Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
File: tK4oip3bDvUKKUs8rpY-FHycfck.mft (raw, json)
Hash identifier: 6WOsxE2PRwsGuT1SEMeSMdYZ1VmUZHgf3Jm1OurFW5g=
Subject key identifier: 73:41:6F:A8:FC:F7:3E:25:6A:9E:86:1E:68:31:7D:6F:22:34:48:CB
Authority key identifier: B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
Certificate issuer: /CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Certificate serial: 0194BCE0A46636D4D954E4D96ED3D7942154
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 15:00:26 +0000
Manifest this update: Fri 31 Jan 2025 15:00:26 +0000
Manifest next update: Sat 01 Feb 2025 15:00:26 +0000
Files and hashes: 1: tK4oip3bDvUKKUs8rpY-FHycfck.crl (hash: NvxDq62W1rwUhdsKYl2o1Xvk63vFn6R8OIXMp5Lsuu8=)
2: u16TB_X_VEL7--qGdSVXn8Zs3wY.roa (hash: m8sRTErDjjsLnDtgYn9w7y6plArnvxsTKmxxZwh54Fs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a4:66:36:d4:d9:54:e4:d9:6e:d3:d7:94:21:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4ae288a9ddb0ef50a294b3cae963e147c9c7dc9
Validity
Not Before: Jan 31 15:00:26 2025 GMT
Not After : Feb 1 15:00:26 2025 GMT
Subject: CN=73416fa8fcf73e256a9e861e68317d6f223448cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:23:be:0d:41:01:05:4d:13:f8:5e:2b:13:57:
0a:46:64:a5:04:0a:47:e0:aa:d3:60:d9:aa:5e:63:
9e:92:f9:8f:1e:4d:33:2d:f8:bf:f8:fb:bd:6e:0f:
61:b3:e7:8c:f9:a2:1f:d5:0c:13:24:ce:09:83:a0:
ad:98:2c:6c:c8:8b:ea:26:a9:de:7f:c6:56:a6:e6:
18:57:1a:43:58:73:3b:0b:f2:e4:90:fe:1c:1d:49:
d8:0e:51:d6:b1:01:e4:c0:47:1c:86:55:ad:2c:7d:
4b:ff:90:8f:e3:91:5a:8c:c7:bb:70:1c:0c:9d:5b:
76:69:c7:df:14:68:30:7d:62:9a:b3:fa:5b:f6:4e:
18:c1:c8:35:99:92:6e:84:02:69:b9:44:0c:21:8c:
2a:b0:43:28:62:85:97:cc:22:80:65:f3:af:5f:83:
2b:11:b1:c5:cf:a8:17:13:5e:71:2b:eb:a4:e3:7d:
91:08:d0:c7:0a:9a:31:6a:07:08:27:bd:4e:62:5b:
0d:b8:04:c4:22:69:b7:a7:c9:2d:5a:6f:3c:bb:53:
5f:c3:65:72:2d:01:fd:8b:b7:62:d2:e1:72:68:65:
eb:40:4e:38:a5:15:fe:1a:cf:d5:56:56:1f:ea:4d:
9b:de:f1:ba:b4:5f:ba:c4:41:7c:85:16:5a:88:88:
bd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:41:6F:A8:FC:F7:3E:25:6A:9E:86:1E:68:31:7D:6F:22:34:48:CB
X509v3 Authority Key Identifier:
keyid:B4:AE:28:8A:9D:DB:0E:F5:0A:29:4B:3C:AE:96:3E:14:7C:9C:7D:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tK4oip3bDvUKKUs8rpY-FHycfck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/457f2d-0137-4d61-8500-300426ce32e2/1/tK4oip3bDvUKKUs8rpY-FHycfck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:b6:56:f1:a5:45:56:08:20:a0:02:cd:61:f8:a5:9e:a6:28:
90:45:82:fb:92:25:42:88:34:b1:95:68:9c:02:9c:33:4b:ef:
68:82:bc:f0:59:30:e1:27:64:da:0f:52:c6:37:f6:12:6a:13:
d2:d6:aa:a7:ff:3a:50:87:fd:03:e2:3a:9b:e8:1f:ec:61:28:
29:e0:07:82:0b:2c:bf:d7:5f:64:44:11:ea:23:b6:f1:5e:4d:
3e:82:c0:fa:ec:ff:c2:25:e2:68:12:cd:92:3c:96:9e:cf:f5:
5e:17:65:93:1f:d3:72:09:17:a8:bb:65:5a:c6:db:0f:6e:ab:
ca:51:ad:bc:86:69:b5:21:b0:cc:f3:42:6f:df:ad:8c:2e:f6:
df:48:17:68:3a:d8:bd:72:f9:92:17:ab:ad:32:35:6d:1f:8b:
56:b1:b1:27:72:89:bb:9f:5f:a3:96:f0:5c:ab:dc:d6:c3:27:
da:57:69:2f:2d:28:e7:ef:4f:f1:ee:e2:69:f5:8b:e0:7f:ec:
13:cc:7d:9d:ed:5d:26:b5:c5:fe:5b:d7:ef:af:ef:9b:6b:8f:
4b:12:7e:6b:eb:d9:a2:61:b5:ce:b5:83:db:c5:3a:75:e7:7e:
03:bc:0a:83:2d:a3:03:03:a9:a9:50:c2:e8:40:8a:3e:72:35:
c2:1e:78:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:41 2025 by rpki-client