Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
File: tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft (raw, json)
Hash identifier: y5qPobQE7ntiZNQ0GKU8C3y/pD7HL5wD2zhZhI04Y+I=
Subject key identifier: 76:2C:91:DA:16:7D:EA:03:C6:33:E8:62:22:03:21:C0:4B:80:4B:2B
Authority key identifier: B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
Certificate issuer: /CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Certificate serial: 0194BD85A3400A0BBAEA0C24B357A0B52C35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
Manifest number: 09F0
Signing time: Fri 31 Jan 2025 18:00:39 +0000
Manifest this update: Fri 31 Jan 2025 18:00:39 +0000
Manifest next update: Sat 01 Feb 2025 18:00:39 +0000
Files and hashes: 1: sEcAqep2NyLTkuYW41YUgHA9f4w.roa (hash: 3/7vZf5AuYQ6PDHss1zXReAWYubN+OUgtUWtMk8fZcY=)
2: tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl (hash: CIIKhh+z+TB0e+sdWLUlEV5SSGwe1T1pVzdQYG/pcLk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:a3:40:0a:0b:ba:ea:0c:24:b3:57:a0:b5:2c:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5217a84f715ea48e5cc3783b138ce8c7e70398c
Validity
Not Before: Jan 31 18:00:39 2025 GMT
Not After : Feb 1 18:00:39 2025 GMT
Subject: CN=762c91da167dea03c633e862220321c04b804b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:49:33:f6:28:98:11:59:18:c9:b2:9a:b8:25:
97:a5:54:e2:79:df:35:16:85:8b:ed:bd:d2:20:2f:
76:fc:ec:b6:64:09:f2:af:ea:ab:d0:29:84:3e:ef:
73:a2:ef:15:9f:dc:44:d8:64:ec:39:0b:e8:2e:28:
05:bd:ca:5e:0b:03:38:48:21:51:48:71:84:a9:89:
54:19:f1:eb:23:9c:1e:5f:6c:5b:85:a3:5c:5e:36:
50:7d:e3:7c:df:59:83:b3:58:12:89:53:61:ac:08:
4e:01:e1:54:31:01:11:bf:81:3b:0f:4d:b8:7f:6a:
04:40:26:c6:76:07:20:03:c3:7b:8a:b3:15:a8:8b:
98:14:04:93:a2:33:fb:35:50:4d:a5:60:f4:56:98:
45:27:95:e0:e9:42:c5:3d:6a:7d:8b:ce:94:48:91:
29:0f:1b:08:14:20:e9:cc:bb:50:10:b1:f4:d9:30:
2e:76:94:f1:5f:e0:96:bc:2b:99:4d:18:51:64:1e:
bb:89:be:50:92:15:e8:90:f1:b7:f3:eb:51:34:d3:
c4:09:5f:79:0e:0f:f0:fa:02:50:66:2f:bb:83:c8:
9d:92:e8:e6:b6:60:fe:b9:60:f5:15:95:ab:57:d1:
60:1c:14:4e:4e:de:a6:2e:10:75:a9:75:e6:da:fc:
04:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2C:91:DA:16:7D:EA:03:C6:33:E8:62:22:03:21:C0:4B:80:4B:2B
X509v3 Authority Key Identifier:
keyid:B5:21:7A:84:F7:15:EA:48:E5:CC:37:83:B1:38:CE:8C:7E:70:39:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tSF6hPcV6kjlzDeDsTjOjH5wOYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/c7bb18-df0b-450b-bd11-870828808f88/1/tSF6hPcV6kjlzDeDsTjOjH5wOYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:e8:41:52:c8:fd:2c:a4:7a:0b:9d:11:07:4d:0a:7a:77:d9:
1d:6f:ff:cb:ff:78:d2:53:89:78:01:b1:88:65:ef:44:e5:46:
e9:e2:72:d8:ab:e0:2c:1c:04:41:68:1b:22:ba:d3:96:6d:e3:
5c:52:1f:52:c4:d5:d3:a3:f3:8e:90:d6:52:1a:70:a8:a7:f9:
99:52:c0:10:5a:12:1d:46:89:7b:66:04:76:fa:ca:47:7a:96:
ad:54:de:3d:67:99:f5:d1:15:19:99:d2:dc:b9:71:16:da:45:
f9:87:7a:95:d1:f8:2c:42:9e:fb:5d:41:af:f0:21:5b:17:80:
15:72:84:f0:8c:74:44:4a:7d:0f:86:a3:55:43:f4:db:97:73:
d4:37:42:23:c8:67:dd:ce:a9:63:7e:76:8c:2e:3b:89:0d:11:
af:62:63:16:ba:81:58:7f:82:cd:28:76:33:55:ac:1b:77:cc:
6e:bd:63:74:96:99:26:e5:b7:fe:21:f1:57:1a:53:c6:e5:b7:
63:14:84:59:ac:25:02:da:a0:66:66:d3:57:c3:e7:5e:8b:c5:
59:a8:8f:57:9d:3e:68:cf:61:cc:03:87:fa:8c:0c:2d:46:b2:
07:ec:02:20:52:27:c1:b7:b9:b9:b4:cf:a9:c0:51:a0:b8:01:
15:50:0d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:52 2025 by rpki-client