Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
File: y9dF6_zsOC3yUsL3UNtkj08DSr8.mft (raw, json)
Hash identifier: GFI2lylRa4fGxnZESratzqRT6nRDG9VcXxSoSnpSkX0=
Subject key identifier: 3A:A8:FE:AF:07:AE:62:3B:6A:03:EA:A1:B6:20:8D:4D:65:97:81:DB
Authority key identifier: CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
Certificate issuer: /CN=cbd745ebfcec382df252c2f750db648f4f034abf
Certificate serial: 0194BBCE5F00C218681BB65F48D3F90CD574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
Manifest number: 0DAD
Signing time: Fri 31 Jan 2025 10:00:51 +0000
Manifest this update: Fri 31 Jan 2025 10:00:51 +0000
Manifest next update: Sat 01 Feb 2025 10:00:51 +0000
Files and hashes: 1: wDvIF8IUEQhjnYm69O7DnmCZNJY.roa (hash: AHCZUkCpuvskw07HtMA8aALHO5a1ETyk504pdPIdAIc=)
2: y9dF6_zsOC3yUsL3UNtkj08DSr8.crl (hash: S2kmsNIKTJNGfzTkTMIUT5wE5lu2cRxmo/kUEP2FyMg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:5f:00:c2:18:68:1b:b6:5f:48:d3:f9:0c:d5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd745ebfcec382df252c2f750db648f4f034abf
Validity
Not Before: Jan 31 10:00:51 2025 GMT
Not After : Feb 1 10:00:51 2025 GMT
Subject: CN=3aa8feaf07ae623b6a03eaa1b6208d4d659781db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b3:37:43:ad:a5:ae:c8:d7:3d:e5:b8:b3:a0:
af:60:37:cb:f0:46:e2:14:8e:ba:16:aa:05:af:26:
2a:5c:3f:20:54:c8:a9:f5:54:44:d5:fd:7b:68:c3:
a6:1c:63:de:6a:4e:a7:64:2d:47:37:55:a2:80:30:
cb:0a:2f:f2:c1:a4:f4:25:2a:07:f8:d8:f8:b8:5e:
50:2f:9e:c8:a3:2f:97:56:0e:1c:13:26:ae:4b:a2:
e0:8f:73:f6:b5:57:5f:fc:03:02:4e:64:da:f3:f6:
7a:ed:68:04:1a:69:0a:5c:9e:1a:d2:d3:ee:f5:3f:
ec:45:6c:a4:0f:78:02:71:0c:23:72:24:fe:6e:d7:
e9:64:51:13:a0:5f:21:f7:aa:8d:1a:a7:70:11:f9:
b3:4d:33:71:67:8c:f0:46:b7:c1:7c:78:f3:73:2c:
5b:12:08:a2:ef:36:f4:1f:e4:f2:52:c6:4a:df:20:
be:01:3a:1d:99:23:c4:fd:e5:6d:0e:26:e1:36:99:
67:56:ff:de:a6:87:5d:68:27:aa:90:57:42:de:a7:
fc:2a:31:53:78:24:5c:52:78:4d:03:10:25:f8:07:
12:7e:97:82:a6:92:db:99:e3:76:30:79:87:82:79:
ab:91:81:76:eb:a2:e6:fe:70:0c:09:cd:6f:33:0c:
0e:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:A8:FE:AF:07:AE:62:3B:6A:03:EA:A1:B6:20:8D:4D:65:97:81:DB
X509v3 Authority Key Identifier:
keyid:CB:D7:45:EB:FC:EC:38:2D:F2:52:C2:F7:50:DB:64:8F:4F:03:4A:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dF6_zsOC3yUsL3UNtkj08DSr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6b329f-f4f5-4af0-a81e-92b6796c77cc/1/y9dF6_zsOC3yUsL3UNtkj08DSr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:30:58:6a:63:07:bf:a0:2b:fe:1b:dc:46:c2:3c:49:a1:4c:
5c:43:f2:a6:56:41:df:a9:06:35:4c:ce:71:9d:bd:8b:42:17:
51:f9:d0:7b:3a:d8:99:2c:97:a4:9b:5b:49:34:be:da:a4:5b:
8a:cb:f4:25:ab:c3:9c:73:f9:05:df:cd:49:91:fb:73:73:87:
4a:fe:a1:7c:36:e6:be:76:1f:5b:17:07:4d:f3:e4:e7:06:5f:
50:95:31:b7:9c:ce:2a:a0:c8:e8:7a:c3:a2:45:d3:59:55:65:
ad:52:f4:ac:91:74:0b:3b:41:e7:02:11:e5:01:39:ac:fd:df:
19:be:65:3d:00:05:43:c0:17:6b:2f:e5:7c:8b:54:14:29:54:
ad:4a:96:ec:4d:0d:07:26:94:e9:94:7e:c9:18:c9:89:97:56:
28:8c:c7:05:bb:4d:fc:32:f5:81:60:0e:fd:c5:fd:88:c9:17:
13:9d:ba:44:59:bf:8e:1e:90:ae:a2:ca:1d:07:44:1b:83:93:
5f:64:f1:ec:f7:b3:0f:78:26:1c:f4:f2:21:c1:9e:ff:1d:c1:
45:22:1d:0c:bf:6e:2e:13:b4:24:06:14:d4:4c:97:a1:12:78:
2b:70:0b:8a:a5:85:99:0a:21:33:97:54:60:b2:04:e5:c4:8d:
cf:e3:0f:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:37:18 2025 by rpki-client