Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1a6f83-4ab4-4a43-a491-18ae75981d1d/1/th2ejJoIsjqYsUwwi4Dc-_VeXNE.mft
File: th2ejJoIsjqYsUwwi4Dc-_VeXNE.mft (raw, json)
Hash identifier: drhupmiLSZuYpQKJhMdSZbxxdPONFdn3cGi0uhQ2yKY=
Subject key identifier: 60:29:2B:BA:9F:31:38:68:1C:16:39:FD:2C:36:BD:A1:E0:AD:6F:70
Authority key identifier: B6:1D:9E:8C:9A:08:B2:3A:98:B1:4C:30:8B:80:DC:FB:F5:5E:5C:D1
Certificate issuer: /CN=b61d9e8c9a08b23a98b14c308b80dcfbf55e5cd1
Certificate serial: 018CB429767C43018EAE46E183C382C70487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/th2ejJoIsjqYsUwwi4Dc-_VeXNE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1a6f83-4ab4-4a43-a491-18ae75981d1d/1/th2ejJoIsjqYsUwwi4Dc-_VeXNE.mft
Manifest number: 0FFF
Signing time: Fri 29 Dec 2023 06:01:05 +0000
Manifest this update: Fri 29 Dec 2023 06:01:05 +0000
Manifest next update: Sat 30 Dec 2023 06:01:05 +0000
Files and hashes: 1: 6iA3QsugeBWTz0iiUYQkQlDFNf4.roa (hash: 3gO3Hkmao2kkA+YKpIkt3/z+ek3W1BgjEb5ACsInpMg=)
2: th2ejJoIsjqYsUwwi4Dc-_VeXNE.crl (hash: DTreP7WH/f7E2oRr+gvtL9QLBOTc7Rno/FUEznPRb6U=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:b4:29:76:7c:43:01:8e:ae:46:e1:83:c3:82:c7:04:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b61d9e8c9a08b23a98b14c308b80dcfbf55e5cd1
Validity
Not Before: Dec 29 06:01:05 2023 GMT
Not After : Dec 30 06:01:05 2023 GMT
Subject: CN=60292bba9f3138681c1639fd2c36bda1e0ad6f70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:33:4c:44:c3:48:89:16:a5:cf:0e:f8:b7:5e:
8c:7d:4e:63:0c:95:45:75:fc:51:8d:8e:d9:ab:44:
45:bf:fc:7f:36:f3:15:16:76:50:01:87:61:26:2e:
37:06:ea:15:31:6d:85:8c:8d:26:44:8a:de:e1:d1:
c7:8c:62:4f:e6:bd:3a:ec:ec:43:7d:74:3e:e8:f5:
40:b6:b8:a7:10:7f:66:aa:51:0a:4e:a9:a0:27:c4:
b3:d5:45:93:24:8c:30:1d:e1:8b:07:a3:cf:22:02:
a2:53:0f:75:d7:0d:80:42:10:64:09:ca:7e:db:4e:
a0:8c:2b:ae:21:2c:d1:a3:6a:6a:7d:7e:ae:0d:a9:
ee:16:cf:25:29:24:07:e6:67:0b:89:a9:f3:3e:83:
da:1d:4b:ca:83:33:a6:c2:b1:33:56:5d:11:81:c3:
4e:a2:6a:c1:b0:1f:85:cf:f7:79:19:cd:ba:19:c5:
cf:81:b3:2e:65:dc:14:bf:1b:f6:a5:e8:41:af:8d:
d4:3f:d8:ca:34:cb:a4:51:95:97:12:1e:22:f7:36:
66:75:3e:0b:92:0e:cd:da:47:67:49:4c:2e:c2:ae:
cc:0f:c8:1b:50:f3:fb:b0:14:b9:7e:59:52:9a:82:
e2:fb:a5:02:e8:8f:cf:65:2c:9a:56:74:4e:9b:b4:
15:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:29:2B:BA:9F:31:38:68:1C:16:39:FD:2C:36:BD:A1:E0:AD:6F:70
X509v3 Authority Key Identifier:
keyid:B6:1D:9E:8C:9A:08:B2:3A:98:B1:4C:30:8B:80:DC:FB:F5:5E:5C:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/th2ejJoIsjqYsUwwi4Dc-_VeXNE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1a6f83-4ab4-4a43-a491-18ae75981d1d/1/th2ejJoIsjqYsUwwi4Dc-_VeXNE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1a6f83-4ab4-4a43-a491-18ae75981d1d/1/th2ejJoIsjqYsUwwi4Dc-_VeXNE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:23:70:f9:a7:01:41:50:7d:44:39:92:80:55:64:d1:34:69:
db:35:28:54:d1:56:3b:7c:8e:ff:85:f9:8e:87:c5:ee:6e:1c:
ba:9e:6d:c4:50:52:3e:0d:e6:2b:01:33:2c:53:5e:b2:6d:3f:
e2:04:b3:ee:bc:e7:05:6b:49:7f:45:c0:2c:0c:35:ae:1a:7d:
01:bd:1f:2a:d2:ed:7c:63:0f:24:d3:bf:fc:80:84:d6:20:db:
d9:33:d7:ec:a2:a8:0a:e2:fb:56:0e:6f:cf:9a:32:ec:56:0b:
6b:08:41:71:c6:76:a5:63:e6:42:e0:dc:e1:d0:57:55:0a:7c:
87:60:ad:81:73:a1:2c:61:0e:8b:07:b0:62:3a:71:08:a2:db:
ac:ad:67:7d:59:3c:e1:82:e3:ba:6f:8c:e1:04:b0:de:7e:50:
aa:45:7d:ec:53:34:b2:33:1a:ff:ca:8e:e3:bd:92:ff:01:7b:
71:58:ab:e9:03:06:fc:d9:59:86:ea:79:86:64:15:ca:a0:e6:
eb:0b:64:46:cc:e9:c9:65:8c:30:a8:c9:8d:a3:0a:a7:dc:7d:
9b:ff:45:18:e9:de:cd:6b:0f:5c:4b:95:9a:8f:fc:b8:2e:8b:
81:09:41:5a:5f:c9:73:04:79:dc:d9:30:cd:07:80:05:6f:c6:
5b:f5:f9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:55:43 2025 by rpki-client