Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
File: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft (raw, json)
Hash identifier: yJjHaoFsGgjkCuqqLR8yk7m6GWsFP8/cnk3lk+L3G0o=
Subject key identifier: 99:6B:B5:5A:78:F8:D9:48:68:70:49:CE:C6:FE:B8:18:A6:81:5C:55
Authority key identifier: 93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
Certificate issuer: /CN=936cb336c1beb71d4fbbaae243b23352c6270061
Certificate serial: 0194BD4E9A2B6392C5827A7D68DC1E1E56BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
Manifest number: 0C85
Signing time: Fri 31 Jan 2025 17:00:32 +0000
Manifest this update: Fri 31 Jan 2025 17:00:32 +0000
Manifest next update: Sat 01 Feb 2025 17:00:32 +0000
Files and hashes: 1: 77Da0cUu_C8djIEncMxzodElOpE.roa (hash: O6xd7yyxwxYfy10toui/N1cFeV/zSXBxnL9OigcdZr0=)
2: k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl (hash: ZTfXawFpv+LMJcEGAPC6cDBKEqx7pDqjqFZT5xnXVLk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:9a:2b:63:92:c5:82:7a:7d:68:dc:1e:1e:56:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=936cb336c1beb71d4fbbaae243b23352c6270061
Validity
Not Before: Jan 31 17:00:32 2025 GMT
Not After : Feb 1 17:00:32 2025 GMT
Subject: CN=996bb55a78f8d948687049cec6feb818a6815c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:34:f1:41:17:e4:2c:0f:87:3e:43:5a:48:13:
e7:9b:7a:ac:b5:aa:e7:d6:26:58:49:1a:9d:ff:9b:
90:02:17:f1:a3:40:d7:09:a2:3b:7a:a6:68:66:16:
11:0b:04:d6:d4:f9:36:4c:fb:95:a9:b4:f5:80:40:
27:54:99:89:f5:52:ae:23:d5:58:2a:3f:d0:21:cd:
5a:bd:22:1e:c9:15:42:4e:f1:cd:6e:a9:5a:e2:7b:
ad:67:5b:b8:e0:f7:b4:96:0a:62:c9:93:2b:9b:90:
fe:88:bf:9d:94:e9:b4:06:c2:ca:17:8d:89:ed:68:
7c:e0:68:36:5b:0b:b0:f6:34:49:d6:e2:b6:2c:13:
84:8c:db:0c:0a:ad:34:90:f3:4c:d8:1b:9e:5c:50:
62:12:77:5c:6e:6b:cb:30:16:dc:dc:4c:14:2f:21:
5d:f0:aa:3a:63:0f:84:3e:80:16:ef:d3:92:74:cc:
66:df:68:50:55:71:86:9b:e1:7e:b4:5e:46:07:2b:
9d:5d:81:ab:16:08:76:ba:66:42:54:3f:20:df:21:
c9:0c:96:4f:cf:53:bf:50:4d:74:93:1d:f2:75:3f:
c3:c5:9f:5b:54:a8:30:93:6b:9c:ca:0f:aa:ce:a6:
fc:41:c0:6f:ee:f1:00:9b:5d:75:33:e8:31:c4:e3:
b6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6B:B5:5A:78:F8:D9:48:68:70:49:CE:C6:FE:B8:18:A6:81:5C:55
X509v3 Authority Key Identifier:
keyid:93:6C:B3:36:C1:BE:B7:1D:4F:BB:AA:E2:43:B2:33:52:C6:27:00:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/d1dd9a-98f4-45b8-9095-59d60bff205f/1/k2yzNsG-tx1Pu6riQ7IzUsYnAGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:1f:7f:ff:91:b8:ae:28:65:d2:38:e7:ed:fa:69:cb:44:d0:
9c:4a:7e:67:dc:4d:09:cf:98:2a:37:fd:97:01:db:7a:8f:e9:
a5:46:b6:61:9f:96:74:1f:2b:8d:6e:e2:7c:b5:f2:e6:6e:12:
d4:3a:e3:58:d6:c9:78:76:c4:4d:97:1e:71:1d:9a:5a:c0:0d:
f4:34:73:b4:59:f6:39:7e:de:7f:aa:8a:8a:65:2e:1b:8e:2c:
99:1d:44:0a:24:44:0a:b0:f8:16:55:fe:cd:04:46:b4:b8:f2:
b9:ac:61:d0:8e:9d:bd:d6:a2:c4:dd:bc:5b:96:69:28:81:cb:
3b:23:6f:1f:fa:b5:ed:8b:0d:ee:ad:bc:b8:db:6b:11:2b:4b:
3a:fa:fc:7d:2a:67:c5:5f:c6:5d:03:b3:32:23:f3:b1:17:9c:
f0:a7:40:f6:c3:a1:0f:4c:e8:05:d7:f3:2a:0d:16:92:cc:f0:
a8:0e:8c:9e:f2:d7:3b:a9:3f:e2:42:4f:ce:9c:be:33:d9:2f:
72:29:33:11:36:4f:89:b3:20:7e:17:a0:25:b9:a8:97:35:43:
93:7f:46:71:e1:5b:ee:2a:ce:8c:0e:a8:33:d0:21:3d:80:80:
ad:e7:1b:3e:0e:7d:bc:c5:e4:89:13:a7:2e:31:78:c8:4b:00:
00:87:6d:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:47 2025 by rpki-client