Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
File: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft (raw, json)
Hash identifier: WwL3Ra75qoI0kUEv9px8MsQKZWR/gModw0H9SfBtEiw=
Subject key identifier: D0:29:AD:B8:7A:E8:4A:EE:A8:E9:31:21:2D:80:2E:C2:0D:E1:FF:15
Authority key identifier: 63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44
Certificate issuer: /CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
Certificate serial: 0194BC3C38F6375297E19176F21FC85FEAF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
Manifest number: 0588
Signing time: Fri 31 Jan 2025 12:00:50 +0000
Manifest this update: Fri 31 Jan 2025 12:00:50 +0000
Manifest next update: Sat 01 Feb 2025 12:00:50 +0000
Files and hashes: 1: Xh4ptPl3loyr5HsYAeq5bigmrnc.roa (hash: y+GdTxJAoh6FrrDJ6BHqIZq0hI9csiMuoRcI0N0qK/0=)
2: Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl (hash: t10SBjjfbgl0vuQ0QrOmTQ9MpEPx+/r9UK9PImQqcDg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:38:f6:37:52:97:e1:91:76:f2:1f:c8:5f:ea:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63926fcff81bb91a6a71ae5e8935ab4daae53744
Validity
Not Before: Jan 31 12:00:50 2025 GMT
Not After : Feb 1 12:00:50 2025 GMT
Subject: CN=d029adb87ae84aeea8e931212d802ec20de1ff15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:0a:72:0d:a0:ab:ca:ea:c5:f9:a2:f0:76:ef:
2e:70:56:e1:f8:1c:8c:9a:ac:5d:aa:8e:2e:0c:98:
89:0a:f0:97:f6:b5:ae:43:59:f7:24:70:6b:c6:b3:
05:dc:7d:de:bf:c8:24:c6:02:4d:1f:f1:21:b2:14:
31:ac:eb:fe:4b:22:72:f8:df:f9:35:9e:ff:b4:b9:
c3:bc:5b:7c:50:ac:d5:78:23:ca:37:43:e8:37:60:
01:b8:20:81:1c:aa:fb:68:4f:49:0a:81:cc:1d:28:
e0:ed:3c:06:40:03:77:70:aa:c4:9c:f2:50:56:16:
d5:f9:d6:61:4d:93:6d:a4:ec:f4:6d:d2:12:8c:36:
73:b3:ff:6b:e1:69:ac:45:4a:2b:a0:8e:32:45:c8:
71:28:dd:d4:02:5a:d0:b0:2d:9c:02:cf:2d:e8:e8:
89:e3:76:cb:22:7a:e1:84:dd:43:89:92:73:e5:9f:
6e:d1:72:d9:b0:28:41:98:6c:c8:57:80:65:be:57:
10:b4:11:48:e2:52:50:38:04:15:0e:b6:64:1e:af:
55:41:8f:c7:05:0b:75:c6:31:7a:67:5a:77:07:ed:
99:b0:a2:74:6e:ba:19:33:ad:e7:1d:43:ae:ac:3d:
25:77:3b:27:e7:29:ca:30:9e:89:14:be:30:bb:14:
ad:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:29:AD:B8:7A:E8:4A:EE:A8:E9:31:21:2D:80:2E:C2:0D:E1:FF:15
X509v3 Authority Key Identifier:
keyid:63:92:6F:CF:F8:1B:B9:1A:6A:71:AE:5E:89:35:AB:4D:AA:E5:37:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/e04fc4-2c6e-4af7-939e-048391f8db9c/1/Y5Jvz_gbuRpqca5eiTWrTarlN0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:e4:32:da:21:7e:7b:f4:e2:6f:71:c1:ca:6a:c1:75:9b:4a:
d1:15:d3:06:4a:78:88:f9:87:ee:2b:b9:50:49:50:03:1c:0d:
90:91:20:6d:bd:f5:9e:73:fd:19:86:36:2b:33:9c:e9:ef:59:
a7:4a:07:4a:30:2d:0f:c2:c9:b8:41:00:52:d2:db:6b:de:6e:
ef:e1:21:67:c8:38:a9:fc:ae:4e:c2:c1:c6:64:b9:60:db:af:
a9:ff:5a:27:b8:08:97:d7:12:04:85:78:41:09:78:f6:90:7c:
44:92:09:44:be:7b:eb:f4:35:4c:db:a9:23:ce:fd:9b:33:40:
11:34:87:c2:9d:65:4c:ab:2d:ab:1a:be:a8:d6:48:3f:3f:08:
9a:cc:c2:54:48:db:0d:69:f0:fe:70:cc:59:f1:80:2e:90:02:
f4:85:0e:b7:87:47:83:94:28:2a:9b:fa:2e:00:b7:69:02:d0:
b3:78:1f:c4:2d:06:7a:ee:ca:f0:78:6c:af:a1:75:d6:17:ee:
72:bd:54:0b:2d:09:c3:f0:3e:ee:77:ab:db:2f:01:e1:88:a2:
e0:8d:db:13:3c:a9:db:da:16:25:3a:9b:b3:ab:c9:c6:52:e6:
5b:cf:31:d5:90:7c:5c:2e:47:95:97:32:9f:c9:44:ea:c9:ed:
18:14:01:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:13 2025 by rpki-client