Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
File: Y4g6eXidn2WBUpLxjUmAupxe0iE.mft (raw, json)
Hash identifier: wF819XeMbLSbSWG1DZ1T6OT6tsZIJyOGj3e/IsXhOHQ=
Subject key identifier: ED:96:1B:7B:EB:8B:57:0A:C4:BF:7C:23:1E:D4:C8:5C:5D:EC:F5:2E
Authority key identifier: 63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
Certificate issuer: /CN=63883a79789d9f65815292f18d4980ba9c5ed221
Certificate serial: 0194BC04A20D17AAB631B227350533A153E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 11:00:07 +0000
Manifest this update: Fri 31 Jan 2025 11:00:07 +0000
Manifest next update: Sat 01 Feb 2025 11:00:07 +0000
Files and hashes: 1: AYWfSZfm3-m6tTmXQ7ScTVje9jw.roa (hash: jozIBgSrKgoY+kja8mOk3zf+5OHOQyudAHt7Y1IjLfc=)
2: Y4g6eXidn2WBUpLxjUmAupxe0iE.crl (hash: 8Yt7C2+kDpvmGvYNG4Si2RlmjenY3dwJXoxkgSorhww=)
3: biZ-PgxYb414M_0ExkvqodzdxpA.roa (hash: gdhB0S0OkmMjabrUiIcvLE6RonkDcPiASoyoHfZiC4s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:a2:0d:17:aa:b6:31:b2:27:35:05:33:a1:53:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63883a79789d9f65815292f18d4980ba9c5ed221
Validity
Not Before: Jan 31 11:00:07 2025 GMT
Not After : Feb 1 11:00:07 2025 GMT
Subject: CN=ed961b7beb8b570ac4bf7c231ed4c85c5decf52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ca:b6:01:75:ad:1f:dc:87:0c:12:25:62:fb:
c9:66:64:a0:10:31:5a:0d:bf:fd:46:55:0f:43:31:
1d:ed:24:3c:66:f3:37:53:61:8f:4c:0f:15:4c:1a:
b0:f3:64:00:36:01:fb:12:10:1a:b1:08:a7:a0:fa:
ac:48:76:7e:11:b9:df:9e:5c:29:58:b4:7d:93:f1:
fb:f2:1b:54:63:b3:1b:f4:82:91:bd:a4:c1:64:c8:
b2:dd:ea:ac:6a:bd:0a:3c:ac:a8:e4:e2:77:46:26:
37:73:b3:c8:05:74:19:80:65:80:8d:28:18:45:1f:
07:59:7b:29:31:9c:f2:5a:3b:5e:1f:50:8a:aa:be:
c5:01:1b:07:8c:27:55:bf:e9:e5:2a:e5:aa:a1:14:
71:ba:8f:fd:74:0a:94:38:cd:7c:7b:ca:5e:b5:04:
1e:37:72:90:1f:d8:8b:1a:26:15:57:2b:34:c5:0a:
4b:40:1c:0d:d7:24:f7:33:94:2a:b6:43:26:f3:8d:
ce:43:04:37:14:fc:da:bd:31:17:db:e7:37:33:99:
7f:2a:0e:7f:4b:d2:47:0a:c5:27:88:a4:19:a9:f2:
17:a9:06:89:cc:97:e5:c8:16:39:c7:0b:52:d2:95:
b5:d0:65:da:32:34:21:81:0d:2c:5a:4b:f6:f7:6f:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:96:1B:7B:EB:8B:57:0A:C4:BF:7C:23:1E:D4:C8:5C:5D:EC:F5:2E
X509v3 Authority Key Identifier:
keyid:63:88:3A:79:78:9D:9F:65:81:52:92:F1:8D:49:80:BA:9C:5E:D2:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y4g6eXidn2WBUpLxjUmAupxe0iE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ca0228-57ee-4f65-962f-35d0595e12f0/1/Y4g6eXidn2WBUpLxjUmAupxe0iE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:24:0e:22:95:fc:b3:e5:af:b5:df:df:e5:ae:f7:51:96:a2:
47:cc:de:c1:e3:ee:a8:90:e8:a5:a1:36:1e:74:8c:4e:65:fe:
3d:a1:c6:7d:16:a6:ce:51:14:63:c9:b4:7d:44:ac:88:78:7f:
45:03:89:3d:a6:67:14:91:22:47:3d:c0:6e:58:10:cb:3c:bd:
e8:71:43:2e:ca:10:8d:90:91:8f:55:18:87:ab:3c:dd:5b:28:
44:03:9a:f4:94:fc:67:27:b9:5f:11:6e:7b:88:ab:46:43:00:
83:a0:6e:59:59:60:69:16:3d:b6:e9:80:7a:85:16:f0:fb:14:
87:41:e1:25:ad:fe:45:62:77:e7:9c:6c:96:4c:cf:da:48:bd:
1f:d2:17:b6:67:87:1c:06:54:d8:af:db:4d:ac:30:09:bd:22:
3f:42:b1:ac:fe:25:ab:5a:26:0c:f1:cf:b5:ed:f7:43:97:57:
44:1a:0b:65:c5:25:f5:16:62:e0:64:5f:a5:b0:9f:52:57:43:
a3:97:e6:a8:34:4b:c0:dc:3d:ee:82:da:b1:1f:47:34:54:f9:
d4:13:30:50:05:e8:ca:cb:e5:0a:18:b2:29:a4:51:f0:a4:37:
7d:be:de:e3:91:3a:a7:a6:48:41:dc:38:57:a9:fe:cb:54:70:
84:71:87:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:27:06 2025 by rpki-client