Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: Vfc2W4MuMwwGsqWWc87QLVjFWAa5m/lJLfICi0Angu8=
Subject key identifier: A7:F4:92:9F:F5:BC:81:75:55:40:00:C2:5F:B4:52:05:71:D4:D6:3C
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 0194BCE0A24AB7D200CF2EDC5BAE707A3412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 1432
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: F0xtYGfQ_s_LJkUkk89IHcL9J5M.roa (hash: JVjlGGRIJlPuTdOW/N8SfdRvr3fAH3HHybxJ5aP4RD0=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: IkA0MNef+8NBh40UsFprvyvtl5SWuJgbmGx8AJbbYsg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a2:4a:b7:d2:00:cf:2e:dc:5b:ae:70:7a:34:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=a7f4929ff5bc8175554000c25fb4520571d4d63c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c4:d9:55:90:c2:3c:bc:33:5e:bb:84:99:fc:
be:9a:72:48:f5:92:9e:de:a3:4a:b7:3d:50:00:c5:
46:be:93:97:31:69:5f:fe:9b:de:a5:ff:68:31:82:
9a:09:79:0e:9b:33:3d:a1:73:18:2e:b2:16:5e:14:
0e:8f:0a:24:0a:86:16:2c:2c:8a:fe:49:f7:73:83:
de:66:70:d7:d9:e2:b8:65:8a:37:78:46:85:41:7e:
6c:4b:d7:5a:24:14:6e:9e:1b:5d:e4:74:4e:83:fe:
7e:c5:78:5a:4f:3d:49:92:c9:5d:c3:60:3c:6d:f9:
ef:4b:1a:bd:7b:bb:19:4a:cd:f6:bd:c5:d5:c7:cf:
6f:70:7f:48:b6:c6:92:a8:75:85:77:d3:16:3c:43:
02:c6:8c:07:4f:60:d4:c4:e9:73:68:b0:65:2d:e3:
68:4d:e2:89:3e:7e:f2:ba:e8:c1:db:fc:6c:d5:be:
28:95:f1:21:f4:a9:9d:90:e4:b0:5e:a4:59:da:6b:
da:e8:a6:b7:ff:af:d0:cf:19:2e:3d:71:3b:15:7c:
4e:c8:4c:ca:41:9d:9c:68:5c:b3:bf:fa:ab:d4:f2:
c4:4a:74:81:f8:28:68:b1:df:57:fc:df:82:be:02:
59:ec:de:ba:f5:3f:70:b3:d3:40:74:3d:b5:ab:fc:
43:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:F4:92:9F:F5:BC:81:75:55:40:00:C2:5F:B4:52:05:71:D4:D6:3C
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:eb:40:20:08:8c:7d:e6:e7:89:7d:12:2f:bb:b3:e8:e3:ce:
19:18:a0:65:f3:76:56:c1:09:35:ff:2b:d6:51:85:17:8a:9d:
a2:1b:fa:2e:fa:30:a6:05:d9:83:97:4e:a2:0a:2c:fd:dd:eb:
d7:ef:05:12:32:42:e2:16:a6:0b:a0:d4:7a:11:a3:4f:0b:08:
d6:f6:dc:55:24:aa:42:bd:84:57:56:35:10:23:27:bb:0c:61:
02:78:18:17:5a:9f:d1:e1:bc:76:66:3b:8e:c9:aa:28:ef:5a:
e0:aa:4f:16:fb:20:90:88:a3:73:68:09:9c:0c:25:1e:4a:f0:
81:1d:d4:03:ad:19:ec:28:48:f7:f6:b9:e4:2c:b8:73:48:af:
43:6d:8b:0d:e9:63:d5:cf:74:b1:a4:5d:24:2a:28:2f:a0:a5:
1a:48:a7:ae:20:4b:9e:b2:32:e2:ef:48:a6:f2:8b:0e:bf:e4:
c7:2a:3c:b9:5e:62:7d:7a:e9:b6:3b:54:ef:ac:0a:1b:66:d9:
06:76:a6:c9:cb:2b:56:fd:b3:78:e0:60:73:fe:9c:b5:1c:07:
0c:3c:54:a1:ed:22:d2:dc:2e:b5:6b:92:02:76:4f:f7:b4:1f:
dc:31:e5:08:92:5b:e6:38:05:03:fc:23:b0:77:4c:ce:64:5a:
38:b9:6d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:37:49 2025 by rpki-client