Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
File: tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft (raw, json)
Hash identifier: 9wytZBEuLeaXh0kPMR1clRBRvb2JJrjhpDTdPrQoIXY=
Subject key identifier: 3C:13:88:6C:EC:6B:B0:68:6E:F9:94:A4:D9:FC:03:EE:62:8F:52:00
Authority key identifier: B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
Certificate issuer: /CN=b4430ba11506741d676ea202e291ec7ec6191b17
Certificate serial: 0194BCE0766C354028ACC0A55E261A58D706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 15:00:14 +0000
Manifest this update: Fri 31 Jan 2025 15:00:14 +0000
Manifest next update: Sat 01 Feb 2025 15:00:14 +0000
Files and hashes: 1: Ar5ixINRYv4h1JY24F8pTYnNdfU.roa (hash: cerPS0rrVRA1DCH9YtBUW4yHi1b4My2ifCj92CGheoI=)
2: tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl (hash: Da0nOpkEUCExZYSZd+9HOpmvwmGMmRocXjkAqG2P/IY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:76:6c:35:40:28:ac:c0:a5:5e:26:1a:58:d7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4430ba11506741d676ea202e291ec7ec6191b17
Validity
Not Before: Jan 31 15:00:14 2025 GMT
Not After : Feb 1 15:00:14 2025 GMT
Subject: CN=3c13886cec6bb0686ef994a4d9fc03ee628f5200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:28:37:f0:0c:58:6a:a2:c5:d1:98:e5:1e:fd:
10:13:7d:f3:4e:ed:31:6a:d1:f5:3a:70:12:55:36:
06:15:87:13:b7:f8:3d:25:71:6d:7c:11:16:90:ee:
2e:c3:04:b6:1b:78:eb:0d:59:f6:db:cc:5d:6d:7e:
c1:de:02:d8:2d:c4:b3:17:9b:73:f0:86:24:e9:20:
87:2e:b7:7b:75:00:25:80:cb:82:8f:d9:e2:75:b9:
84:99:2d:6e:14:fd:10:b8:ec:fd:07:a8:a3:8f:9d:
e3:b4:74:c7:22:58:20:a4:ad:3b:0f:14:d5:32:64:
cf:f2:1f:f0:69:aa:0f:2c:b9:9d:25:b4:49:b4:fc:
da:9e:2d:48:78:56:67:d7:0c:b6:fb:4c:46:a4:cf:
87:d9:07:d0:be:cc:82:94:20:cb:b2:1c:8f:d6:a4:
33:1e:bd:51:44:0f:c9:de:f7:0c:ce:0b:f4:21:04:
a9:6f:78:13:d7:6e:40:0c:54:44:88:c6:ce:62:7e:
6b:67:f6:10:69:54:08:b8:e3:03:ae:91:a4:de:ae:
b0:3b:5a:74:e0:66:01:27:86:9e:4e:2b:3b:1c:58:
08:93:c6:7f:5e:c7:77:90:b2:b1:19:e7:47:51:26:
bb:f4:93:ca:53:52:bd:57:b7:fb:39:68:66:fb:fc:
72:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:13:88:6C:EC:6B:B0:68:6E:F9:94:A4:D9:FC:03:EE:62:8F:52:00
X509v3 Authority Key Identifier:
keyid:B4:43:0B:A1:15:06:74:1D:67:6E:A2:02:E2:91:EC:7E:C6:19:1B:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEMLoRUGdB1nbqIC4pHsfsYZGxc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/60ccfa-0930-46b4-8317-f8ca9cb63317/1/tEMLoRUGdB1nbqIC4pHsfsYZGxc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:95:26:ec:59:85:5c:0f:88:74:6e:0e:3f:f2:ea:71:e2:5d:
bf:80:c5:ab:ea:96:38:9a:4a:88:a5:4b:34:8f:9b:5d:a8:17:
d1:4a:64:c2:f2:ca:86:5d:1e:63:72:19:da:75:55:fe:62:ca:
a0:1e:5f:4f:d8:bc:ee:ad:a1:a6:c2:98:05:66:46:34:58:2b:
37:3b:eb:1c:f9:2e:3d:1d:cc:7c:36:d7:50:5d:1b:e2:6f:ab:
f7:db:34:45:c6:d8:b7:16:4f:f0:68:05:4f:2e:ac:64:a3:4e:
04:ba:6a:f8:a7:1b:a0:9e:31:aa:d1:30:01:01:d9:8d:18:20:
52:b9:e1:55:66:78:e0:81:68:91:16:1b:8c:59:22:20:e7:bc:
a3:ae:b1:f8:e3:0d:e7:25:36:ba:6d:94:56:fe:21:a0:2d:01:
38:53:66:4f:c6:5e:05:e5:f1:47:d8:c5:d5:26:df:d1:16:dc:
18:2a:5f:d3:fb:f5:e7:57:54:c6:f8:4a:dd:d5:43:7b:ce:8a:
2c:98:b0:6f:d3:35:de:66:26:cb:d6:04:8d:6d:4f:41:0e:27:
7c:a4:a7:7a:de:2c:4c:e6:f1:6e:90:51:34:56:a9:f8:36:0a:
a4:b9:79:f7:ed:44:39:6a:dc:27:c2:17:52:6c:86:b3:70:b1:
9f:06:10:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:59:11 2025 by rpki-client