Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
File: tGS0UjqJcrni9GpPShY06XAnrt8.mft (raw, json)
Hash identifier: bIE/Yn4T0IH6zhwRlMmQjjPbkRIGsvw+EcmUybbp28Y=
Subject key identifier: 7A:10:FC:1C:E8:97:99:C3:DD:73:41:3D:CF:C1:62:50:89:9B:A4:0F
Authority key identifier: B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
Certificate issuer: /CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Certificate serial: 0194BD174ACCB0B7E849B02A87F2604740C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
Manifest number: 03F3
Signing time: Fri 31 Jan 2025 16:00:07 +0000
Manifest this update: Fri 31 Jan 2025 16:00:07 +0000
Manifest next update: Sat 01 Feb 2025 16:00:07 +0000
Files and hashes: 1: FIuiasWdjO3SZ5YCZyp495O6-Mc.roa (hash: AdKefC+I7JKd6sZS8fd83sJqmU6HrKCEQYygObuAMT0=)
2: tGS0UjqJcrni9GpPShY06XAnrt8.crl (hash: /I4oCW3EEZsKvA9BK1KaB8+J/GYd/Cn5DAgwkPZus3Y=)
3: uAqsYudX7mPIe3ZhGSNb-LLk9zw.roa (hash: mQhnijyqTK1dj7ry7R8uLAun/5RKJF5onMi2LcOOMfA=)
4: xS11sqn1yyKhK8owzSnnVrJ38_4.roa (hash: Q8QkF/vYZYfACSyCcmshuktJoPK49D0JpDA/QO1e388=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:4a:cc:b0:b7:e8:49:b0:2a:87:f2:60:47:40:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b464b4523a8972b9e2f46a4f4a1634e97027aedf
Validity
Not Before: Jan 31 16:00:07 2025 GMT
Not After : Feb 1 16:00:07 2025 GMT
Subject: CN=7a10fc1ce89799c3dd73413dcfc16250899ba40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:c7:c3:4e:a7:e8:f3:d6:d3:c2:60:f6:dc:99:
f5:d3:95:14:01:3c:8e:5d:7b:b3:05:36:57:e8:cf:
8f:9a:91:6c:ac:c6:ef:6c:60:a2:fd:86:c2:41:ba:
58:be:c9:14:f4:0b:ce:10:0c:e3:20:14:df:24:bc:
df:75:68:ef:69:19:ef:3d:0b:74:87:b1:b7:da:de:
45:a6:2c:4c:f6:23:c7:49:ee:ba:26:ef:5d:a0:b7:
0b:69:b7:79:b3:17:ca:69:b6:1e:91:ca:c2:5e:d7:
9e:48:aa:bc:dd:46:94:fa:6e:12:c2:10:4a:90:2e:
5a:7f:bf:67:65:ff:52:d7:cd:d9:82:90:bd:16:55:
b8:9f:b5:12:98:b7:b3:74:9e:35:06:6f:8b:8d:0d:
f5:2d:d4:f7:45:31:9e:e0:ef:c4:c9:8c:e1:5b:5d:
d7:af:70:c8:bf:d9:5d:7d:d4:57:e9:86:b7:7c:89:
12:75:3f:a4:ad:50:47:73:12:13:b1:53:52:5e:64:
05:0c:c7:d8:89:d7:b6:7c:58:0d:63:45:9c:8e:5b:
14:00:2f:c4:a0:dd:30:e9:f8:2e:0c:25:f3:b4:3a:
d7:43:39:c6:fc:77:30:51:9f:43:c8:e4:1e:c1:e4:
ca:0d:f5:74:53:8a:48:18:24:de:7c:5c:89:65:4e:
1d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:10:FC:1C:E8:97:99:C3:DD:73:41:3D:CF:C1:62:50:89:9B:A4:0F
X509v3 Authority Key Identifier:
keyid:B4:64:B4:52:3A:89:72:B9:E2:F4:6A:4F:4A:16:34:E9:70:27:AE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tGS0UjqJcrni9GpPShY06XAnrt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c7caf3-eb08-4556-a5b7-fc6e77884054/1/tGS0UjqJcrni9GpPShY06XAnrt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c6:6d:9b:88:68:b1:b3:0d:d1:58:6e:f9:e2:3b:cc:27:2a:
12:c9:87:db:65:0f:e6:d2:8c:5e:6d:5a:a2:a7:8a:14:55:3c:
e6:ab:e9:68:6f:4a:77:2c:2f:30:f2:a0:3a:fa:77:b0:97:ef:
f3:be:62:8a:b7:2f:1a:92:52:18:52:fd:f5:a7:89:c8:b8:78:
51:d5:05:be:e2:81:32:6d:84:e5:b5:24:27:da:6d:13:13:0a:
fb:f7:7b:a4:a9:ad:f5:3a:da:1e:55:15:4d:7e:8e:f3:6b:cb:
9f:65:b7:46:b4:36:36:e4:df:1b:ed:6c:48:03:58:c6:75:67:
7b:d5:73:3c:60:b8:1d:45:21:28:42:01:74:6d:e4:40:98:13:
8d:99:51:de:0f:67:48:a1:ec:d4:91:2b:ab:6e:c7:8b:22:12:
67:8b:be:27:3f:32:63:d4:3b:a6:14:40:90:87:65:f8:bc:66:
f2:3b:08:04:c6:21:e8:72:a1:04:3d:6d:a8:b7:1a:25:b9:02:
07:e8:a9:4e:6c:1a:d3:ad:47:81:1d:e5:f2:42:56:f0:14:ba:
ac:aa:c7:20:53:d1:5c:a9:23:ca:e1:ab:e3:f1:bf:45:0d:80:
94:08:da:c6:cf:38:16:9a:e4:7c:f6:fb:aa:f4:a3:ca:76:df:
37:45:ba:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:58:16 2025 by rpki-client