Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
File: yQDvPdXdG-FdCLuTy91jtKyGDms.mft (raw, json)
Hash identifier: vmM9lnuF5OqSRH68Gl3MIm2E97C7yYtjySx1XFdxHLM=
Subject key identifier: C6:B2:BB:E7:3E:8F:54:1D:3F:73:F7:63:D2:DA:98:1B:B5:DC:EC:90
Authority key identifier: C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
Certificate issuer: /CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Certificate serial: 0194BD17A690D5076033D6A45345D7F3CCAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
Manifest number: 0E9B
Signing time: Fri 31 Jan 2025 16:00:31 +0000
Manifest this update: Fri 31 Jan 2025 16:00:31 +0000
Manifest next update: Sat 01 Feb 2025 16:00:31 +0000
Files and hashes: 1: kNwo0JsX3ICm84nVo9dsXQUG9kE.roa (hash: NK1ts8W0/zMpiUmbhnMjlz816+vYjFkNttYVHl02NWQ=)
2: yQDvPdXdG-FdCLuTy91jtKyGDms.crl (hash: 5Ijg2oZhF1mQ7uqVLm1fpyzg/pXSGin31lw5gsL+SME=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:a6:90:d5:07:60:33:d6:a4:53:45:d7:f3:cc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c900ef3dd5dd1be15d08bb93cbdd63b4ac860e6b
Validity
Not Before: Jan 31 16:00:31 2025 GMT
Not After : Feb 1 16:00:31 2025 GMT
Subject: CN=c6b2bbe73e8f541d3f73f763d2da981bb5dcec90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e1:e1:ca:1a:f2:7f:8b:a0:86:7c:10:f6:3c:
7a:bc:af:86:88:10:58:8e:35:e6:61:ef:ba:58:bc:
e4:7f:3b:49:2b:71:96:d7:e0:2d:9b:20:3e:ea:1a:
9f:e0:e9:e7:35:10:64:f0:03:65:24:b9:a0:f9:cf:
21:3c:0f:fd:19:9a:2d:91:80:9b:52:d2:6c:ff:bf:
19:eb:68:fb:59:11:8a:7c:14:66:e0:f3:e1:eb:94:
72:65:1f:08:2b:21:9c:de:4d:6b:5c:ca:30:00:1a:
d9:58:cd:0e:67:94:0d:2f:68:f7:71:03:4e:0e:4e:
2d:c5:37:78:c3:bc:c3:95:31:23:f4:fa:eb:9f:81:
ba:1f:12:db:4b:a0:50:88:45:fa:b0:44:94:eb:78:
b7:bc:13:c6:8b:43:46:12:35:7b:ea:6c:be:a1:73:
7b:cc:58:90:70:b5:3e:0b:aa:77:e9:a5:72:79:52:
74:53:c6:c9:f9:73:71:11:b1:79:34:17:bc:f7:9c:
2d:d1:48:f4:cd:d0:e1:86:2e:f0:8f:78:ca:78:8a:
cc:fa:46:dc:43:31:26:9e:ac:4a:37:f0:71:38:24:
21:0b:57:0d:50:e2:3a:ab:74:31:88:9c:3a:f2:c4:
a7:e5:62:6f:32:27:5f:15:39:eb:c6:0a:9d:7d:60:
12:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:B2:BB:E7:3E:8F:54:1D:3F:73:F7:63:D2:DA:98:1B:B5:DC:EC:90
X509v3 Authority Key Identifier:
keyid:C9:00:EF:3D:D5:DD:1B:E1:5D:08:BB:93:CB:DD:63:B4:AC:86:0E:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yQDvPdXdG-FdCLuTy91jtKyGDms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/a89c01-6bb1-477c-94bc-5abe93aff642/1/yQDvPdXdG-FdCLuTy91jtKyGDms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:97:ee:d8:ba:09:c7:37:40:a9:5b:4e:c9:83:cd:de:47:2a:
4f:13:72:83:86:90:fc:e2:32:93:c4:4d:a1:d8:6d:4c:33:27:
57:4f:78:83:6a:32:a5:ad:23:47:b8:f8:bf:bb:64:50:b1:cd:
b4:97:aa:11:c6:ac:aa:e6:13:98:0d:b0:8e:d3:e2:e1:9f:75:
b5:de:fa:03:f6:a6:b0:24:9a:3d:2d:17:1d:dc:3a:30:ff:d8:
83:03:7d:dc:26:95:52:ec:c1:13:e9:e4:24:f9:78:93:37:42:
e1:42:48:5d:51:9f:57:da:1b:f3:69:c8:42:10:97:fa:d4:db:
6b:2a:b8:e0:d8:37:15:5f:d2:80:e2:0c:1e:94:bf:68:24:bd:
8c:62:67:3c:0a:9d:40:ad:91:93:3c:6b:54:07:ca:f3:f6:c3:
9d:66:20:a1:76:71:73:79:59:d6:f3:b9:5c:b9:ca:1b:2c:1b:
17:2f:48:21:89:fe:8f:49:cb:d3:cf:d2:a1:ac:cd:c2:dc:2a:
b5:56:59:16:53:5a:14:95:40:d2:ad:d1:8f:b2:e2:f9:07:ec:
39:67:88:4c:cb:b5:b2:4e:49:08:dd:68:a9:e5:3f:3e:ee:9f:
04:1a:31:f8:94:03:ac:f9:78:15:95:ee:84:b9:b2:31:53:3b:
07:e7:ca:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:38 2025 by rpki-client