Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
File: yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft (raw, json)
Hash identifier: v/hjcgRyaJSou+CCY8VaFmB0d77ZmLL2Zc+yCmVSoIU=
Subject key identifier: 9E:B7:AF:F4:AE:E0:4E:37:69:B9:20:3E:35:5D:48:A0:80:38:3D:CC
Authority key identifier: C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
Certificate issuer: /CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Certificate serial: 0194BBCEA3BFC757A30841118F69AA57D085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
Manifest number: 0BEF
Signing time: Fri 31 Jan 2025 10:01:08 +0000
Manifest this update: Fri 31 Jan 2025 10:01:08 +0000
Manifest next update: Sat 01 Feb 2025 10:01:08 +0000
Files and hashes: 1: UqrTwR3mWPPHx5reK2r30AZfypc.roa (hash: St5DBCKbBaKTs6kDikN1cSMylNB9EQ6HknsZnw2fcYo=)
2: yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl (hash: l2aLj78Aws8Zj+/QPSJBzPKa2q+Jom+PkFpiluQpU50=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:a3:bf:c7:57:a3:08:41:11:8f:69:aa:57:d0:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c83670987d01d41ee2b564698c8271f50dee4ce1
Validity
Not Before: Jan 31 10:01:08 2025 GMT
Not After : Feb 1 10:01:08 2025 GMT
Subject: CN=9eb7aff4aee04e3769b9203e355d48a080383dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8f:36:17:66:c3:ee:7e:b6:86:3d:ae:f5:d9:
55:31:31:d4:2c:c0:1e:5a:b9:4b:58:4e:ff:14:05:
a6:b7:37:e3:b5:9d:8e:64:45:5e:23:99:27:40:e1:
7b:61:00:97:0c:0f:8a:7e:57:be:78:95:7d:ab:b9:
75:6a:f3:64:05:12:8c:a1:5b:62:ce:37:e2:ff:8a:
33:23:96:0c:88:a5:a1:db:59:56:d0:14:f5:ac:23:
d2:39:de:93:10:8e:86:8a:39:1b:d7:7b:c0:a6:e2:
36:0d:c7:44:59:c8:e0:a8:f3:ca:e2:e2:84:5e:d9:
a1:82:c3:5e:d9:8f:9e:d9:e1:81:57:ec:8e:db:f6:
1b:46:b2:c1:58:a6:bc:0a:42:c0:5a:10:3c:41:10:
52:da:8d:17:48:5f:a2:2a:f3:aa:bf:ae:03:c3:46:
18:36:8b:ab:97:37:c2:b3:bd:d2:b7:ab:36:df:39:
c7:3f:5d:7a:8d:d6:2b:e2:0f:5e:4e:97:6e:c6:2a:
49:70:8f:a0:71:4a:72:32:d3:c7:f2:86:a4:bc:ec:
d4:58:65:9a:ba:a6:81:e5:1f:7c:59:8c:72:ff:f9:
b1:d0:72:12:79:fb:07:1b:0e:3a:d5:47:1c:99:42:
22:c7:83:ab:66:bf:67:ad:dc:d4:c5:cc:86:28:73:
15:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:B7:AF:F4:AE:E0:4E:37:69:B9:20:3E:35:5D:48:A0:80:38:3D:CC
X509v3 Authority Key Identifier:
keyid:C8:36:70:98:7D:01:D4:1E:E2:B5:64:69:8C:82:71:F5:0D:EE:4C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yDZwmH0B1B7itWRpjIJx9Q3uTOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/618d5e-3f28-418d-bf4f-2a60cc98a8d3/1/yDZwmH0B1B7itWRpjIJx9Q3uTOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:db:93:4b:3e:cf:75:26:51:d8:8f:30:91:99:cc:75:e0:bb:
5d:01:66:f0:fb:60:2f:19:35:65:7e:69:9e:14:3c:6a:e2:5e:
bb:8a:c2:0a:5c:f6:02:f3:7b:fd:5c:5f:96:3d:78:c2:24:ce:
e3:3c:ea:7f:8c:45:89:e6:19:02:31:83:e4:19:b7:cf:30:8b:
73:37:20:c0:5b:c4:b1:88:f3:ff:0d:24:1c:b1:21:7b:ea:bd:
21:d7:0e:78:01:43:a9:1c:8b:d1:e6:18:e9:a7:bf:fe:8f:6b:
8a:60:a2:b3:3e:bc:ae:77:37:f0:88:da:5a:01:d5:2a:b8:2d:
4a:bb:50:88:44:a1:2e:3d:5a:7c:8d:a6:bd:6e:aa:0e:76:79:
c6:94:ba:81:3d:cc:2a:29:81:a8:95:f2:e7:86:e0:54:f9:f5:
bd:d5:5e:11:03:ac:f0:33:06:ef:34:bc:72:86:5b:46:b4:57:
b1:4f:fb:84:ef:2a:a3:d4:27:60:b1:dd:9d:af:f8:f5:8b:ac:
40:9b:b1:9d:52:6b:20:d1:00:f1:25:6f:de:07:63:7f:eb:61:
0e:76:21:5b:26:0a:7c:e9:87:02:0f:6f:06:d8:a0:7e:e5:e6:
f8:a5:90:93:7a:e1:af:86:a3:ce:3e:cf:25:0d:b4:05:bf:eb:
e3:98:b1:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:16:40 2025 by rpki-client