Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
File: w8YbUevIQYDwprIy6H351hyQ-qs.mft (raw, json)
Hash identifier: Y0Yx99p+hGRqnTCRm0nnc8Bjp4ZeAr3UhMnGyosFQLM=
Subject key identifier: 32:00:87:4F:9C:01:09:7F:97:67:B6:73:F5:23:82:B6:3F:E3:A9:B7
Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Certificate issuer: /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Certificate serial: 0194BCE0E3F4C0A3D446A24FF08D2EF9BA7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 15:00:42 +0000
Manifest this update: Fri 31 Jan 2025 15:00:42 +0000
Manifest next update: Sat 01 Feb 2025 15:00:42 +0000
Files and hashes: 1: 1-ndEryzCguWCGvVWWmkd8W4KbQ.roa (hash: W7EqtKjOdrRjfIUBcKhssjKWmvswGN88L1U5twVHTxE=)
2: 5fWADeIk4d10ZbIqGhJnIwZyHH8.roa (hash: QzLL6CT6LeM4dPuY4ZTi6ISO36hu50lOly24fxPuWC4=)
3: w8YbUevIQYDwprIy6H351hyQ-qs.crl (hash: cIzYsxWyagNyR2fLm/F0nlrdtq+erFYAuxN70Zpurw8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:e3:f4:c0:a3:d4:46:a2:4f:f0:8d:2e:f9:ba:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Validity
Not Before: Jan 31 15:00:42 2025 GMT
Not After : Feb 1 15:00:42 2025 GMT
Subject: CN=3200874f9c01097f9767b673f52382b63fe3a9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a6:45:30:d1:11:7e:f8:b2:8b:95:02:f1:1c:
be:d7:5e:8b:50:26:b5:2c:b9:82:cd:3f:9f:03:ba:
c5:11:1c:fd:54:2e:5b:61:a2:96:4b:32:16:f3:d0:
79:6b:ce:80:90:ed:4f:a1:15:84:d3:07:b3:94:2f:
9a:ec:57:a0:af:3e:82:3c:d2:ca:10:dc:24:0d:89:
2c:fe:43:7a:9b:fd:94:98:5f:fc:c4:82:f1:da:b5:
68:dd:ff:69:ad:3d:db:cc:e8:e3:b9:29:bf:e1:cf:
25:01:24:75:1c:24:b4:24:64:b4:55:f7:93:73:b1:
a2:2f:48:7a:0d:f8:df:f3:0b:65:f9:14:91:dc:f6:
c3:a2:cb:14:1c:fd:60:4b:78:b4:92:e0:b7:73:c4:
ea:1a:25:94:a7:54:82:33:b5:8d:11:7b:5c:bd:b4:
b1:ce:b6:d0:00:65:30:58:d8:98:3a:94:8a:68:be:
8c:9a:c9:28:e1:c8:e5:ec:7c:a3:90:78:e9:c8:ad:
2b:ab:0e:27:cd:09:fa:4a:5b:ef:9a:59:e7:63:7f:
3c:00:e4:93:7e:45:ef:71:e2:c9:59:2a:5f:90:d5:
a2:0d:4d:2f:a2:f2:90:a7:8d:6e:ce:d2:a9:ec:ef:
08:9d:5d:4c:8a:04:a9:32:f6:3a:dc:fb:25:3b:98:
eb:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:00:87:4F:9C:01:09:7F:97:67:B6:73:F5:23:82:B6:3F:E3:A9:B7
X509v3 Authority Key Identifier:
keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1c:58:dd:33:9b:db:92:75:29:5b:58:c6:85:b6:f4:69:df:
6e:a1:1a:59:27:d1:23:26:9b:3a:4c:d4:aa:f7:8f:37:81:59:
66:a2:cd:45:22:5b:b5:71:11:25:db:8d:18:67:ba:8f:29:5f:
90:4e:e8:63:4f:ef:ce:dd:29:70:f5:69:f5:cc:45:44:dc:67:
a6:dd:ca:b3:6b:5c:5e:d3:48:25:b6:79:52:2a:98:d8:37:20:
87:5d:94:b4:50:5e:e0:1a:c6:f2:d9:a7:cd:08:af:bb:0f:72:
03:95:0c:5f:80:7c:6a:a8:a6:f3:f3:0c:42:07:bf:19:9f:fe:
7a:da:4f:10:8e:c5:b1:0a:7b:fb:27:e2:85:f3:a8:46:94:81:
a0:61:25:9b:61:fa:16:a0:e7:1d:e9:f9:78:c4:26:d4:a7:ed:
98:4e:c6:1b:fb:28:d2:bf:aa:68:3a:de:42:c4:cf:a3:35:17:
ae:30:33:f3:7e:2d:49:99:c1:12:68:dd:8e:55:1e:f0:8f:97:
e5:b0:01:e2:5a:22:82:77:f3:24:f4:8c:fa:13:d1:b2:73:c0:
c9:e9:31:35:8c:34:8b:94:ec:eb:bb:09:90:8a:50:2e:77:4a:
75:98:7d:de:fe:48:d9:c2:b5:2a:3f:15:ba:52:b2:cd:b7:2b:
d8:13:97:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 18:32:13 2025 by rpki-client