Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
File: yTfS9vC3jA7XW478KACdeXlhQAM.mft (raw, json)
Hash identifier: iqypwPi3L1egjhRlPkWJW8Hcv6ZPxfk/mMD6crGWmhM=
Subject key identifier: 77:FC:09:BD:FD:D0:DA:BB:24:2B:69:8B:87:EC:A5:A9:76:64:AC:57
Authority key identifier: C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
Certificate issuer: /CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Certificate serial: 0194BBCDC686BDEFA72E92BA567E4A0001F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
Manifest number: 0379
Signing time: Fri 31 Jan 2025 10:00:12 +0000
Manifest this update: Fri 31 Jan 2025 10:00:12 +0000
Manifest next update: Sat 01 Feb 2025 10:00:12 +0000
Files and hashes: 1: S4tCuljlSDudC5hWFI16K1vZQrc.roa (hash: IVL1gZ3kqiPfJXguPGcyEwPZH9+ml2IO0/FYl1DVPU4=)
2: yTfS9vC3jA7XW478KACdeXlhQAM.crl (hash: kTy0XnL62xTJoFJZP1263WJRSm2JogH7+FNMen/6Das=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:cd:c6:86:bd:ef:a7:2e:92:ba:56:7e:4a:00:01:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c937d2f6f0b78c0ed75b8efc28009d7979614003
Validity
Not Before: Jan 31 10:00:12 2025 GMT
Not After : Feb 1 10:00:12 2025 GMT
Subject: CN=77fc09bdfdd0dabb242b698b87eca5a97664ac57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ee:1a:b3:bd:36:98:2b:5d:cd:25:99:7f:6e:
4d:42:7d:30:86:65:6d:48:7a:a0:74:a8:f1:26:70:
d9:2b:c6:6b:dc:8c:5b:83:c1:4b:95:71:e5:94:24:
1f:25:65:2d:b7:ef:31:fc:97:fe:88:43:5a:be:85:
3e:e2:91:d1:ae:75:65:d3:f6:98:ca:34:47:c4:5c:
07:0f:8f:ec:6e:ff:5a:3b:ef:ff:e5:5b:3b:94:46:
8f:0f:13:29:77:20:38:0a:cd:da:91:40:6b:b4:46:
50:11:b9:18:4b:e7:90:c7:fc:5b:9f:65:a8:1d:91:
ea:72:a8:f7:f6:24:d8:89:63:76:98:b4:f4:2c:03:
0f:19:89:9f:69:88:2f:31:2a:8a:c0:3d:fe:ee:ab:
14:ee:a8:f9:72:11:52:d1:ac:f5:83:53:ef:74:43:
c1:e4:21:54:d0:52:8d:35:7a:bc:5f:d5:16:d4:74:
85:5c:77:f8:7c:ef:f1:70:8c:10:05:e6:f7:49:d2:
67:24:ed:32:27:d1:0f:b4:c0:be:12:2d:90:92:79:
b9:3e:6e:f2:df:2d:9b:44:7a:7a:40:b3:db:95:2b:
a8:f6:90:e0:ea:a5:26:44:da:89:54:4e:b7:cf:bd:
c6:00:4b:3d:1a:a0:bf:58:6b:4f:b7:95:1a:59:0d:
aa:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:FC:09:BD:FD:D0:DA:BB:24:2B:69:8B:87:EC:A5:A9:76:64:AC:57
X509v3 Authority Key Identifier:
keyid:C9:37:D2:F6:F0:B7:8C:0E:D7:5B:8E:FC:28:00:9D:79:79:61:40:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yTfS9vC3jA7XW478KACdeXlhQAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b9bd06-96c8-4e71-ba12-937754cbb505/1/yTfS9vC3jA7XW478KACdeXlhQAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:b2:73:95:1f:66:66:b6:88:d7:7e:81:ef:80:78:82:88:46:
3a:fc:11:da:58:65:ae:6d:0f:71:c0:76:92:32:ab:92:29:19:
56:b5:7b:8a:0b:b1:0c:c2:c9:37:d3:a8:34:e3:7b:e9:82:49:
38:5f:4f:d0:ff:7c:09:8e:fc:7a:f7:64:58:5b:6a:da:6c:3e:
92:5f:57:b4:c4:21:ed:06:12:21:41:18:61:05:20:9e:16:cc:
27:87:60:c7:66:f3:9e:8b:02:46:60:26:de:95:0c:ea:78:ff:
3f:a7:29:e5:18:f3:0b:24:54:7b:83:6f:7f:de:79:3a:cf:8d:
22:44:03:e6:06:eb:72:12:a3:df:a3:4a:86:84:f9:9a:42:a7:
16:18:ac:c5:38:d1:cd:b0:f4:18:5f:d4:1c:97:31:46:79:41:
c1:7c:a1:33:03:c1:24:bb:8e:47:f3:35:5d:82:b0:94:47:4b:
a6:14:d5:16:7d:41:36:8b:5d:e1:13:cc:b0:e0:ed:24:f7:b9:
77:22:88:3a:ff:68:6b:99:c8:db:92:00:3a:f3:d6:5c:b4:1f:
55:c8:02:15:b9:cb:6e:c3:03:39:dd:aa:97:ec:95:f8:c3:ed:
8b:b6:c0:23:91:c5:a1:ae:b5:07:2e:e1:86:cb:84:fc:1b:44:
b2:1b:bd:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:11:39 2025 by rpki-client