Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
File: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft (raw, json)
Hash identifier: 1JuDyYuwZn6AopF1deC+dIa78jtVvh8KHZqvZtAgduQ=
Subject key identifier: 52:3D:F1:59:60:60:92:4E:1E:F6:66:84:04:DD:9C:1C:47:B7:FD:1B
Authority key identifier: C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
Certificate issuer: /CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Certificate serial: 0194BD4E8C4A488AD6BABA7A0F9C42CD9074
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
Manifest number: 109D
Signing time: Fri 31 Jan 2025 17:00:29 +0000
Manifest this update: Fri 31 Jan 2025 17:00:29 +0000
Manifest next update: Sat 01 Feb 2025 17:00:29 +0000
Files and hashes: 1: VgTi5tlMVXsu097Zaw82JIsKmhI.roa (hash: yaSgz1DC1PHPNVrBtX09+Wm5+D0DsnRGuOyAfnA8DC0=)
2: olC5ZpSEtozZndm4qi7fm722epU.roa (hash: osI53NMsoiUBoOeQCVmzdMQWvODeVRAe3gG8Sio/M8A=)
3: yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl (hash: BPB9SPxRUKTD8cT9KI2tXSpEJbxCwDXEx2ehE+YW7j0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:8c:4a:48:8a:d6:ba:ba:7a:0f:9c:42:cd:90:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c950d7b1975a3703ae27b31ad2f932ae46a4cc94
Validity
Not Before: Jan 31 17:00:29 2025 GMT
Not After : Feb 1 17:00:29 2025 GMT
Subject: CN=523df1596060924e1ef6668404dd9c1c47b7fd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:fb:67:84:8e:2d:61:27:50:6b:db:e1:03:38:
62:e0:82:3a:cf:40:f6:59:4f:be:16:ad:96:62:76:
fb:02:6a:1d:2b:8b:98:b0:da:d8:18:af:cb:4a:61:
57:bf:0e:49:6e:c3:da:0d:39:97:7d:ca:ca:9e:53:
13:0e:a2:75:25:64:78:2a:30:5a:4c:02:f3:14:6f:
c6:a1:20:47:c2:90:01:a1:e4:01:c9:10:e9:36:6a:
3b:40:4c:ab:b1:cf:51:b3:a1:ca:16:80:91:6e:f6:
cd:5e:16:c9:37:a2:ea:ac:b3:72:f3:4d:43:90:85:
9a:3e:7f:21:2b:b6:9d:88:20:5b:e8:a7:f2:4a:e2:
48:95:1e:46:22:29:4e:9c:b0:6d:86:78:82:45:5d:
01:7b:29:9e:ca:6e:62:57:cb:ce:9e:88:3f:c7:88:
e2:0d:9c:fa:df:bb:c9:ce:bc:41:02:a6:03:20:8a:
7b:54:a0:de:58:a6:96:3f:86:70:07:27:b6:e3:c0:
de:e0:27:b8:15:63:6e:da:9a:bd:31:ca:da:de:0b:
8c:9c:1d:e3:7e:23:cf:1d:38:16:f4:74:f2:a9:d4:
5d:2c:ff:39:dd:60:7f:f6:39:64:a7:9b:aa:84:8c:
d8:c4:f7:7f:d3:f8:9b:1c:45:77:76:7a:a1:51:c1:
ff:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:3D:F1:59:60:60:92:4E:1E:F6:66:84:04:DD:9C:1C:47:B7:FD:1B
X509v3 Authority Key Identifier:
keyid:C9:50:D7:B1:97:5A:37:03:AE:27:B3:1A:D2:F9:32:AE:46:A4:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/0c7318-b348-4b24-b9e5-c6a8821adea9/1/yVDXsZdaNwOuJ7Ma0vkyrkakzJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:90:ec:96:41:9a:23:4c:0d:0a:b7:c2:e3:70:74:0d:66:c9:
05:7e:33:59:94:26:5d:8f:d1:b4:c7:07:74:12:c9:21:54:c8:
f6:31:fe:5b:59:7d:07:84:22:9a:db:40:2e:11:34:ec:a9:18:
0b:fd:76:3f:67:d3:a6:ce:f4:b5:49:b0:63:c1:90:84:3e:5d:
bf:b4:5b:e9:ab:59:97:84:91:d3:74:d0:c9:d4:ec:5b:63:68:
d5:c6:cf:bf:9b:f7:8d:45:ef:06:10:21:a8:fc:a3:2e:70:55:
f0:80:91:52:61:a1:bc:eb:1f:8f:09:b2:05:f4:28:35:56:9e:
53:b0:24:61:66:b8:83:0d:94:0a:af:fd:b3:28:17:53:7b:16:
f0:e9:fd:4a:1f:4a:23:8f:25:7c:22:f6:06:1a:0a:f4:f0:65:
71:ee:51:60:d9:a9:88:38:e0:0a:cc:fe:35:be:04:ed:a2:6e:
2e:16:1b:37:6f:25:a1:c4:21:ac:bd:db:d7:76:56:16:a0:33:
7b:24:45:4a:bf:f1:ef:b9:1d:92:15:de:3f:45:0f:f6:99:78:
8e:bf:4c:95:32:de:c2:d9:a6:e4:80:6f:b9:08:5c:fb:6c:56:
7e:f4:9e:d3:c6:35:bb:4f:55:4d:ac:c6:e3:a7:dc:b1:67:83:
f4:90:e1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:08:15 2025 by rpki-client