Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
File: yRjEAZR0zIHsZh_OZObJOJchlto.mft (raw, json)
Hash identifier: 89M+8I5XkjWqBXMJVx1ulRbAr9UszJ7Zg0qqXB0QOVI=
Subject key identifier: D4:0D:91:E6:B3:F0:C6:B8:D7:FE:22:58:B9:14:E8:8A:CC:C3:97:A1
Authority key identifier: C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
Certificate issuer: /CN=c918c4019474cc81ec661fce64e6c938972196da
Certificate serial: 0194BCE06BB9BEE133F1D4D8D16A1255F464
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
Manifest number: 03CD
Signing time: Fri 31 Jan 2025 15:00:11 +0000
Manifest this update: Fri 31 Jan 2025 15:00:11 +0000
Manifest next update: Sat 01 Feb 2025 15:00:11 +0000
Files and hashes: 1: Jsgd2QMS4v8iKbqKY7mpL6rgdrw.roa (hash: zUKbiJyZKBDLVjXxF3gSP5G2WQgNlz6YzfL6risxYY8=)
2: yRjEAZR0zIHsZh_OZObJOJchlto.crl (hash: dlsjiVYNQZhNDnGIbFM395+4yZiknKOF3VY/w5C90uc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:6b:b9:be:e1:33:f1:d4:d8:d1:6a:12:55:f4:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c918c4019474cc81ec661fce64e6c938972196da
Validity
Not Before: Jan 31 15:00:11 2025 GMT
Not After : Feb 1 15:00:11 2025 GMT
Subject: CN=d40d91e6b3f0c6b8d7fe2258b914e88accc397a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:19:db:36:d1:6b:06:f1:7a:88:a4:5d:34:02:
f6:2c:f3:77:b9:32:0a:1b:34:5f:1e:4c:be:c5:dc:
25:3f:e6:b5:16:33:9e:b1:d5:0a:a8:ca:d9:e0:68:
0d:9e:1c:f4:7e:f2:45:36:7a:67:47:73:ef:55:57:
70:a4:c6:54:12:20:c5:fb:d5:11:0a:56:1d:f8:c6:
e4:3d:55:98:3f:37:0d:19:dc:e4:bf:b2:e3:57:b5:
86:1b:b3:f4:d5:91:2e:ea:ca:fc:ae:30:5c:7f:62:
1e:fc:a2:c9:3a:e3:f8:cc:4c:2a:a0:9f:0b:7d:98:
d7:81:de:27:59:6c:88:f0:8a:0a:ee:19:22:19:be:
1a:b9:1d:15:46:e2:76:87:0a:38:25:18:40:de:aa:
17:a0:69:87:e5:3c:97:3b:87:47:f3:5a:17:d8:24:
6d:91:a5:90:52:cc:32:df:b3:a5:e8:59:a3:d4:54:
a3:ba:e9:8b:73:37:21:24:29:42:87:1c:15:74:83:
80:4f:60:2e:fa:90:7c:10:b6:e1:38:df:29:2d:fe:
71:31:f5:2b:d6:3b:20:d6:6c:6b:e5:96:df:12:66:
60:4e:b3:3a:13:e5:89:2d:32:bc:d0:c3:ae:b2:d9:
96:d2:c9:f6:44:f6:c1:4f:78:b8:b9:1f:9c:cf:df:
f2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:0D:91:E6:B3:F0:C6:B8:D7:FE:22:58:B9:14:E8:8A:CC:C3:97:A1
X509v3 Authority Key Identifier:
keyid:C9:18:C4:01:94:74:CC:81:EC:66:1F:CE:64:E6:C9:38:97:21:96:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRjEAZR0zIHsZh_OZObJOJchlto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/296852-a8fd-48e5-8dd6-8abcbb65c621/1/yRjEAZR0zIHsZh_OZObJOJchlto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:ec:41:47:82:4e:f9:7b:cf:b5:ed:ae:a2:81:1b:34:80:81:
14:7b:63:7c:96:86:3a:9f:17:12:3e:8a:76:ab:10:20:0f:9c:
68:25:44:da:2f:25:b9:0c:13:2e:c8:22:67:b7:0b:a5:54:4f:
62:f5:33:d6:a9:15:69:87:b2:b5:9b:00:bf:1a:1a:fd:8b:6c:
f0:fa:c6:50:34:c1:fd:70:fe:ef:d5:a0:36:e5:ac:66:b2:07:
af:1a:9f:2f:bc:28:f1:ea:5d:f5:e8:28:d4:d1:10:66:32:64:
83:4e:5f:25:89:7a:6a:e0:84:37:bf:54:08:e7:f7:09:a4:13:
67:87:d1:d0:6b:3f:f0:59:51:53:41:83:07:11:56:a9:3c:72:
45:a2:20:49:46:95:f8:b3:96:35:39:6a:06:01:34:48:49:5e:
89:a0:82:ae:7a:0b:4e:f2:90:d4:61:ec:af:22:f9:16:24:4f:
d4:53:36:e2:cf:09:0e:0b:c7:33:2e:58:d6:4e:3c:89:dc:ab:
8e:b8:73:69:08:c4:c0:73:06:d7:51:5d:97:83:46:70:15:ed:
d1:5f:91:4b:43:fc:1e:4f:a4:9a:12:77:93:c5:ff:20:73:29:
7c:3f:4e:6d:26:47:3a:86:96:cb:cb:dc:56:2e:7d:e3:bc:44:
02:42:e0:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 05:46:01 2025 by rpki-client