Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
File: t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft (raw, json)
Hash identifier: PF0H0nHuNss0oGaIvarA9R4+4FGGrMAcACGQkjrKZMA=
Subject key identifier: 64:F2:EA:15:87:B2:B1:F9:73:4E:3A:83:2C:19:25:20:2E:BD:A2:9D
Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Certificate serial: 0194BCE0DA0502E6DCE10930D09D103455F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: 4tvYqBz30c-0SHwQf2CtT0VNBPQ.roa (hash: qCyQEU6OdMbxdWiqsxkcJvwc0b3lfRGI0KL0oWxXAXQ=)
2: 5BiiR8tyxMqnVkrCR-JVCe5thJE.roa (hash: Hg2Lr4BrUeLiGXPiTTswxDVsunI16iUbiaP/wD6FGp4=)
3: t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl (hash: jCuETLV52FU0UVVQd9gggPNUsvOFYlZrT5YZYfDk/Is=)
4: zmgQ_aWhp6cEGx4y0seWn4Gsss4.roa (hash: /bqbphYKFU51MVxXzZqrdhuQ80/Caxadp1A0xOJ6vp0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:da:05:02:e6:dc:e1:09:30:d0:9d:10:34:55:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=64f2ea1587b2b1f9734e3a832c1925202ebda29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:cf:ab:3b:3e:e6:5b:98:d5:a3:61:93:45:41:
ef:8a:9f:2f:5c:db:e7:c9:98:65:f0:b6:06:15:ee:
98:f5:3c:38:73:82:75:65:f5:9d:5f:84:dc:dc:32:
29:be:b8:9c:42:97:ee:57:4d:6f:65:be:32:2e:4b:
59:0f:bb:4c:eb:80:f3:7f:ed:a4:7b:30:9f:39:0d:
05:28:30:12:b6:76:e1:8a:9d:e0:03:8c:bf:08:8b:
5f:66:1c:8c:2d:18:42:66:eb:c0:cd:f9:0b:ec:1d:
00:64:0c:09:59:02:1d:76:fe:19:d0:99:92:ba:49:
d8:58:14:97:d7:f4:4f:ff:4c:cf:81:e1:ed:49:d2:
21:05:d4:c6:c7:1a:31:01:7b:81:b3:e1:5c:6a:2a:
ed:57:10:0d:a3:28:c8:eb:34:7f:31:c7:33:05:42:
fb:65:39:d9:c3:2b:60:07:68:10:87:bf:76:0a:72:
1d:65:e5:c4:e2:d5:ac:f4:a2:89:f5:8c:83:bf:d4:
c2:56:d5:41:da:25:69:4d:9e:bc:d7:bb:ea:82:6e:
77:f4:d7:31:9e:e7:66:a2:cc:00:f7:91:5e:ac:b1:
b1:09:f7:59:62:0b:87:26:ea:5d:e7:60:5c:f9:8c:
ff:ad:8b:88:ea:68:30:0a:c8:36:09:30:e3:42:c3:
d0:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F2:EA:15:87:B2:B1:F9:73:4E:3A:83:2C:19:25:20:2E:BD:A2:9D
X509v3 Authority Key Identifier:
keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:aa:d9:37:c4:fd:2d:8e:30:8d:98:b3:ad:06:2f:cf:7e:a2:
81:03:fc:1e:41:65:2e:d3:b9:cd:5b:0f:2c:ba:17:33:dd:0c:
9d:03:97:19:dd:c1:e2:a1:54:fb:ab:e7:08:b0:97:1f:6b:bf:
14:0a:9b:0b:a0:36:48:c7:31:63:8e:2b:8b:68:af:13:8e:52:
a8:5c:a5:37:dc:17:0a:db:17:50:8a:9c:e1:22:a4:31:9f:38:
ab:5b:64:7b:64:8d:51:b1:42:06:47:31:26:9a:da:85:df:18:
69:6f:4a:4e:18:07:96:15:92:e0:8c:67:49:94:73:9c:a4:f0:
e8:0f:ea:6a:f4:f6:4f:bf:3d:76:41:4f:37:cb:f6:a7:be:96:
cc:b5:f9:17:cb:17:0a:d1:80:b1:40:cf:ec:30:3f:22:fa:87:
65:3d:10:5c:55:50:9e:a0:5e:cb:01:a5:60:a9:4d:0e:6b:67:
f6:21:15:8d:c2:93:0a:53:a1:2f:4a:47:c6:73:86:31:de:2f:
46:f2:cd:ee:48:d3:e5:fe:42:2c:6d:5d:80:0c:82:d4:30:f9:
0b:64:6d:3d:0f:1e:53:ea:13:89:73:7f:92:f0:d6:42:87:f1:
1d:9c:1a:ff:e5:b6:b3:da:2e:b1:ca:b4:e2:f7:ca:5c:a6:d2:
e6:a4:6c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:46:48 2025 by rpki-client