Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
File: FyKJy7gXn9846fUyyc1ykbT1xC0.mft (raw, json)
Hash identifier: 9OM1PknMiOA/letSFk9qndjyCHmfeKgAI+OhYj3O6Wg=
Subject key identifier: 5A:98:04:FE:BE:C9:58:71:4D:5D:75:41:7D:F3:BA:0E:2F:EC:2B:F4
Authority key identifier: 17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
Certificate issuer: /CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Certificate serial: 0194BD4E64A97FC157BDC1605ADB25E8C613
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
Manifest number: 0A1A
Signing time: Fri 31 Jan 2025 17:00:18 +0000
Manifest this update: Fri 31 Jan 2025 17:00:18 +0000
Manifest next update: Sat 01 Feb 2025 17:00:18 +0000
Files and hashes: 1: FyKJy7gXn9846fUyyc1ykbT1xC0.crl (hash: iglJTzghYLfw0HPPCjI5xO/O/G/+Z85TPmUEBaN9a7s=)
2: ejP-cqngAl2WeEUv13m8XETr7WY.roa (hash: LoPRyo03v+sBUkzNnzQYBljjeo3cKGIRbIW1IcB6h4c=)
3: jRgLBU0x04bcrCqoAsjc1LU66SE.roa (hash: nfzJrFphVt8WQGlI/qwAihviviH5Ky8UyaUYyOFvqY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:64:a9:7f:c1:57:bd:c1:60:5a:db:25:e8:c6:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=172289cbb8179fdf38e9f532c9cd7291b4f5c42d
Validity
Not Before: Jan 31 17:00:18 2025 GMT
Not After : Feb 1 17:00:18 2025 GMT
Subject: CN=5a9804febec958714d5d75417df3ba0e2fec2bf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:56:00:9a:93:39:51:95:47:a1:cb:09:5a:4a:
2f:c9:79:2d:ef:7b:fc:47:30:1c:3b:bb:4f:39:b5:
f4:50:d6:3d:68:80:f6:73:8a:36:d3:84:f8:4b:37:
e9:1b:c8:14:d0:26:01:2f:b2:e2:15:8f:57:94:89:
5b:00:20:07:8a:4f:f6:5b:5a:c8:38:80:71:48:88:
c2:43:27:f4:47:8f:48:04:3d:03:b6:01:cc:6f:e5:
f9:73:11:a6:22:a2:89:05:d8:73:54:ac:15:45:d8:
20:f8:cd:47:42:45:9c:14:0d:33:fb:d0:23:a9:69:
17:2b:46:9e:f3:58:24:16:ee:9f:3a:c3:6a:c2:2f:
1c:ec:34:e2:7e:ba:42:ca:8c:64:cc:b6:5d:f8:79:
de:7a:e2:1f:72:b3:b5:90:2e:04:a5:08:3d:46:a0:
c8:28:5d:aa:80:33:90:04:e9:c8:28:ef:0f:81:97:
ad:23:11:d4:87:90:27:d5:b2:4e:b3:20:56:c7:1b:
72:f3:57:63:3c:76:ea:53:58:fe:2c:64:29:94:c5:
4c:72:ca:70:ae:73:8e:dd:a9:86:c9:63:b8:e6:15:
2e:32:85:57:97:22:34:7a:01:68:d2:99:90:96:16:
7c:af:51:48:e8:66:12:f9:31:bd:69:9b:26:74:02:
a0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:98:04:FE:BE:C9:58:71:4D:5D:75:41:7D:F3:BA:0E:2F:EC:2B:F4
X509v3 Authority Key Identifier:
keyid:17:22:89:CB:B8:17:9F:DF:38:E9:F5:32:C9:CD:72:91:B4:F5:C4:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyKJy7gXn9846fUyyc1ykbT1xC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/289e38-ac93-4e8b-a08b-f74baa12fdc9/1/FyKJy7gXn9846fUyyc1ykbT1xC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:2c:a0:55:64:e5:95:b2:c8:f4:d2:7a:e2:de:96:b4:35:fd:
83:ed:27:ac:19:1e:8d:aa:f0:81:85:7e:83:3a:ed:23:e6:6a:
6d:85:9b:a1:e3:db:f2:65:98:77:06:d4:aa:cb:f4:cc:2a:aa:
ff:e8:e9:ea:a8:cd:fd:a4:22:17:14:78:1c:e0:ed:ab:da:aa:
84:90:15:39:7d:54:7c:78:1e:8c:16:87:1d:d1:13:0f:db:8a:
d7:54:0d:97:fd:f9:bd:40:55:84:ab:57:0c:46:9f:e5:66:15:
d2:f7:2f:f7:8d:c6:9a:8c:a2:a8:ad:9a:d0:d0:60:95:ee:3a:
6a:a1:e1:50:cc:8c:d2:51:b2:75:ad:7e:7a:94:ba:2b:4a:32:
d0:ef:79:b3:78:31:64:ce:d3:33:62:52:ef:b8:62:11:05:1e:
d6:7f:5d:6e:42:11:d8:bd:f2:9a:fb:34:9a:01:20:4e:2f:07:
2d:1c:c3:73:17:39:e5:04:4a:e1:1a:3a:8c:3f:f4:42:29:99:
1f:39:94:78:7f:e4:79:32:af:60:91:85:d8:d5:f8:7c:c3:f7:
bd:e9:ce:d5:89:fd:c4:ec:d8:de:8d:09:54:54:17:c5:84:e2:
2a:5b:d7:15:c7:b7:c4:34:b0:45:67:1e:c7:fd:f3:08:2b:28:
b0:67:cb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:18:14 2025 by rpki-client