Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
File: yMyL2gxj59LWXBntcEO1oteRwfE.mft (raw, json)
Hash identifier: KyYf8We92g1K1+qVjLMY6P91Woar8Z0T2gkTc3M42XY=
Subject key identifier: 54:15:42:51:A5:8E:EB:8B:5F:AD:3F:0C:2C:68:EA:07:09:DB:86:4D
Authority key identifier: C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
Certificate issuer: /CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Certificate serial: 0194BC3C31A46EC01E080C0663C73A59292D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
Manifest number: 03AE
Signing time: Fri 31 Jan 2025 12:00:48 +0000
Manifest this update: Fri 31 Jan 2025 12:00:48 +0000
Manifest next update: Sat 01 Feb 2025 12:00:48 +0000
Files and hashes: 1: 0-0QU-mcwsSjRhq471-gtd5ufh0.roa (hash: VGJkz0Kb+B/ZQAVYufjsQPwByA4ZPAxHr/hG7qTqtp4=)
2: 1iyiGCCaZCOIy-3SK8-ztkCORB0.roa (hash: 4+8lvNVy48rfdEy8LO/Fif5vr+YXhPfmQva+BSbThYY=)
3: yMyL2gxj59LWXBntcEO1oteRwfE.crl (hash: 8GbOE0MMpHbvNJS0yezGkjw/FsEVcF3ytXqwOun3o3I=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:31:a4:6e:c0:1e:08:0c:06:63:c7:3a:59:29:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8cc8bda0c63e7d2d65c19ed7043b5a2d791c1f1
Validity
Not Before: Jan 31 12:00:48 2025 GMT
Not After : Feb 1 12:00:48 2025 GMT
Subject: CN=54154251a58eeb8b5fad3f0c2c68ea0709db864d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:8b:1c:68:1a:2e:a3:29:35:4e:96:cd:86:64:
50:01:1d:08:89:97:a7:1e:9c:d3:db:12:f4:d2:e1:
54:81:a8:51:c8:5c:27:e4:5c:93:d0:5b:b7:94:44:
4c:cf:b5:56:c2:75:c2:13:13:b7:2a:44:4f:a4:fc:
55:17:fa:ac:9c:00:66:99:04:c3:49:db:70:89:63:
ff:ae:e2:47:ce:3c:7c:5b:9a:b2:50:2d:d8:0f:e2:
49:60:19:b1:14:49:12:3a:f2:77:da:3c:c6:44:b2:
de:09:bc:fc:62:68:f4:2d:db:2a:db:cf:a3:e5:d7:
f4:49:b4:1a:6d:8b:f4:a9:85:20:d1:cf:6f:5d:c4:
eb:83:f6:87:75:36:09:86:89:ea:6e:50:c5:81:00:
6b:cb:b5:48:7a:1c:f0:3b:00:d1:ac:11:0b:5e:06:
cd:95:c1:c4:d7:63:37:cd:89:af:88:7c:a2:a0:78:
30:8b:88:77:05:6b:aa:9e:09:a9:b6:21:dd:55:aa:
71:f3:32:9b:53:f7:8a:51:66:d5:53:ae:d7:27:c5:
e6:49:2a:f5:dd:43:17:ca:e0:f2:07:83:f6:0a:7c:
a0:f1:fa:96:fe:2a:10:49:80:a1:3b:01:e4:73:e4:
3e:86:18:49:33:83:3e:7a:06:69:87:14:2a:3e:b9:
52:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:15:42:51:A5:8E:EB:8B:5F:AD:3F:0C:2C:68:EA:07:09:DB:86:4D
X509v3 Authority Key Identifier:
keyid:C8:CC:8B:DA:0C:63:E7:D2:D6:5C:19:ED:70:43:B5:A2:D7:91:C1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yMyL2gxj59LWXBntcEO1oteRwfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c7417c-4cab-4d51-b5ad-e30387b3f211/1/yMyL2gxj59LWXBntcEO1oteRwfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:54:00:ce:74:a8:b5:69:da:dd:7b:85:42:bd:77:83:45:c9:
78:d0:47:7e:5b:ec:7a:6e:18:6c:b6:0b:cb:63:52:48:e0:6e:
70:33:02:62:ce:b7:c7:c1:17:d8:26:59:b9:d2:d0:83:bb:d2:
32:6b:72:d4:d4:4b:68:96:0c:67:0b:59:5b:48:77:96:e3:4b:
93:ba:4d:cf:7a:b3:8c:d4:d2:b6:f6:2b:04:2b:1d:5a:f1:3e:
1b:b0:1f:ce:cd:99:17:78:36:d1:2a:ed:66:06:d6:aa:8d:85:
14:ad:f9:2a:44:6d:19:60:32:8c:75:68:c6:76:94:ee:88:6e:
b5:da:ff:c8:59:10:dc:3f:a1:b6:83:a9:27:62:71:6b:e2:85:
1b:9d:06:75:18:74:42:39:af:a3:fb:40:bd:06:4b:93:a5:1a:
47:9e:4a:74:17:69:4f:1d:87:a1:70:8b:82:67:79:69:91:77:
b5:d9:8f:a4:e7:2a:2a:84:1e:17:97:49:45:b5:73:28:cb:c6:
3b:61:22:3b:42:bf:28:fb:de:45:bc:24:74:9c:6a:18:83:ff:
03:ef:59:dd:4d:a5:74:4d:57:0c:53:7a:b2:3b:50:43:54:08:
46:f5:e0:87:c4:11:79:70:b0:b0:37:df:ee:60:d3:9b:b6:32:
ea:eb:9a:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:37 2025 by rpki-client