Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
File: tTcRWWHGq_W4er5KIAU-SsobbsI.mft (raw, json)
Hash identifier: mIjsN4QpKyqMJEn9nGXPVvbs2rBzaM7W28pGJ0PyI/w=
Subject key identifier: A9:7D:CA:1A:B4:27:68:B7:D3:C9:2D:F5:2C:43:CD:A7:94:0F:76:E4
Authority key identifier: B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2
Certificate issuer: /CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
Certificate serial: 0194BC7309D442B379C3D915A288D65B276A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 13:00:43 +0000
Manifest this update: Fri 31 Jan 2025 13:00:43 +0000
Manifest next update: Sat 01 Feb 2025 13:00:43 +0000
Files and hashes: 1: tTcRWWHGq_W4er5KIAU-SsobbsI.crl (hash: drRYHNCkT+lSLylFY7zoXbDpdARd5LXvvit1LNWcQPs=)
2: yv-lKnLJ7FH3ebM94G5o9mRIoI0.roa (hash: NaXQYxgPfjl+IpTUFv/7Iibu/QutlXyZxHu9Cx6Aoy0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:73:09:d4:42:b3:79:c3:d9:15:a2:88:d6:5b:27:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b537115961c6abf5b87abe4a20053e4aca1b6ec2
Validity
Not Before: Jan 31 13:00:43 2025 GMT
Not After : Feb 1 13:00:43 2025 GMT
Subject: CN=a97dca1ab42768b7d3c92df52c43cda7940f76e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:4e:d8:77:cb:cc:6c:d3:ad:3f:ff:25:1c:46:
ff:cb:9f:3b:a8:6b:9d:12:5d:16:fe:f4:ae:62:2e:
c7:e6:46:08:50:1d:4c:9c:3c:b1:09:02:9a:83:54:
c2:12:dd:e9:a9:38:d8:71:e2:52:38:ae:bb:19:88:
c9:6f:4d:fa:55:9e:4d:03:b5:02:73:5f:1c:d2:2f:
0d:16:3d:bf:99:9a:99:cb:68:0d:4e:4d:5a:8a:2f:
66:3f:21:ef:12:04:63:ab:e5:95:69:03:3a:bf:09:
1a:73:fa:41:6c:36:e9:b4:c3:c6:06:ae:14:fd:a5:
29:7a:5e:f8:a1:24:34:cc:22:fa:8c:94:4c:3a:ec:
6f:0e:4e:c7:5e:cd:86:8a:90:cf:59:c7:32:89:0f:
1a:e9:44:d4:91:68:ba:0b:95:75:00:9e:76:2f:08:
14:61:fb:88:05:91:5d:92:0c:aa:f8:44:f1:9d:7c:
97:12:b4:ce:ed:c1:6b:7e:36:38:c5:00:d8:bf:cd:
6e:c7:61:d2:14:f2:b3:02:3f:5b:75:e2:42:3e:ed:
54:8a:a6:33:00:01:6f:1c:c0:fc:89:bf:6c:04:0c:
8b:99:ce:e9:f0:52:47:68:bc:42:b9:94:cd:e5:bc:
60:40:9c:3f:42:72:26:ff:06:4f:8d:ad:ed:20:5e:
1d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:7D:CA:1A:B4:27:68:B7:D3:C9:2D:F5:2C:43:CD:A7:94:0F:76:E4
X509v3 Authority Key Identifier:
keyid:B5:37:11:59:61:C6:AB:F5:B8:7A:BE:4A:20:05:3E:4A:CA:1B:6E:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTcRWWHGq_W4er5KIAU-SsobbsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/26cc6a-6f17-40a9-b987-6fc717175e58/1/tTcRWWHGq_W4er5KIAU-SsobbsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4c:19:7c:52:8f:22:36:70:a2:57:4f:e3:d2:6d:12:26:db:
93:5c:8e:5b:53:b9:d0:ff:d8:29:e1:c7:62:2e:a9:2e:9f:d0:
22:f0:c2:4b:5c:46:1d:09:c4:d8:1d:84:7f:76:24:de:45:d2:
37:91:c0:51:14:48:66:b8:36:97:d8:92:48:64:c6:49:ce:28:
d3:bc:b8:78:0f:67:9b:b9:b3:94:43:cb:70:a8:ca:c0:03:33:
16:03:c5:e4:d4:65:6f:a7:bb:38:06:ab:44:89:00:25:4c:de:
1a:b1:a0:ea:94:65:5e:6f:55:b2:b8:c7:38:59:f8:e9:ac:29:
cf:fb:e6:dc:7a:d6:eb:e0:68:47:86:3e:e2:35:0b:98:37:cf:
f0:bb:e4:57:88:26:86:22:0a:94:7f:f0:b7:c3:75:1b:60:e9:
73:c1:9e:eb:7c:e4:a7:43:29:7e:eb:c1:ca:fb:00:a2:0c:52:
7c:2f:4a:7c:4b:16:95:5e:29:0e:62:b3:ab:8c:68:ee:5a:a2:
9d:2f:f8:a4:34:6d:bf:24:2f:4d:ac:bd:2c:b3:19:2b:b6:26:
f3:01:14:57:20:d9:33:ac:e0:64:4e:8b:0d:88:b1:b7:88:0f:
61:96:ad:18:3c:80:4c:aa:cf:47:19:d4:fa:27:9f:00:fe:00:
b9:90:bc:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:12:39 2025 by rpki-client