Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
File: yNWqcDQlCrGoeJrIbMDu87_J218.mft (raw, json)
Hash identifier: USn8BpZkuA8phMKlsLqSR6PKC6qmEEm+zXx2eWqBxlk=
Subject key identifier: D4:6D:ED:50:5F:16:A4:10:FD:6A:0F:D4:95:21:B1:F9:8E:99:53:09
Authority key identifier: C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
Certificate issuer: /CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Certificate serial: 0194BC3C03B02704FA51B8EE0955940B6F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
Manifest number: 0F0A
Signing time: Fri 31 Jan 2025 12:00:37 +0000
Manifest this update: Fri 31 Jan 2025 12:00:37 +0000
Manifest next update: Sat 01 Feb 2025 12:00:37 +0000
Files and hashes: 1: 0SWPLRWTYkJG7421JHXOtiDBZR4.roa (hash: 6unS6vuhfVD53i6+xoXsZBSCsuic5U4lcQX4ccwpcWM=)
2: WbzMJtvriwpBLgG099PPDIe8VG4.roa (hash: Ug409g0I8zLQGsJbLA43Dct7NIITII3VJknFQnHFZYo=)
3: yNWqcDQlCrGoeJrIbMDu87_J218.crl (hash: P95Eznmkqm+OaKgrDpA3dNNFM+GuaTdFG38VCh/R0lQ=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:03:b0:27:04:fa:51:b8:ee:09:55:94:0b:6f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8d5aa7034250ab1a8789ac86cc0eef3bfc9db5f
Validity
Not Before: Jan 31 12:00:37 2025 GMT
Not After : Feb 1 12:00:37 2025 GMT
Subject: CN=d46ded505f16a410fd6a0fd49521b1f98e995309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:37:57:8b:79:1e:b1:a5:70:df:1c:c2:62:71:
e1:95:1b:d3:3c:db:c3:b1:97:0e:ad:61:27:9c:d8:
d8:8b:02:d2:de:38:32:aa:6b:86:b7:80:85:12:76:
84:cf:c2:21:00:b2:7a:a4:4d:3e:fa:ec:0b:7e:65:
07:ed:95:4d:7a:12:6f:72:5a:32:af:85:99:22:fb:
f9:cd:6c:9e:24:99:df:78:ce:60:29:7b:9f:da:b7:
92:7b:71:2d:60:71:2a:dd:77:15:33:03:47:d2:e0:
37:19:c9:6f:34:69:7b:82:5e:3c:f9:c3:15:b8:46:
35:ad:82:86:c4:7e:99:77:33:2c:6b:98:86:1f:a3:
6b:bd:c4:af:18:ea:6d:75:85:b0:17:50:71:c1:6e:
10:72:5a:90:1a:ca:0c:00:cf:d0:c9:4e:5c:f3:08:
68:45:22:3e:3b:89:0a:f1:ba:06:ec:af:7f:6a:ca:
83:09:ef:fb:c8:2a:ea:4a:1f:bb:6a:0a:a8:e3:ea:
35:d8:96:d3:09:a1:c5:02:79:09:b6:32:05:dc:01:
ef:66:87:bc:a3:de:ca:85:48:b7:5c:0d:4e:0a:39:
2f:35:8f:d9:91:f2:11:2e:30:66:7e:57:4b:e4:80:
1d:b4:42:5b:66:d2:8b:5f:5c:5e:3b:27:1f:35:77:
1f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:6D:ED:50:5F:16:A4:10:FD:6A:0F:D4:95:21:B1:F9:8E:99:53:09
X509v3 Authority Key Identifier:
keyid:C8:D5:AA:70:34:25:0A:B1:A8:78:9A:C8:6C:C0:EE:F3:BF:C9:DB:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yNWqcDQlCrGoeJrIbMDu87_J218.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/2d490c-6ff8-471d-97d2-2d72f23193db/1/yNWqcDQlCrGoeJrIbMDu87_J218.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:e2:f4:86:f2:2f:22:6c:8c:ce:0d:75:72:1b:05:82:3f:3b:
f5:18:0a:59:af:79:fc:e6:42:dc:56:b7:cb:5d:5f:39:b3:4b:
71:45:22:9e:2c:6f:9f:67:32:6d:dd:c8:81:63:cb:b3:7d:9f:
9e:1b:f4:42:40:b9:cc:e5:3e:52:0b:a0:48:d7:c1:70:7b:d6:
eb:a1:31:b0:13:7d:7e:ed:3c:d4:49:e8:34:b5:b3:59:0a:50:
5b:99:e9:5f:57:0a:aa:f3:05:ef:11:8d:1b:a7:f3:91:18:db:
0d:9a:e4:6d:90:2c:61:8e:75:c6:27:68:27:a4:c5:27:ab:28:
de:76:a2:6c:e2:2b:5b:03:93:7f:c9:0c:46:f5:01:5c:10:65:
7b:a3:15:aa:88:76:1b:e9:de:26:17:c6:ea:5a:24:e8:c8:76:
b1:30:92:3a:a8:ad:c5:a8:51:26:26:69:45:20:09:35:93:0a:
8a:67:4c:38:66:93:7b:66:f3:ab:13:29:0b:a7:93:32:f6:87:
8e:d0:a7:95:b8:7a:f4:1c:f5:d9:f6:8a:d2:71:2d:66:c2:f2:
d1:c2:8d:0a:fa:a6:54:36:68:f3:f0:4e:06:d5:9e:bd:76:93:
97:35:f2:75:e9:87:98:55:b0:33:01:a5:9e:25:f9:9d:2d:31:
99:aa:16:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:06 2025 by rpki-client