Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
File: tCV3H5kv1037Bzbmla61nGr2fpM.mft (raw, json)
Hash identifier: 4+1INWKeMeTGygCLPw0rnhXO75blCu6GsVsovLOfi/o=
Subject key identifier: 0A:8C:B7:E5:38:AA:CB:3F:29:1A:42:62:0A:47:6C:AD:D7:5F:92:F9
Authority key identifier: B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
Certificate issuer: /CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Certificate serial: 0194BBCEBD9183832612CCA32EE3473A9D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
Manifest number: 04FA
Signing time: Fri 31 Jan 2025 10:01:15 +0000
Manifest this update: Fri 31 Jan 2025 10:01:15 +0000
Manifest next update: Sat 01 Feb 2025 10:01:15 +0000
Files and hashes: 1: Vw2yLSQ3LTxqIY-0jpawdHHYRZc.roa (hash: iTSHI+c9vyvdBq9ojdYKL9zsD6xY6XyH0HTCqL60iXA=)
2: tCV3H5kv1037Bzbmla61nGr2fpM.crl (hash: dPkKvivCdcL1hr0atJ49QFpOjTU14A8YlsYQGg24DPw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:bd:91:83:83:26:12:cc:a3:2e:e3:47:3a:9d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b425771f992fd74dfb0736e695aeb59c6af67e93
Validity
Not Before: Jan 31 10:01:15 2025 GMT
Not After : Feb 1 10:01:15 2025 GMT
Subject: CN=0a8cb7e538aacb3f291a42620a476cadd75f92f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b6:21:52:c6:df:1f:e3:04:c5:68:6d:c0:f6:
2b:9f:75:71:54:97:fe:5b:c9:6c:2d:d3:c8:1d:f5:
38:e3:6a:40:22:10:fc:09:32:73:0d:47:48:59:2e:
00:dd:6b:f0:c8:91:cb:da:24:fb:a1:de:c9:47:35:
1d:e2:dd:b2:db:52:46:9e:94:5f:5f:3b:b8:75:81:
7d:85:fe:3b:44:60:ce:91:dc:df:3e:d4:35:72:a3:
88:59:23:93:86:46:60:ed:a0:ca:63:42:ea:f6:69:
96:09:f0:6e:f3:2a:30:bd:ae:20:a8:fd:ee:95:67:
c1:c6:08:5b:26:0b:45:b4:c1:9f:75:a1:5c:e6:25:
bd:3b:b0:f9:12:ee:3d:91:b7:71:9d:bc:84:5d:49:
73:6b:f2:5a:8e:3c:ac:8d:9c:b4:ea:54:7b:ce:54:
a4:2c:93:2a:e1:ab:aa:07:95:ec:44:2f:07:d6:76:
60:e0:ae:66:9b:51:bd:5a:b9:10:bd:28:0c:11:84:
3c:6b:ff:83:b7:79:ec:44:df:f1:60:51:a8:1c:40:
db:10:26:26:5e:d6:e8:b5:2c:0e:de:ee:34:9d:d8:
fb:3d:97:77:15:1b:18:1e:da:8a:dc:68:d0:8a:7f:
b3:74:94:ca:c2:b1:51:2c:dc:8e:ea:1c:5e:aa:bd:
30:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:8C:B7:E5:38:AA:CB:3F:29:1A:42:62:0A:47:6C:AD:D7:5F:92:F9
X509v3 Authority Key Identifier:
keyid:B4:25:77:1F:99:2F:D7:4D:FB:07:36:E6:95:AE:B5:9C:6A:F6:7E:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCV3H5kv1037Bzbmla61nGr2fpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/e8f95d-ad38-4b5c-b090-8a8564ba3c8c/1/tCV3H5kv1037Bzbmla61nGr2fpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:24:0a:cc:1e:aa:fb:a6:20:4a:ce:5f:d7:b6:d6:5c:c4:4b:
71:5f:7b:66:13:94:6f:bc:00:b2:3f:42:bf:ac:f9:2c:99:19:
d2:a6:b4:1f:66:3e:12:f6:f9:36:b1:33:0f:ac:a0:78:b0:f6:
a1:55:77:19:20:70:f2:06:77:ca:1f:c2:27:99:47:ba:0d:ce:
ee:22:78:52:fc:d6:fe:8a:ad:a6:c7:60:7c:d1:1e:aa:aa:64:
ed:ae:3b:70:ca:66:ae:1d:56:73:0c:4e:6f:80:1f:4c:15:df:
f4:51:ce:86:53:ba:76:e0:85:96:eb:b5:9f:78:67:b3:29:cb:
d7:d5:75:e4:b2:e3:b3:47:6a:51:ef:cf:61:26:a0:a4:66:98:
c5:78:19:3f:ec:64:a3:d9:15:a4:f6:7a:8d:75:4a:ee:0a:fa:
96:f3:b5:31:4a:86:4e:8e:05:1a:f8:3f:cc:eb:8c:30:d4:f6:
06:5e:be:e5:f1:4c:21:e9:ec:2d:c9:0f:a5:ec:e8:e7:ca:e2:
a4:25:9a:0b:02:2e:63:16:c5:1e:3f:c0:f5:a6:b9:b1:8a:73:
d8:ad:a5:c6:0e:f7:7e:de:cf:64:e3:14:f7:8d:5f:e3:a0:df:
b0:a6:50:20:49:44:52:07:72:47:75:c1:34:41:33:c6:3d:69:
a9:96:3f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:19 2025 by rpki-client