Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
File: YwITq6Hqkoue0ySR3puhBGSwY2w.mft (raw, json)
Hash identifier: dheRsdREhjFVSmJ0RgBwYuoHtzsXfVYDzTmIjcYYAtc=
Subject key identifier: 20:DF:08:1E:8C:48:32:03:59:0C:61:51:EA:A6:F1:4D:50:04:66:80
Authority key identifier: 63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
Certificate issuer: /CN=630213aba1ea928b9ed32491de9ba10464b0636c
Certificate serial: 0194BC3C3F5E35026E39DA9F183322A28D33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:52 +0000
Manifest this update: Fri 31 Jan 2025 12:00:52 +0000
Manifest next update: Sat 01 Feb 2025 12:00:52 +0000
Files and hashes: 1: 6ZqvxOIku_49tBv2G-O9_p-5hVM.roa (hash: TYPoYRQa9KHLM0V6FPsrIT1zwnhyRnA4uELbenS3VGM=)
2: YwITq6Hqkoue0ySR3puhBGSwY2w.crl (hash: mpH95bWhqRgc/7Gs3JpKZOFTU6yMejimpjwTL4umaPA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3c:3f:5e:35:02:6e:39:da:9f:18:33:22:a2:8d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=630213aba1ea928b9ed32491de9ba10464b0636c
Validity
Not Before: Jan 31 12:00:52 2025 GMT
Not After : Feb 1 12:00:52 2025 GMT
Subject: CN=20df081e8c483203590c6151eaa6f14d50046680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d7:04:f4:31:94:72:b6:24:33:3c:3f:7c:12:
9e:6e:a7:b5:36:69:86:fa:b4:e6:91:a3:fa:f9:cb:
cc:ed:1f:0c:77:36:f0:47:9b:5d:4d:5b:f5:62:98:
4f:e3:98:cc:13:01:94:13:cb:dc:7a:d0:43:e8:9f:
7c:45:c0:72:9f:49:a0:1f:74:00:41:f6:aa:55:ba:
1c:15:71:da:05:c8:2d:8f:bb:51:f3:9b:0f:7d:02:
87:7e:f5:93:85:99:b3:2b:d1:75:3b:47:2c:d1:74:
63:16:28:0e:f0:dd:8f:77:9c:68:88:f2:71:ea:d9:
0f:c3:b6:50:73:27:49:87:9e:b1:d4:0d:d2:d5:c8:
cf:26:cc:79:c4:53:d5:6f:49:47:17:6e:af:1c:4c:
78:90:fc:8f:84:12:a1:a3:b1:f8:54:5f:8b:85:59:
88:78:f1:21:60:f1:77:98:85:8a:f0:b2:38:c6:25:
0f:6c:a7:1a:da:46:a8:70:37:c7:08:20:ac:1c:86:
06:c4:de:c2:88:23:45:48:ee:7e:c0:2b:cc:fa:1e:
01:0a:ff:2e:13:58:ec:8d:23:9a:3e:08:b6:b1:90:
cd:7c:33:ba:bf:f6:6f:9c:5a:1c:1f:85:ae:59:d2:
87:ed:b1:dc:4d:26:27:08:41:1c:34:06:4d:b3:af:
3c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DF:08:1E:8C:48:32:03:59:0C:61:51:EA:A6:F1:4D:50:04:66:80
X509v3 Authority Key Identifier:
keyid:63:02:13:AB:A1:EA:92:8B:9E:D3:24:91:DE:9B:A1:04:64:B0:63:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YwITq6Hqkoue0ySR3puhBGSwY2w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/accc76-e123-45b1-96b4-8f4c59ec20be/1/YwITq6Hqkoue0ySR3puhBGSwY2w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:09:d6:48:df:75:78:67:b3:d5:c2:c8:3d:ac:5b:33:a7:f8:
9b:93:7e:ee:12:e1:42:2c:e1:5e:42:7b:b6:08:ae:17:62:81:
64:14:ae:12:57:31:79:9a:db:8c:00:2c:e8:f2:66:9e:86:25:
3d:86:9d:c5:88:45:de:ce:49:42:84:d8:81:b1:3a:ce:6a:36:
79:99:8f:dc:7e:23:6e:38:68:69:92:a4:86:19:c6:b2:60:34:
19:a4:9e:e8:4f:2a:81:6e:48:3c:de:d0:2b:6d:3b:04:e5:d4:
26:98:d1:98:3c:23:0b:01:16:9d:37:b5:03:ec:07:2c:2d:b7:
df:27:2a:46:85:36:3c:0e:23:67:dd:68:af:4e:56:56:41:a6:
f6:f8:4e:a8:16:f0:e0:1b:e1:d6:e8:b0:10:36:29:ef:d5:92:
d2:05:f3:82:38:67:14:30:ef:f7:96:7b:00:10:4a:6e:6e:21:
16:e3:d9:14:e8:7e:c8:29:ef:6e:79:3b:21:b2:57:05:e1:f0:
df:b4:c1:ac:d1:ad:33:1d:a3:fa:d6:21:61:cc:66:9b:1e:99:
6a:19:cd:00:8d:99:58:1d:8c:7f:81:7e:51:63:b6:c3:c3:a7:
c0:bd:41:5b:13:09:c5:67:41:b1:4f:77:03:8a:0c:b3:7b:a1:
88:98:c5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 08:09:55 2025 by rpki-client