Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
File: 1YzIUG_tu1Bh3pklsH1kmRihmSY.mft (raw, json)
Hash identifier: 9x1oHeES/gSHqmlIAl6O+oqH4YGu5tq78fnl9ZZik9c=
Subject key identifier: 27:9B:A6:29:D2:88:32:B9:9A:5A:28:49:0D:60:72:DA:08:10:DA:84
Authority key identifier: D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
Certificate issuer: /CN=d58cc8506fedbb5061de9925b07d649918a19926
Certificate serial: 0194BCA9FDA375AAD944582A16A22D369C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
Manifest number: 0F0C
Signing time: Fri 31 Jan 2025 14:00:44 +0000
Manifest this update: Fri 31 Jan 2025 14:00:44 +0000
Manifest next update: Sat 01 Feb 2025 14:00:44 +0000
Files and hashes: 1: 1YzIUG_tu1Bh3pklsH1kmRihmSY.crl (hash: nCpdFv9iIahfiOKXgNVsIS4SScjRtok8ZTyBMyY7zoc=)
2: DniqmtindUam8vj_sVzvh8icBDA.roa (hash: ta5Hj3U5JYOoiYd4yiO8g7IzMIhuCaznIwtfzYiosBs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:fd:a3:75:aa:d9:44:58:2a:16:a2:2d:36:9c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d58cc8506fedbb5061de9925b07d649918a19926
Validity
Not Before: Jan 31 14:00:44 2025 GMT
Not After : Feb 1 14:00:44 2025 GMT
Subject: CN=279ba629d28832b99a5a28490d6072da0810da84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9f:46:96:08:18:be:fd:d2:9f:29:88:e1:11:
c1:74:b6:62:7e:fe:f2:83:66:dd:b1:da:16:22:e5:
55:92:de:43:34:c1:b9:19:bc:e2:81:4d:ef:2e:56:
54:f7:ba:c1:4a:a9:f2:83:1e:e4:82:f0:d5:04:f2:
d2:92:89:67:b8:6a:5c:51:bc:79:7e:e4:6a:26:7a:
b6:b0:60:dc:45:1c:2e:7d:de:8e:af:85:4f:8b:d6:
8c:ef:00:db:2c:ce:8d:5a:8c:7d:a1:87:d4:7b:9b:
ef:af:9c:67:f6:c5:2f:6d:45:6f:45:dc:56:c1:30:
d9:89:46:7b:8e:8a:1f:42:31:25:1c:e9:d3:ad:5d:
56:09:47:21:a1:7d:ca:cd:63:53:ca:96:72:d2:b4:
49:25:eb:c4:6e:f5:ff:02:2b:26:e8:71:14:3a:33:
e7:78:9b:10:16:64:e2:70:c2:c4:55:6c:e9:b0:30:
59:88:2a:b8:8b:37:3c:04:0d:a2:82:aa:08:1c:6d:
1e:76:c2:e1:7b:ed:a9:12:5e:06:56:46:ef:62:1e:
e2:ea:c1:e2:3c:e6:26:a0:53:a4:56:dd:84:49:e0:
23:71:fc:fe:f5:ef:a8:40:5f:13:22:df:33:83:cb:
76:fe:1d:f8:b5:5a:ce:df:d2:27:65:cd:41:22:2f:
f9:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:9B:A6:29:D2:88:32:B9:9A:5A:28:49:0D:60:72:DA:08:10:DA:84
X509v3 Authority Key Identifier:
keyid:D5:8C:C8:50:6F:ED:BB:50:61:DE:99:25:B0:7D:64:99:18:A1:99:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YzIUG_tu1Bh3pklsH1kmRihmSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/46efb5-c9e7-4f08-bc6a-bb3e819f3ddc/1/1YzIUG_tu1Bh3pklsH1kmRihmSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:fd:a3:f0:16:75:8c:bb:74:fd:04:93:14:b1:f3:41:e7:d9:
06:4b:d9:47:bb:d5:98:7f:1f:fd:ad:8a:39:09:5c:19:64:05:
60:e5:cb:51:63:15:f8:18:fd:60:93:c3:bb:9d:cb:5c:34:3a:
aa:11:f4:cf:fc:53:84:be:e9:fb:b5:01:1c:7c:9b:33:1b:1c:
bb:24:c1:a9:2f:af:c0:1c:94:a0:69:ce:fc:16:0a:84:af:2b:
f0:8f:56:cb:34:f8:c4:3e:0d:c1:80:47:b2:4e:bc:02:53:66:
ee:a0:16:a4:bf:67:6c:85:76:c6:16:af:53:7b:d5:1c:fd:2a:
7b:08:87:e2:03:d4:29:dc:6b:54:ec:c8:ba:69:fa:e0:e0:02:
e9:54:b5:ae:04:1a:4e:da:63:c3:e4:81:66:04:80:64:29:aa:
cc:90:bc:ae:cb:e8:10:94:8e:50:43:b7:fd:a8:25:86:5f:4d:
f4:e4:93:6d:cd:e4:6c:8b:b2:f4:d2:4b:21:95:e6:6a:b6:ce:
ea:6c:09:85:e4:bb:38:f5:9c:68:38:cd:9e:c8:dc:44:ae:c3:
92:9c:48:c3:64:2d:13:c9:a8:95:fa:24:d8:4d:0b:4f:e8:78:
c2:37:cd:22:e6:28:14:15:b9:cf:05:3b:61:8b:d2:bc:01:f5:
9d:57:72:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:36:26 2025 by rpki-client