Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
File: Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft (raw, json)
Hash identifier: Si5anGWa5rDgjs4NcSFalJQQtGrlJwVhyDpWaBNup+o=
Subject key identifier: BD:F9:E1:51:6D:1E:64:D6:04:BE:25:51:BE:A7:2C:B8:66:6B:C7:54
Authority key identifier: 63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
Certificate issuer: /CN=63a759b06e6fed03b0930749153fc16a12a501e0
Certificate serial: 0194BC72CBF6ED07FA3683A115194AD1BB85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
Manifest number: 04FE
Signing time: Fri 31 Jan 2025 13:00:27 +0000
Manifest this update: Fri 31 Jan 2025 13:00:27 +0000
Manifest next update: Sat 01 Feb 2025 13:00:27 +0000
Files and hashes: 1: VHyzCTSbs2CwlLKYVfEUKGgZYGU.roa (hash: /siW604iDLkyDsTA5hDxMl+aIVYpD9UrXufKqlhouGo=)
2: Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl (hash: p44g97Jx7xxn3DGQmqTK5+K2/z7cG74jbNAhLDvmd70=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:cb:f6:ed:07:fa:36:83:a1:15:19:4a:d1:bb:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63a759b06e6fed03b0930749153fc16a12a501e0
Validity
Not Before: Jan 31 13:00:27 2025 GMT
Not After : Feb 1 13:00:27 2025 GMT
Subject: CN=bdf9e1516d1e64d604be2551bea72cb8666bc754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fa:f0:ef:f5:25:45:b2:02:18:ea:bd:7d:fc:
e3:87:27:af:19:9e:4a:f6:67:b3:86:18:3a:0c:fd:
da:4e:dc:92:e0:7c:4a:b3:cc:14:96:4f:a5:b3:e0:
39:40:f6:13:ad:79:17:3f:03:1e:15:b5:8a:ba:6c:
1b:c3:43:e4:a6:ff:f4:19:55:45:b5:8c:78:98:e4:
6c:c1:3f:fd:ee:e3:49:f3:14:69:95:ba:42:10:4d:
04:60:02:48:fe:39:4d:62:3f:75:92:59:78:c8:5b:
16:2d:67:fc:2c:95:c5:c1:e6:c7:ea:46:3f:9b:b8:
aa:45:a2:73:8b:71:ae:4e:6c:62:6a:6b:ad:b4:12:
66:2d:4b:18:b1:c0:60:9b:cc:ff:0b:c3:88:46:96:
67:7c:19:aa:21:e2:41:c2:ed:ce:57:e6:89:8d:79:
34:47:71:ec:f0:2f:6c:20:d3:68:b8:65:d8:cd:b2:
e2:07:17:8a:18:d7:9a:2b:04:8a:7e:5e:d2:ca:a0:
b2:a9:63:6e:b8:af:8a:f6:bc:74:a6:c0:db:a8:54:
51:e9:da:b9:73:d9:e3:50:d4:8c:1a:55:a2:3b:6e:
72:9f:1b:4b:15:fb:30:8a:34:38:9e:ad:83:41:8b:
50:d8:c0:c8:26:3c:06:45:aa:b4:8f:84:19:98:04:
2d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:F9:E1:51:6D:1E:64:D6:04:BE:25:51:BE:A7:2C:B8:66:6B:C7:54
X509v3 Authority Key Identifier:
keyid:63:A7:59:B0:6E:6F:ED:03:B0:93:07:49:15:3F:C1:6A:12:A5:01:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y6dZsG5v7QOwkwdJFT_BahKlAeA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/13150c-85da-458d-bc6c-9e24968e6664/1/Y6dZsG5v7QOwkwdJFT_BahKlAeA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8b:3e:3a:ff:d0:2b:01:e5:0f:e0:4c:41:3b:cc:6f:d9:41:
3e:ff:69:d1:bf:b1:1e:32:fd:c3:dd:24:f4:f0:58:6e:56:7c:
95:77:58:7a:69:b7:cb:dd:b9:b6:b4:e7:bc:86:3d:10:6a:80:
dd:c8:cc:01:b6:bb:79:14:8d:6f:bd:63:ee:92:43:81:d6:0a:
e6:e6:ef:1c:77:2a:59:06:47:06:c5:c5:93:41:5c:90:c5:23:
7b:f3:a1:51:b6:8a:5e:82:cb:e2:f5:7a:99:32:f2:79:b6:de:
eb:c4:02:16:da:17:1f:b7:17:5a:5b:d6:de:74:44:39:ba:85:
8e:39:3a:0b:1d:42:27:d9:3a:45:0a:2a:28:14:82:43:15:c5:
f6:38:51:0f:b2:9a:c0:ab:13:42:b5:dc:af:59:67:4c:33:46:
1c:ff:89:42:e0:75:98:e0:81:30:12:49:7f:72:10:c3:53:8f:
a1:c3:6d:ba:bb:51:1b:b8:18:ba:8e:1f:6c:66:70:02:4b:6d:
72:dc:01:e5:81:61:0f:7e:cf:63:64:56:41:86:02:7d:80:d5:
ba:53:a1:9f:2f:e8:06:9d:76:22:ff:a2:29:56:d6:4a:5e:77:
a8:74:89:97:b7:54:ef:1e:ff:43:b0:14:79:ec:b7:b7:d2:22:
bb:ee:54:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:46:59 2025 by rpki-client