Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
File: Yz51LKDcQjx09QhAW6UiiowuUVc.mft (raw, json)
Hash identifier: PYa1ecy/AXBS9mFW7r/y7ZzVHkizCFGa+y7gVvR/qWA=
Subject key identifier: 41:06:CC:EB:BD:FB:38:25:3D:95:AF:3A:8B:28:F7:F8:C4:DD:62:5D
Authority key identifier: 63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
Certificate issuer: /CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Certificate serial: 0194BD17B272D713A0B564E9E7FDDF9A9B54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
Manifest number: 07E7
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: GqEinr-m2CvDdye1xapcq5VjPrE.roa (hash: hcu+QYeC9yw9ZhpK8tmA+UALlykKOSidMF07viNJkGo=)
2: Yz51LKDcQjx09QhAW6UiiowuUVc.crl (hash: oQQ9xQwdTy20ZHI2+Zb4PXiEclBForhWb7gqwHObxtg=)
3: hfOIiDf5LSUuZcT1PUl10jObmSE.roa (hash: 4rpFhpKYXZ4q/RScibgPwKMUZ18cthvaLWxbyNlA6YU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b2:72:d7:13:a0:b5:64:e9:e7:fd:df:9a:9b:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=633e752ca0dc423c74f508405ba5228a8c2e5157
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=4106ccebbdfb38253d95af3a8b28f7f8c4dd625d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:0e:8a:fd:c1:56:26:dc:e0:93:07:48:2e:d4:
90:f7:39:65:84:2b:48:ab:df:9c:e0:96:37:3c:f0:
83:94:1a:55:1c:eb:de:71:9f:a6:d9:50:60:70:2b:
be:ed:82:73:36:91:3c:c2:d1:f4:23:5f:6e:af:14:
5e:d9:ef:23:5a:c7:15:89:57:72:7c:f6:7a:ab:1d:
86:7d:30:96:38:6e:9a:fb:b7:9c:e8:ad:2b:cb:96:
fe:1c:5b:b1:88:72:4c:ca:22:28:e4:46:b5:eb:07:
90:0d:35:2a:ce:75:74:f1:12:36:38:de:13:af:31:
6b:f4:5b:fb:c6:b9:2b:b7:ca:21:f6:43:05:16:ee:
89:2b:2f:70:14:4b:01:61:7e:3e:6a:15:97:ba:4d:
7e:d3:12:e4:62:17:46:1d:81:64:c8:9a:72:06:52:
d9:10:c2:1c:9b:f3:b9:6e:38:6b:d7:2f:c5:b4:08:
4e:c9:ac:29:44:dd:a5:62:21:f2:2f:15:85:e5:a4:
8b:cf:7f:47:3e:a8:21:9c:70:10:46:d6:ad:09:96:
37:33:1f:9f:0c:d3:c0:4b:bd:80:d9:cf:59:30:4f:
94:cb:b5:ed:5e:3e:f3:d7:43:c4:3e:9b:94:f5:a8:
05:7f:84:ef:8b:ae:57:63:a5:81:63:48:97:be:cf:
a2:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:06:CC:EB:BD:FB:38:25:3D:95:AF:3A:8B:28:F7:F8:C4:DD:62:5D
X509v3 Authority Key Identifier:
keyid:63:3E:75:2C:A0:DC:42:3C:74:F5:08:40:5B:A5:22:8A:8C:2E:51:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yz51LKDcQjx09QhAW6UiiowuUVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c8e214-8e45-4c96-8a79-de6187b7298a/1/Yz51LKDcQjx09QhAW6UiiowuUVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:0f:35:a6:68:e6:37:66:60:01:c2:7a:ed:e1:2f:b6:d0:52:
2c:62:b9:96:b8:d3:73:2f:00:c5:ed:cd:79:db:b4:bc:8e:48:
47:a1:29:31:28:a5:f6:2b:80:22:81:65:49:b6:7d:f0:2a:6f:
b4:17:d1:fc:ff:47:3f:40:63:c2:76:87:17:00:bb:8b:57:4d:
12:e1:90:69:35:32:a4:0d:31:27:a7:81:26:cd:69:1e:5f:87:
6b:36:e5:2c:43:96:90:37:a7:87:70:07:41:f5:bc:60:1d:f6:
79:e3:fe:8e:6a:04:b6:fa:18:0c:98:7d:e9:5c:9f:ff:d5:0d:
43:7b:60:3e:85:c3:61:b9:a6:12:de:91:cb:e4:c7:13:3d:93:
ac:e2:8c:3b:23:27:13:99:cd:42:79:20:d3:73:91:00:e7:a4:
d6:dd:cc:33:41:f1:6b:a2:68:99:b5:ae:1f:68:4e:27:fe:9c:
4a:bc:8e:ea:2d:fa:3f:a9:19:d3:d3:9c:80:a7:d9:71:32:6e:
39:57:6c:10:9c:88:36:87:e2:72:b7:a3:cd:a2:c2:1d:3c:10:
9e:30:b3:d5:ba:aa:f2:34:23:47:a8:cc:16:1b:c7:46:85:74:
ce:56:87:82:92:b6:de:92:ac:a2:6d:5b:c2:9e:4a:b3:e7:61:
63:db:af:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:52 2025 by rpki-client