Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
File: YdnzrFCGTRj_Jokzx04qia7GEJ0.mft (raw, json)
Hash identifier: 5XzaIevDLvWuwQo9ECkMVI6+x/2wLXdcq/vF0gaZgrM=
Subject key identifier: 71:A6:65:1E:35:F6:42:95:B5:37:F0:88:95:51:88:C3:0B:A7:17:FA
Authority key identifier: 61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
Certificate issuer: /CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Certificate serial: 0194BBCE66A20896434B7A101B2FEE1E7C0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
Manifest number: 0165
Signing time: Fri 31 Jan 2025 10:00:53 +0000
Manifest this update: Fri 31 Jan 2025 10:00:53 +0000
Manifest next update: Sat 01 Feb 2025 10:00:53 +0000
Files and hashes: 1: Q0gUuxATATDf6JEQ9fzt1u3IZsc.roa (hash: 3y/S39XmNPx0DoVA3l0EHWQrU4S+Z88s+G6ph2XRAwc=)
2: YdnzrFCGTRj_Jokzx04qia7GEJ0.crl (hash: L204f5olKVQJxNkRs2W5h27TD/S+b9/S+JQW7BYJboY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:66:a2:08:96:43:4b:7a:10:1b:2f:ee:1e:7c:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61d9f3ac50864d18ff268933c74e2a89aec6109d
Validity
Not Before: Jan 31 10:00:53 2025 GMT
Not After : Feb 1 10:00:53 2025 GMT
Subject: CN=71a6651e35f64295b537f088955188c30ba717fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bc:78:4d:94:9c:8f:69:47:d0:71:7c:cb:84:
18:48:8e:00:f4:0f:cf:08:dd:a3:ea:1c:25:14:c2:
cc:a0:7a:17:34:d4:17:6e:7c:bb:1f:c5:29:b7:75:
8d:1e:76:01:8b:6e:99:ff:77:7d:b2:76:bc:2b:5d:
5c:23:9e:1d:73:aa:73:37:cc:5e:9a:bd:e9:8d:2e:
6b:96:19:b4:ea:f7:08:c0:81:22:b8:86:b0:77:2b:
b2:5c:e1:d1:71:f6:7b:fe:04:b4:b8:01:1c:50:f7:
86:a0:21:35:46:73:5f:58:f2:2b:b9:24:df:5b:a2:
c1:37:b3:2a:60:ef:cd:d7:6a:75:05:b8:44:9c:fb:
79:26:0d:43:1a:bc:ef:a0:54:b8:9e:53:e1:97:1d:
87:6e:bb:25:af:72:84:c8:02:a7:d0:64:58:c4:da:
a1:13:a9:3e:07:f6:38:d7:a1:c2:cc:19:a2:7d:00:
73:e3:1a:e3:dd:b1:96:a3:30:a6:3a:76:2c:2a:b4:
26:42:f8:96:f5:f8:d6:8a:cf:72:e5:d1:17:90:f6:
24:94:db:44:ff:f1:91:ee:50:ef:d9:8e:03:71:a2:
18:94:8c:6e:6f:b3:0a:14:81:ad:99:39:e4:00:9f:
f1:dd:47:3a:e5:7f:0c:2f:56:8b:66:1f:5f:52:59:
8d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A6:65:1E:35:F6:42:95:B5:37:F0:88:95:51:88:C3:0B:A7:17:FA
X509v3 Authority Key Identifier:
keyid:61:D9:F3:AC:50:86:4D:18:FF:26:89:33:C7:4E:2A:89:AE:C6:10:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YdnzrFCGTRj_Jokzx04qia7GEJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/32c807-30ae-4b22-905f-dc33eaa10d28/1/YdnzrFCGTRj_Jokzx04qia7GEJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:e8:1e:e5:4a:05:d4:19:8f:4f:83:84:31:2a:02:b6:a9:ef:
b0:fe:a8:b4:19:98:a1:1d:d2:97:db:82:73:86:f4:f2:fc:91:
52:c7:c5:8f:e5:7e:36:90:71:6c:6b:60:21:4c:29:0a:ed:0a:
56:f8:68:16:e6:8b:5f:49:26:f2:c1:1c:6f:2c:80:8c:b4:87:
bb:b5:32:d6:f8:db:f2:a7:cb:dc:a0:96:d4:a8:ef:2e:ec:fe:
1e:a5:ad:0a:73:05:fc:eb:72:15:42:80:d7:1c:7e:fc:ea:69:
21:19:ac:b5:59:78:07:10:11:17:c9:37:ad:96:0e:15:3d:77:
4b:79:e4:87:b3:ce:96:84:1d:e1:1a:c3:d1:34:6f:93:ed:e3:
ce:bd:08:88:a5:f6:95:b6:54:17:7d:05:4f:53:17:4a:90:43:
7e:aa:0c:1e:5e:5a:33:b6:6c:63:2d:a8:72:90:27:e5:31:cd:
be:6d:22:3a:2f:1b:27:d4:bc:39:96:53:24:d1:36:aa:bd:79:
e7:76:06:cc:12:0a:64:e4:49:b9:89:03:cc:ac:40:3c:75:15:
83:46:d1:9d:47:66:4d:e0:97:c2:ce:65:37:4e:dc:20:da:12:
c1:7d:02:2c:55:2d:8b:62:b2:b9:18:de:9c:8a:c0:a3:1a:ad:
46:02:60:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:00:34 2025 by rpki-client