Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/8dabdd-0ffb-4849-b265-a5e89b665772/1/tOV2oP10jImeZNX79f1ziMaO4EQ.mft
File: tOV2oP10jImeZNX79f1ziMaO4EQ.mft (raw, json)
Hash identifier: NvinF3Ayj4cjnzjGEg0QFX5VNYDh+aqeekbUg73lfJY=
Subject key identifier: A1:AE:7A:80:0E:A2:6D:B5:72:23:29:B1:D2:DC:94:49:A7:6C:E4:6C
Authority key identifier: B4:E5:76:A0:FD:74:8C:89:9E:64:D5:FB:F5:FD:73:88:C6:8E:E0:44
Certificate issuer: /CN=b4e576a0fd748c899e64d5fbf5fd7388c68ee044
Certificate serial: 01901067CD8BC2DCEB50CD98E0CAC444C724
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOV2oP10jImeZNX79f1ziMaO4EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/8dabdd-0ffb-4849-b265-a5e89b665772/1/tOV2oP10jImeZNX79f1ziMaO4EQ.mft
Manifest number: 11BF
Signing time: Thu 13 Jun 2024 07:02:36 +0000
Manifest this update: Thu 13 Jun 2024 07:02:36 +0000
Manifest next update: Fri 14 Jun 2024 07:02:36 +0000
Files and hashes: 1: bVeymKLxtpELbJ8sJ4B3QOpDJAU.roa (hash: I6/f08wZJ2Mcp70358zp2AApgcrdcL7XiUXplHO7LPk=)
2: tOV2oP10jImeZNX79f1ziMaO4EQ.crl (hash: 1icRvtDKm9knns5sJUSxgXVqX0YGZ9bgFO/euAkIVWc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:10:67:cd:8b:c2:dc:eb:50:cd:98:e0:ca:c4:44:c7:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4e576a0fd748c899e64d5fbf5fd7388c68ee044
Validity
Not Before: Jun 13 07:02:36 2024 GMT
Not After : Jun 14 07:02:36 2024 GMT
Subject: CN=a1ae7a800ea26db5722329b1d2dc9449a76ce46c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3e:46:42:63:df:1d:82:aa:54:ec:f9:bf:42:
7f:c9:1b:d5:e3:bd:24:89:b5:de:c9:b4:a7:38:55:
29:8c:37:10:4a:42:6b:6f:c1:b2:fd:99:27:29:c7:
b9:23:68:01:c9:01:bf:a2:45:ac:b8:ed:2d:ec:ba:
18:51:c7:bc:e4:ae:78:2a:c9:b1:87:92:7e:13:c3:
5e:a6:31:98:a6:f1:b3:f0:e4:82:9d:a6:e3:af:8b:
e7:16:e4:da:a1:88:fe:46:02:51:33:75:4a:a8:76:
3b:4a:f4:0f:45:45:34:44:02:8d:ad:70:23:e4:09:
82:4f:34:df:fb:e5:fa:ac:3b:eb:b0:9c:03:1e:a1:
2a:23:1e:ba:70:26:22:0d:0d:a8:cd:14:ca:a5:40:
94:d2:b6:1f:d5:ad:2c:af:39:8d:21:08:14:a3:a4:
31:a1:a9:2f:a1:0b:09:9d:d0:f4:f0:45:ed:ec:4a:
66:4b:62:22:00:02:88:26:12:85:f6:05:dc:cb:af:
50:26:dd:07:84:99:bf:1a:b5:32:15:95:e4:f3:bd:
e2:ec:fa:4c:4b:19:77:ff:2d:76:8f:1e:36:8a:d1:
f1:a4:c3:38:a9:d4:fe:5f:0b:5a:0b:32:94:66:42:
93:93:fe:13:01:36:b8:b8:90:a7:24:73:d4:8e:48:
cc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AE:7A:80:0E:A2:6D:B5:72:23:29:B1:D2:DC:94:49:A7:6C:E4:6C
X509v3 Authority Key Identifier:
keyid:B4:E5:76:A0:FD:74:8C:89:9E:64:D5:FB:F5:FD:73:88:C6:8E:E0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOV2oP10jImeZNX79f1ziMaO4EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8dabdd-0ffb-4849-b265-a5e89b665772/1/tOV2oP10jImeZNX79f1ziMaO4EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/8dabdd-0ffb-4849-b265-a5e89b665772/1/tOV2oP10jImeZNX79f1ziMaO4EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:52:90:36:65:be:ac:46:0d:ea:40:43:b4:f5:33:d9:2b:c7:
fa:51:09:81:08:89:e6:9b:f3:ff:32:9e:49:16:35:81:77:d7:
12:82:df:61:37:aa:65:37:64:24:62:df:1f:7f:87:05:b3:38:
ae:40:31:7d:37:6f:b7:d6:05:79:da:40:ee:23:18:18:2e:0e:
ef:34:37:1b:f0:d2:b0:d8:99:a3:57:24:aa:7c:7f:b1:49:78:
f0:e8:0e:2c:94:d9:27:eb:6f:99:d7:0d:40:ba:25:9e:3a:f0:
3a:86:2e:f2:f5:11:16:92:e6:8f:90:50:14:69:bf:1b:0e:02:
ac:fd:82:25:7f:5c:22:aa:07:79:95:c6:d3:3a:e8:f4:b9:40:
e0:07:53:fa:dd:f9:7d:75:23:78:06:61:ea:9e:47:43:ce:1c:
6a:02:ce:1b:a7:d7:6e:cf:1e:5b:ed:ab:4b:7e:55:f8:a5:35:
6c:c3:c8:5e:e9:02:95:2e:e4:57:12:df:39:a9:39:39:2f:fa:
c4:ae:d8:ea:86:2a:08:5d:c0:89:de:cd:5f:e9:81:0b:3c:e6:
56:a5:73:47:17:df:0d:fe:88:73:c2:ce:a7:60:8e:c3:ea:18:
45:18:4f:c3:96:51:a8:08:da:34:ca:d2:b9:ba:12:9d:ce:92:
f3:87:ef:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 09:35:52 2025 by rpki-client