Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
File: yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft (raw, json)
Hash identifier: zp8/xr2EnmRzc7M8A0+KYBHm47tiHAZkEz8UrzuD7yk=
Subject key identifier: 6D:77:73:E7:3D:2F:6E:06:D1:8B:DD:E8:75:C4:11:63:0B:AD:ED:3F
Authority key identifier: CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
Certificate issuer: /CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Certificate serial: 0194BD17B768C04C7141DE48156D252BC630
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
Manifest number: 0DEA
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: vs_wrAmuGIug1GU_WsE0c2zCmpU.roa (hash: 9ijLmWfmtB/5rCC4VVeOb5sdlLKrU3qLnrDgERpleQY=)
2: yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl (hash: gIvlYinmk0Rgm1KyT9gQm8SMSDyI54NDbbr/yOSMcks=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b7:68:c0:4c:71:41:de:48:15:6d:25:2b:c6:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cabe6ea6ef33089e5259d249c5b0dfaa13a94d78
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=6d7773e73d2f6e06d18bdde875c411630baded3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:fe:04:42:03:ec:d8:24:51:a3:2b:e2:58:
6e:6e:0e:6b:8c:ab:a3:2c:eb:78:c3:1b:c1:68:20:
62:6f:79:bb:2f:21:f9:33:7e:70:45:ce:7f:7f:b6:
85:fe:85:4f:ca:46:5c:80:42:d9:e1:e3:06:1a:04:
b0:1e:52:fa:ed:99:b8:f7:7d:84:d4:31:8d:ff:01:
7e:e5:74:57:60:c3:78:fa:60:2d:00:1a:6a:c4:b2:
84:22:c7:e2:e4:52:91:0c:38:54:62:25:62:48:55:
41:9d:9a:bf:f8:b5:68:39:58:80:49:c7:56:f8:95:
94:bb:fd:4b:4d:9f:11:e7:29:f3:e2:74:68:b9:e1:
d5:64:96:ba:e0:a4:10:d0:31:e0:e6:57:6a:a4:bc:
b8:b1:18:f8:00:33:17:1f:08:ae:c4:b5:10:c6:cc:
c8:c4:e0:f3:bf:53:e3:f7:c5:28:dd:71:43:01:27:
3c:07:a8:2d:d5:49:4a:11:77:cf:a9:7a:ed:a2:c0:
27:96:3b:99:b1:57:41:21:96:b6:c3:3e:4e:d8:ea:
0b:73:5b:bf:68:18:3b:fa:0f:5a:9d:84:03:7b:c1:
b8:22:78:d4:35:01:5f:11:02:d9:de:b4:78:9a:2a:
a1:fb:cf:9c:07:5f:ec:e7:05:fe:72:7a:74:c6:32:
89:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:77:73:E7:3D:2F:6E:06:D1:8B:DD:E8:75:C4:11:63:0B:AD:ED:3F
X509v3 Authority Key Identifier:
keyid:CA:BE:6E:A6:EF:33:08:9E:52:59:D2:49:C5:B0:DF:AA:13:A9:4D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yr5upu8zCJ5SWdJJxbDfqhOpTXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/08d6bf-ef86-4c74-aa23-d335c2042403/1/yr5upu8zCJ5SWdJJxbDfqhOpTXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:8f:12:ff:63:f6:4b:a3:78:dd:f8:e6:69:59:49:bc:0c:e2:
1c:27:fc:85:be:85:e7:77:65:69:d4:fb:7b:5f:e0:fe:bd:c5:
e9:6e:72:8c:52:14:d9:03:10:6c:05:51:16:58:a6:17:eb:53:
61:d4:99:23:4e:97:c8:29:68:28:82:c6:c9:a7:2e:12:9c:d3:
27:4a:80:a7:ba:d3:16:ea:14:21:7b:a8:b5:65:1f:a8:78:2d:
50:81:da:1d:c8:e8:e5:a4:d0:00:33:46:20:23:ed:ef:e9:2b:
71:43:d5:11:03:8e:7d:d4:8c:aa:7c:53:c4:a4:59:11:46:83:
56:f9:42:91:63:eb:ab:43:76:94:ad:ec:f6:bf:64:cf:79:a0:
ad:15:47:5b:68:80:bd:77:63:7c:1d:29:d4:38:73:49:48:88:
d5:fb:0e:60:8c:f8:5e:b7:64:0a:db:e8:7f:1f:bf:ad:a3:77:
2e:a8:d6:bf:c5:a9:ae:3e:e4:d1:87:11:30:6d:92:fb:87:c0:
73:7f:0c:37:73:10:aa:d0:7e:33:f4:f0:e3:a0:17:9e:3a:9e:
08:c8:91:da:5d:42:64:ff:e1:bb:65:f7:5b:51:a8:12:b1:1d:
8a:12:82:8a:26:55:3d:6b:87:27:c3:1f:e6:a8:6c:f3:26:ce:
dd:21:33:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:48:03 2025 by rpki-client