Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
File: t2lbmOCKN4vw3JRNLxpgofaVSYE.mft (raw, json)
Hash identifier: Blb+wga45ieugAZxJ15HH59kpSh6k9SqCO3vFevFweM=
Subject key identifier: 8A:FF:AE:0A:BA:EA:2F:75:2E:DB:F8:39:1F:3C:C5:80:BB:6F:A9:9C
Authority key identifier: B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
Certificate issuer: /CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Certificate serial: 0194BCA9D0DC739873D131B798DFD916E766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
Manifest number: 1429
Signing time: Fri 31 Jan 2025 14:00:33 +0000
Manifest this update: Fri 31 Jan 2025 14:00:33 +0000
Manifest next update: Sat 01 Feb 2025 14:00:33 +0000
Files and hashes: 1: RqpmvtEuocHrmP7Ze69kHKJjV2o.roa (hash: VpfnBez6Qe55xKI1hHxTR48bK27mTUWeo89TggdAg0Q=)
2: t2lbmOCKN4vw3JRNLxpgofaVSYE.crl (hash: fZZpIrzu1hMpwrdJ7+R4KpjDndjDycTBZCP7L/ExRRo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:d0:dc:73:98:73:d1:31:b7:98:df:d9:16:e7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7695b98e08a378bf0dc944d2f1a60a1f6954981
Validity
Not Before: Jan 31 14:00:33 2025 GMT
Not After : Feb 1 14:00:33 2025 GMT
Subject: CN=8affae0abaea2f752edbf8391f3cc580bb6fa99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:bd:ef:74:9c:23:dd:21:39:3a:4b:d4:12:5f:
7b:64:74:bf:78:84:77:80:97:df:39:6e:59:78:63:
64:3a:99:da:da:00:06:5f:ef:66:b2:ac:11:0e:c9:
86:cc:51:82:19:6b:08:7f:6b:e5:d8:be:5c:ff:69:
1b:33:0a:e0:c1:0a:c1:68:a4:0f:bd:5b:95:6a:c4:
63:ee:8f:85:33:f6:55:1f:16:41:fc:cf:bf:38:24:
5f:65:f5:c2:85:c1:6b:09:46:4e:da:93:73:b8:60:
cf:e1:ec:31:0c:72:2b:f5:17:42:ef:84:06:e5:9b:
35:cf:3b:f9:e4:b4:cc:e6:0f:11:34:59:ee:6d:9c:
75:04:3f:3b:42:05:31:63:17:e8:c7:de:ae:03:aa:
52:10:37:5f:7c:a0:2f:28:de:a1:7a:26:34:c4:df:
8d:3e:44:8b:d9:91:3d:d7:ee:61:7a:74:38:7c:b4:
85:f1:9c:6c:4a:80:37:f5:77:9e:fe:c4:42:40:f7:
34:1a:b9:1f:bd:50:c7:01:97:f2:14:17:23:6b:e7:
83:be:20:f4:3f:41:d7:79:50:4d:5e:d5:0c:3d:90:
42:de:e1:b9:3d:23:bf:48:85:40:cc:85:b3:03:04:
0d:b3:d4:58:ce:15:4f:f4:52:f4:05:ab:32:67:f9:
56:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:FF:AE:0A:BA:EA:2F:75:2E:DB:F8:39:1F:3C:C5:80:BB:6F:A9:9C
X509v3 Authority Key Identifier:
keyid:B7:69:5B:98:E0:8A:37:8B:F0:DC:94:4D:2F:1A:60:A1:F6:95:49:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t2lbmOCKN4vw3JRNLxpgofaVSYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/81e9aa-85ed-4850-b46b-6885aa87c4fd/1/t2lbmOCKN4vw3JRNLxpgofaVSYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:71:7c:cd:17:df:04:7b:c1:d7:fe:5d:3c:2a:58:b5:13:ff:
82:9d:60:ea:41:f4:a4:6d:55:9a:53:60:64:f3:b3:11:a5:e5:
51:61:76:21:f3:79:e1:e5:6e:5c:58:ab:cf:73:84:df:df:f9:
79:25:ee:8a:fc:b7:83:63:33:ed:97:b7:da:91:68:90:e1:43:
ee:a2:50:18:11:6a:a6:7b:19:ed:99:1b:e1:c5:ea:ac:01:f6:
6d:96:d5:85:14:b5:a2:6e:46:ee:91:f2:40:90:13:49:46:8e:
5f:2a:d3:e7:44:a6:f4:d1:50:05:c8:09:8d:61:f9:f7:58:3b:
03:67:65:48:73:e2:8f:a1:da:f6:b1:f3:ef:a9:2c:d5:92:9b:
4d:df:9a:5a:02:1e:e4:80:53:66:fd:a6:04:b1:00:50:fb:f7:
60:20:0a:65:fe:d0:1e:e4:a0:f7:95:d5:5d:29:50:bc:93:b0:
1f:be:b4:08:dd:82:7a:e3:f6:5e:5e:6b:d8:57:86:63:12:f4:
97:7e:f7:13:99:0a:bc:55:f5:64:6b:d7:fb:ed:67:a2:7d:34:
df:0d:a5:5a:97:b0:07:7e:76:b8:e3:0f:14:47:4b:37:3b:ef:
59:b2:2a:86:86:86:0e:e4:71:71:40:45:eb:60:c4:7b:a3:5d:
2d:19:e5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:44:33 2025 by rpki-client