
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
File: tp0ot9AoyruWhKgOFLqvFcpv0vY.mft (raw, json)
Hash identifier: 5syxVQc6jlEWXWGyolTBFrkbiXLGZBpQxcMHP+QX8pI=
Subject key identifier: B7:D1:0A:55:57:0B:F2:01:E4:58:28:83:01:64:1C:2E:87:C6:17:77
Authority key identifier: B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
Certificate issuer: /CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Certificate serial: 0194BD176186D087EE11F0F26F16BC46A258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 16:00:13 +0000
Manifest this update: Fri 31 Jan 2025 16:00:13 +0000
Manifest next update: Sat 01 Feb 2025 16:00:13 +0000
Files and hashes: 1: BWKFYtuMXyE_lLT4h0W6XfTBenI.roa (hash: fLpCOLgiuzK6uz2EqJr6SiyMyUYxX5Pc6xAMSALFqDM=)
2: tp0ot9AoyruWhKgOFLqvFcpv0vY.crl (hash: /i1RahbFPSZRkNQR6iSA/3C1M1AOW3Jmp/0fb5UFNWo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:61:86:d0:87:ee:11:f0:f2:6f:16:bc:46:a2:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b69d28b7d028cabb9684a80e14baaf15ca6fd2f6
Validity
Not Before: Jan 31 16:00:13 2025 GMT
Not After : Feb 1 16:00:13 2025 GMT
Subject: CN=b7d10a55570bf201e458288301641c2e87c61777
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:49:f6:89:d3:11:69:de:24:47:48:34:6d:16:
be:12:4c:76:d1:c4:fa:b3:25:ce:24:4a:50:de:fd:
cd:3a:e9:49:0c:c7:14:13:39:c2:8b:43:3d:46:ad:
0e:a3:06:d1:80:c7:d9:14:48:76:62:f2:a4:3d:cc:
ee:6e:ff:e0:db:1c:9f:28:12:06:66:27:c3:a5:d1:
f4:1a:b3:4a:13:01:06:b0:c6:c3:e8:43:18:90:6f:
b0:31:01:52:cb:51:11:f6:2e:b9:38:d8:a8:37:6c:
d0:60:3c:1c:30:8a:ef:d2:e8:aa:9b:b8:d9:5f:2d:
7e:5a:39:ea:1a:62:74:f9:66:12:bb:7b:e1:95:d7:
ea:b0:65:80:74:af:11:3f:e3:e1:f2:8d:fd:02:a0:
83:bf:d6:ae:69:db:0a:3f:eb:b3:b3:1e:43:09:bb:
9a:e5:d8:21:a8:be:fd:91:33:aa:1b:bc:1b:ac:1d:
ef:50:3a:73:d5:86:29:e2:2a:a3:83:2b:ac:e0:e6:
bb:e2:79:cb:e6:a6:e1:a1:62:99:70:01:a4:b9:e2:
4d:23:04:49:ed:0f:33:27:d0:b4:53:2e:d8:fa:20:
a0:b9:74:5c:2a:a8:fa:d0:87:16:d5:02:3e:44:f8:
83:3a:d4:9e:8a:7c:8e:44:72:c7:63:6a:a6:3d:39:
85:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:D1:0A:55:57:0B:F2:01:E4:58:28:83:01:64:1C:2E:87:C6:17:77
X509v3 Authority Key Identifier:
keyid:B6:9D:28:B7:D0:28:CA:BB:96:84:A8:0E:14:BA:AF:15:CA:6F:D2:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tp0ot9AoyruWhKgOFLqvFcpv0vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/b22c1e-ca4c-481e-91a2-5c93239e5e2e/1/tp0ot9AoyruWhKgOFLqvFcpv0vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:8c:b1:e5:72:a0:89:e5:ab:6a:9e:0e:0d:b5:72:72:6c:d2:
d8:6e:8d:48:d2:1a:23:9a:e0:fc:5e:49:e5:44:ce:a6:a2:bf:
45:d6:3d:e4:d3:c9:89:65:0d:6e:36:82:32:67:ee:75:87:59:
cf:e1:07:d0:2a:a5:13:1d:b9:e1:5a:95:66:27:da:37:fc:d1:
0e:d3:67:34:92:35:99:d1:02:bb:e8:c6:da:45:8b:c4:f4:ca:
7e:36:ae:7b:b8:34:cc:9b:cd:d2:c5:52:ff:65:ac:86:91:1e:
9e:b0:d2:cd:b7:48:06:72:67:48:e5:61:58:20:7a:cc:e1:b1:
6f:a8:47:c7:1a:fb:30:96:ea:c6:c4:67:80:55:fa:70:17:43:
5b:30:ee:79:0e:20:2e:64:fd:05:d4:a0:05:0d:c7:c4:bb:67:
ab:d0:3e:05:85:d7:56:3f:0c:17:71:d7:76:3d:49:b2:a3:40:
f5:9f:89:90:5c:68:a6:48:5d:a7:2f:75:cf:04:df:90:a1:34:
7b:c1:c1:21:93:f5:b1:97:ea:ec:2d:79:72:bc:52:a6:1c:c2:
a9:50:1a:50:30:9b:6a:df:3f:7e:67:d6:dc:d9:59:d6:3a:d3:
01:fd:c2:26:d4:33:0c:09:d4:a3:d6:e0:4e:91:07:29:23:aa:
09:91:8e:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:54:39 2025 by rpki-client