
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
File: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft (raw, json)
Hash identifier: dciuWNerdQu2x+Q9Y7Lu+hw0uiHPhvWArDcRVuLNDmo=
Subject key identifier: 36:CC:81:49:41:09:62:A0:C6:80:8A:78:6A:2A:4F:DB:E7:00:A3:ED
Authority key identifier: B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
Certificate issuer: /CN=b4f115424c181c67966ccc2467ede69d060ccf53
Certificate serial: 0194BD17C48434676108BE2973EA45BD42C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
Manifest number: 1192
Signing time: Fri 31 Jan 2025 16:00:38 +0000
Manifest this update: Fri 31 Jan 2025 16:00:38 +0000
Manifest next update: Sat 01 Feb 2025 16:00:38 +0000
Files and hashes: 1: bqp6f9GjY5TF5wTxOeK8Ji-YrkE.roa (hash: b7SVmPCcwJQed2khWFQ0sTeZykPXeoqQG4LQy2NRwCA=)
2: tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl (hash: +2kupjjcghhBBvppAzENYMptrS1xzsu6OYkoNieSwGw=)
3: xktUIB6GDLW-h2_LFZTy4dam33Y.roa (hash: BgrfS/HN5mPWhSmcXKgkikTloXU/AxYtLSZ8SaD1EM0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:c4:84:34:67:61:08:be:29:73:ea:45:bd:42:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f115424c181c67966ccc2467ede69d060ccf53
Validity
Not Before: Jan 31 16:00:38 2025 GMT
Not After : Feb 1 16:00:38 2025 GMT
Subject: CN=36cc8149410962a0c6808a786a2a4fdbe700a3ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e9:d3:de:25:c9:a9:9c:62:e9:6e:c0:98:29:
ed:a4:9d:90:d7:0e:a1:8e:1e:8e:a4:00:b8:68:ac:
27:fc:5b:72:95:23:7a:d9:32:96:5d:d9:18:a1:0e:
e4:d9:d2:5a:0b:3d:fa:58:00:21:64:61:96:97:08:
78:3c:da:91:88:6e:b2:77:e4:b9:d0:25:6d:ee:95:
1c:94:be:e0:23:3f:f6:14:e1:8d:7a:2e:42:0e:d0:
b5:dd:20:49:b8:dc:30:ac:3f:18:2a:b3:d9:c8:57:
00:bf:98:c0:cf:83:b5:6c:25:be:6e:65:70:e8:cc:
dc:54:b0:7f:83:fd:4d:17:15:ba:06:08:ec:a3:fd:
a1:a6:ce:4f:50:82:f8:04:22:ac:4d:05:27:84:8c:
d6:60:f2:8d:e3:79:e7:bd:24:3c:2f:cc:d3:8a:24:
dc:11:7b:2d:60:a7:22:76:51:03:d7:8a:d0:d5:64:
86:4b:dd:2b:7a:6f:b8:23:dd:37:f5:09:1e:19:eb:
d9:c0:a7:51:d3:ad:24:66:88:24:c0:7b:0b:fe:62:
7e:67:3d:38:90:21:4c:c6:7c:d6:1d:e8:aa:c5:72:
d9:25:0d:4e:0d:28:f0:11:c5:c6:ad:58:73:c0:a9:
b5:41:01:bf:41:2b:c2:96:96:61:61:a9:37:03:be:
7a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:CC:81:49:41:09:62:A0:C6:80:8A:78:6A:2A:4F:DB:E7:00:A3:ED
X509v3 Authority Key Identifier:
keyid:B4:F1:15:42:4C:18:1C:67:96:6C:CC:24:67:ED:E6:9D:06:0C:CF:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/869214-16d4-45e0-b87e-32e932d6fd0e/1/tPEVQkwYHGeWbMwkZ-3mnQYMz1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:77:1f:c5:46:4d:00:67:b4:36:63:c9:5b:40:d9:72:5c:76:
35:ea:c1:da:5b:4b:5e:26:81:1a:f9:1e:5b:83:73:3d:72:c8:
c5:23:c2:3d:1f:fb:23:dd:23:6a:f2:ed:0e:eb:fc:75:f2:ea:
d7:c5:47:21:ad:93:2c:b9:ef:85:9a:50:e1:c4:d6:7d:97:04:
28:a1:ea:be:0d:a8:24:cb:e7:85:f3:23:03:ed:b1:a1:27:b4:
95:76:2f:ae:c0:a8:4f:d1:79:5d:7d:7a:88:19:93:e1:33:b0:
3f:05:b5:1e:85:11:14:4d:fc:15:91:78:e4:f8:2a:17:bd:48:
23:2d:74:db:25:9a:51:1f:5e:69:9b:32:9b:a1:d1:55:f1:09:
3d:24:6f:f5:61:a7:09:f4:17:e0:47:b8:50:2a:97:84:7e:2f:
f9:78:8c:05:8d:8d:22:24:e9:a7:ed:e1:3b:38:11:f1:c3:16:
02:75:39:d7:c5:c7:df:09:50:c5:29:2e:96:ac:3f:b5:a2:0e:
c4:4d:06:ef:ac:e0:7a:32:9f:06:bd:f4:8f:c2:93:65:e0:9b:
e3:ed:bc:9d:e6:f2:91:08:b1:9c:ac:b6:6a:68:bd:6c:06:32:
94:70:dc:f4:a2:a9:92:21:18:49:c9:9d:37:80:f9:0b:c6:fd:
8c:2a:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:57:50 2025 by rpki-client