:d5:aa:ee:03:02:91:d3:d6:78:
50:dd:f5:e7:1d:7f:ac:0d:79:17:a0:00:7b:1e:00:
7a:43:3f:85:d1:74:58:79:36:9d:09:b7:40:ca:af:
de:d7:00:ee:d1:a0:4d:c5:54:74:96:52:b7:50:1a:
d3:86:d0:cf:98:49:94:3b:07:3c:a3:ff:d7:cf:6f:
ea:41:88:5c:a1:93:f5:57:69:5e:cd:1c:e9:cf:bd:
9d:62:d5:de:aa:02:a3:a1:21:ff:65:8b:a1:51:d2:
36:ee:3f:97:c7:8a:bd:ae:c4:3b:fc:e9:74:df:f5:
da:d5:8e:92:f8:2d:73:73:32:a0:8c:7c:23:22:32:
05:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:FC:19:19:C4:6B:78:31:1A:DD:B1:D6:3F:E5:E5:B4:C6:B0:89:E1
X509v3 Authority Key Identifier:
keyid:B6:81:77:62:D9:FC:8F:11:B0:1C:F5:23:4B:6E:43:1C:FB:EC:1B:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/toF3Ytn8jxGwHPUjS25DHPvsG80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/1e63a3-b306-413a-adf4-d3f265ad514f/1/toF3Ytn8jxGwHPUjS25DHPvsG80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d2:64:63:9a:d5:8d:06:54:b9:bf:94:e9:23:10:e8:7a:1a:
b4:08:07:38:58:f6:21:6e:ee:4f:5a:c2:32:18:72:49:68:a5:
05:72:54:cd:ef:6a:a5:8e:87:31:06:77:51:c8:a4:17:fa:4f:
7e:17:de:0e:2a:1e:3c:7b:eb:50:a9:00:84:ba:b3:e1:69:6d:
7f:f5:5e:b4:d8:f4:e7:c0:77:9b:dd:3d:4e:71:98:9c:a8:a9:
1f:31:7b:ff:dd:79:12:56:63:6a:81:73:2f:51:09:ee:ce:d8:
33:2d:e5:19:dc:97:10:dc:cf:95:79:65:32:56:50:0d:08:53:
44:0b:36:11:1b:59:17:e2:62:50:bf:d5:83:ef:ef:c6:51:a4:
01:ae:8b:0a:e9:ad:cb:1d:a2:db:f7:17:05:eb:04:5f:bd:5e:
c4:f0:0e:a0:c4:1c:a5:3d:97:c7:f7:8f:35:0f:c6:34:cf:33:
e4:61:8a:1b:6c:7e:d4:2c:8e:a3:29:ba:df:43:f3:45:af:83:
5e:2a:ee:80:92:cc:de:6f:07:55:6c:42:64:55:73:72:cf:89:
e1:53:23:75:db:66:93:e0:a3:95:73:5b:b1:3a:68:fc:3a:7b:
c7:6d:de:dd:5b:b6:dd:e1:b5:43:25:fa:c6:85:7a:ac:1e:20:
b5:75:a5:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:49 2025 by rpki-client