Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
File: mYS56xIiNxEcH4yldwfscwcpHug.mft (raw, json)
Hash identifier: heBQGJimqspke2o9hYUQWc5JwA97Ga2C7BbaU+hm/DI=
Subject key identifier: 76:75:4F:5B:D0:89:87:D7:33:A5:5B:17:55:88:63:94:89:16:D5:E6
Authority key identifier: 99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
Certificate issuer: /CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Certificate serial: 0194BD85B9D070D5DE4C69290A9B91D234F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
Manifest number: 1430
Signing time: Fri 31 Jan 2025 18:00:45 +0000
Manifest this update: Fri 31 Jan 2025 18:00:45 +0000
Manifest next update: Sat 01 Feb 2025 18:00:45 +0000
Files and hashes: 1: 6xQaOng6ybJiigzf2XvWmzrMXU4.roa (hash: VWLbjjUJx9s0aleI0gYr1/W1oVoltzBATX0SfpaTSw8=)
2: XEpy5lCOl0Tmub4xGBtkQEupj7o.roa (hash: VFCRN96ZupXuhJWonAUO0kRSMoyUuFboGTCKurSs1xw=)
3: mYS56xIiNxEcH4yldwfscwcpHug.crl (hash: KHh5bSVHOkPUPR1z08YSAlWOm84DKIK0tiqLTHibCGc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:b9:d0:70:d5:de:4c:69:29:0a:9b:91:d2:34:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9984b9eb122237111c1f8ca57707ec7307291ee8
Validity
Not Before: Jan 31 18:00:45 2025 GMT
Not After : Feb 1 18:00:45 2025 GMT
Subject: CN=76754f5bd08987d733a55b17558863948916d5e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5f:eb:d4:bb:60:13:c2:93:a8:ae:3e:09:a3:
09:c7:06:80:09:b6:2a:2a:89:45:2d:36:b4:20:ac:
d5:64:ba:4b:28:e6:ee:5f:94:82:bd:83:37:7d:2e:
3f:ba:da:c0:6d:98:19:7f:e2:f9:51:e2:47:38:8b:
bf:36:3e:77:64:69:13:91:29:f9:ee:df:8e:53:6d:
c2:20:63:29:81:4a:21:19:b8:5d:21:1b:d3:56:49:
6a:16:23:63:6d:1b:c5:fa:90:86:7b:b5:98:3a:56:
0a:e8:19:22:11:cb:04:86:18:3a:67:78:49:3e:5f:
1e:41:3f:c0:00:b0:84:8b:24:55:38:b0:16:58:ee:
3a:88:d7:48:e4:ae:d7:b1:5f:67:40:fd:84:35:68:
bb:2f:b1:a6:98:9c:60:91:2a:d5:4d:ca:8c:9f:e7:
b9:ed:20:73:37:b1:9c:40:f4:71:16:03:6d:64:95:
c2:ec:c5:3d:83:d9:2c:f7:ad:1f:4d:78:d3:c0:fc:
93:06:02:cc:28:d6:20:5e:18:33:89:63:bd:15:09:
91:dd:75:63:13:45:2f:12:18:38:28:ec:1c:93:a0:
4d:f1:b7:cb:37:94:fc:4a:4b:6b:a8:d1:62:5a:eb:
25:09:47:8b:1f:a5:e8:f3:6d:1c:57:6a:29:b8:8c:
81:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:75:4F:5B:D0:89:87:D7:33:A5:5B:17:55:88:63:94:89:16:D5:E6
X509v3 Authority Key Identifier:
keyid:99:84:B9:EB:12:22:37:11:1C:1F:8C:A5:77:07:EC:73:07:29:1E:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mYS56xIiNxEcH4yldwfscwcpHug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/b9c1d7-2aed-4696-80a7-d5abf5031d21/1/mYS56xIiNxEcH4yldwfscwcpHug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:98:6d:a1:d7:96:85:51:b8:c7:f8:de:78:57:46:4d:07:6c:
ed:e4:80:bb:94:20:c1:d1:bb:54:f3:ad:51:aa:27:e1:31:3b:
79:fd:28:1e:bb:d8:35:41:9f:84:b5:c3:31:0b:a3:29:e2:36:
24:76:45:fa:5d:5d:13:d8:55:d9:85:3f:0f:f6:15:81:10:48:
ac:0f:2c:90:24:9f:3d:20:13:3e:0a:cc:ef:b6:ec:fb:0f:01:
61:e8:8d:20:55:a0:55:6e:cb:2f:9f:48:76:2c:bd:4b:53:f6:
02:c3:df:c0:d5:88:c8:43:88:5d:13:77:aa:b0:fd:21:97:82:
cb:2b:0b:80:50:0f:51:26:8a:a2:19:d9:c1:e2:d3:aa:aa:0e:
7a:ff:ad:c1:4c:82:69:d7:ee:60:cd:7c:e2:8d:8b:db:9e:bb:
96:5a:00:2b:0e:f7:9b:8a:66:94:fb:b9:cc:34:d2:80:a7:48:
81:0e:aa:b3:ef:2e:7b:b8:0c:b3:3c:48:95:87:ac:98:88:66:
62:05:49:b9:6a:42:ad:45:e4:ff:82:7b:4b:65:59:5b:39:a8:
2b:c5:f7:0b:d2:40:3e:9b:6e:b3:8b:33:ec:c9:be:50:45:4f:
fa:4d:d6:24:ab:5d:f6:99:8f:92:46:20:35:17:d1:d7:3c:5d:
4b:5b:8d:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:53 2025 by rpki-client