Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
File: mfCyyNezyhPFnFM3LyXiAsharcU.mft (raw, json)
Hash identifier: OiAmsBoZz5CHodlmAEkZiLG33pmQjLIZAh62G3vQgY8=
Subject key identifier: 7A:98:57:E3:24:D7:5E:34:EF:BA:97:FF:77:B8:AE:3F:E9:93:02:BC
Authority key identifier: 99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
Certificate issuer: /CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Certificate serial: 0194BD8558E8424222F494DF99F5FA109252
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
Manifest number: 0730
Signing time: Fri 31 Jan 2025 18:00:20 +0000
Manifest this update: Fri 31 Jan 2025 18:00:20 +0000
Manifest next update: Sat 01 Feb 2025 18:00:20 +0000
Files and hashes: 1: mfCyyNezyhPFnFM3LyXiAsharcU.crl (hash: /XTHaQQ2uRMVj2WqeOrLgVHReWb8tM8MEUNDNHUEBNw=)
2: oVf5pbd8qfOWaMtymVg3zBpo1aI.roa (hash: /JkkHPoUwL9WPqaL9lMZRl9hvH2fpXEuWKNlqu6l9cI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:58:e8:42:42:22:f4:94:df:99:f5:fa:10:92:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f0b2c8d7b3ca13c59c53372f25e202c85aadc5
Validity
Not Before: Jan 31 18:00:20 2025 GMT
Not After : Feb 1 18:00:20 2025 GMT
Subject: CN=7a9857e324d75e34efba97ff77b8ae3fe99302bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:3b:be:bc:e1:bd:1a:40:4c:ea:3e:ec:09:
5a:5b:45:cc:63:e9:cc:dc:80:0b:75:69:d9:a3:41:
bf:92:02:84:37:cb:db:55:c4:e1:d5:0a:2a:47:52:
35:db:c4:0d:ee:66:3d:21:3d:a4:a4:43:ae:34:b9:
b9:60:9d:70:e6:c1:d0:2f:d0:4c:c4:2b:48:ec:2b:
bb:4b:18:29:a2:e2:a0:3a:2c:8f:19:a0:ae:7b:ac:
c5:d6:27:20:cd:38:27:e1:aa:38:27:15:ea:4e:aa:
52:9d:ba:73:98:da:70:69:c2:a9:ff:4d:3e:35:66:
10:ea:6f:94:b0:37:8a:14:16:fe:5f:da:31:5a:ce:
48:84:99:48:fb:34:c1:8f:3f:08:0e:41:3d:90:7c:
52:fc:5c:93:61:c0:dc:59:a4:18:b2:89:92:dc:3f:
41:9a:7d:7c:1b:c7:b6:22:8b:d7:2b:dc:fb:d4:fb:
46:8d:16:90:2e:1a:c1:61:49:ff:af:40:31:a2:d5:
40:0c:1e:17:ca:63:72:dd:d5:5d:23:94:f6:30:51:
7a:2b:bf:92:75:d0:57:af:68:1f:db:e5:a8:37:52:
13:a8:05:d0:4c:25:56:50:f0:dd:d2:e1:9a:46:07:
99:04:6a:30:5f:3f:04:22:b3:b0:36:53:bf:3d:af:
8a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:98:57:E3:24:D7:5E:34:EF:BA:97:FF:77:B8:AE:3F:E9:93:02:BC
X509v3 Authority Key Identifier:
keyid:99:F0:B2:C8:D7:B3:CA:13:C5:9C:53:37:2F:25:E2:02:C8:5A:AD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfCyyNezyhPFnFM3LyXiAsharcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/54ff92-221e-4a16-8aef-194e0c651d73/1/mfCyyNezyhPFnFM3LyXiAsharcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:5b:dd:25:2d:da:2b:40:23:91:65:d3:1d:66:2f:e4:30:67:
cb:c5:d4:bd:8c:3c:9e:a4:60:5f:d5:73:26:cb:a4:f1:07:21:
0d:14:8e:44:5b:a1:82:10:14:c2:a4:db:5b:2b:ff:78:0e:9c:
eb:f6:6c:ee:35:93:95:04:5f:44:d5:a5:f6:ab:ec:75:41:6c:
d6:fe:dd:01:66:5a:54:0c:ea:45:55:d2:19:18:5a:92:c5:ee:
82:01:cf:01:d1:bc:97:08:da:0b:f6:e0:86:ab:7a:75:2a:78:
cc:63:78:d4:83:bc:c7:d7:b1:58:7a:9d:a5:45:8d:8a:fc:2f:
cc:18:1d:c9:6b:47:c9:e5:1b:fc:02:0d:6b:f8:14:ae:12:4c:
bb:d8:f3:2f:d9:52:cb:dd:13:36:82:35:f2:d7:99:7b:ab:c3:
56:d5:db:f0:72:b8:93:76:55:0e:94:3a:8a:c4:3e:80:fb:3f:
23:98:96:03:85:49:83:bd:70:64:23:22:ac:3b:86:27:96:5d:
f3:e9:cd:a4:a7:54:b7:96:21:07:6d:85:f4:68:ee:1e:0b:96:
38:9f:b3:98:ea:48:2b:68:0e:6e:79:19:d9:bd:1f:5a:43:b7:
3b:b9:ff:b8:8c:6d:91:e4:6a:75:6a:ba:5a:3e:eb:1a:b9:a1:
95:e1:83:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:06:52 2025 by rpki-client