Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
File: p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft (raw, json)
Hash identifier: J+xk6X8/vXN/CNCrvIZlSYALvrEXvNVMLTEO10acbjo=
Subject key identifier: 3F:0E:08:9C:59:DF:44:60:2C:9D:12:C9:DD:A8:90:70:6E:18:21:5B
Authority key identifier: A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
Certificate issuer: /CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Certificate serial: 0194BCA9F096858B0AD125D7355332CBA6A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
Manifest number: 0523
Signing time: Fri 31 Jan 2025 14:00:41 +0000
Manifest this update: Fri 31 Jan 2025 14:00:41 +0000
Manifest next update: Sat 01 Feb 2025 14:00:41 +0000
Files and hashes: 1: p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl (hash: 5u1SOXRjpm09jc6HC2aOJl0ArkBzrhWkn3YV/aRa/us=)
2: sJgvME5bJ6yVOF59D9xKTp2vpfs.roa (hash: RFFMtoYHpJBnhJPcD6pM/r00V/xv6R7sQSuEQXzi4Ow=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f0:96:85:8b:0a:d1:25:d7:35:53:32:cb:a6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7f62916197f7796cec578ea4352fae4ef89aec2
Validity
Not Before: Jan 31 14:00:41 2025 GMT
Not After : Feb 1 14:00:41 2025 GMT
Subject: CN=3f0e089c59df44602c9d12c9dda890706e18215b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9e:09:cc:85:bd:8a:ae:f2:c5:f3:25:0e:0b:
08:59:9e:90:89:12:d8:79:18:86:ff:c7:ef:1a:4b:
23:ea:01:f4:7c:92:29:73:b2:e0:ee:72:48:27:33:
ec:6c:a8:59:2d:2e:dc:61:8d:89:e4:99:50:c7:2a:
4a:a0:ef:c5:46:f8:89:95:36:56:ba:0f:8a:fe:62:
16:21:e2:99:ca:7d:59:1d:e8:6b:5e:51:a3:5e:f4:
53:4f:1d:38:c2:68:41:39:83:8e:a5:07:b3:5c:19:
c0:88:2c:d6:d4:bf:de:a0:72:5c:c7:d9:0a:f4:75:
f3:cc:44:fb:3c:62:68:f7:90:ff:4d:de:5d:98:d9:
8c:b7:95:b7:04:7f:1f:2f:55:ed:c9:19:24:ae:e6:
56:c8:6c:94:00:08:dd:63:24:ad:56:48:71:e1:fc:
ae:30:d1:4d:4f:6b:2f:f9:0f:35:0d:7a:32:81:cb:
88:7e:2b:0d:c5:14:40:e6:4d:53:28:b1:88:ba:cd:
13:1a:7b:45:7c:1c:e8:55:39:86:94:68:ce:ab:f0:
b7:fd:0b:55:9c:a7:bb:ed:80:27:31:d1:8d:46:8e:
3d:15:e1:c3:ca:05:70:1b:cd:29:92:e2:43:0a:5e:
5e:d5:c9:dd:38:53:62:41:3a:21:99:61:e0:6c:b0:
8f:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:0E:08:9C:59:DF:44:60:2C:9D:12:C9:DD:A8:90:70:6E:18:21:5B
X509v3 Authority Key Identifier:
keyid:A7:F6:29:16:19:7F:77:96:CE:C5:78:EA:43:52:FA:E4:EF:89:AE:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_YpFhl_d5bOxXjqQ1L65O-JrsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/b71ca7-5070-4bcc-a00d-ec97f18a794a/1/p_YpFhl_d5bOxXjqQ1L65O-JrsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:1b:06:6b:c7:a6:ad:7f:5e:d6:ec:ad:26:a3:ed:8a:b2:88:
91:4e:0f:1b:95:3a:63:4b:6c:4c:e3:6b:ec:cc:1b:44:bc:d7:
08:fb:48:bd:0b:9e:07:8b:19:77:bd:a6:99:cf:bd:79:42:4f:
cc:1f:50:8e:10:66:ca:56:af:3a:27:d9:ff:c9:b3:08:da:46:
bc:b4:bd:33:54:b5:4f:4d:6e:f1:f1:16:0f:03:9b:fd:e4:2e:
f2:b2:e8:eb:f6:83:9f:10:40:64:30:3f:f3:10:89:b1:37:60:
dd:5f:8d:4e:dd:2c:97:a4:a5:37:28:7d:9d:68:11:da:86:98:
1e:a0:34:70:7a:e5:75:fc:09:e7:67:27:6d:c3:36:68:e1:a0:
38:7b:fe:0b:5a:02:c5:30:9e:35:0b:b1:d2:07:a6:bf:63:ab:
11:48:f4:63:1a:f7:58:27:10:3e:b8:45:17:6a:33:6a:f3:64:
1d:06:c1:cd:66:2c:d7:36:08:41:02:99:bc:2a:bf:e1:c9:4d:
74:20:b1:57:56:da:68:b4:27:e4:80:1a:82:01:60:21:2a:1b:
b2:bc:60:3c:3a:05:c5:24:62:e1:6b:9c:f2:12:5a:57:c6:16:
b9:75:b9:63:5f:19:26:d7:c8:51:c2:96:37:68:18:1f:45:aa:
92:b5:39:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:24 2025 by rpki-client