Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
File: vyk4WQ4NABlyVmLUtK5Myew6c00.mft (raw, json)
Hash identifier: VtrQRpbSeqn8FhXLrOLoN2/IAqbQOFTR5NF+6KyEuJw=
Subject key identifier: D4:98:EF:E3:A4:7F:32:7E:2E:0F:7B:2B:0E:71:58:E1:64:34:9B:F5
Authority key identifier: BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
Certificate issuer: /CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Certificate serial: 0194BC051425A267DBECD41841BE9A3A6FC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
Manifest number: 06C9
Signing time: Fri 31 Jan 2025 11:00:36 +0000
Manifest this update: Fri 31 Jan 2025 11:00:36 +0000
Manifest next update: Sat 01 Feb 2025 11:00:36 +0000
Files and hashes: 1: vQtF-L-9ooOZxF-UCZufP97_4Tk.roa (hash: uZu5EdE4zrTNj+JjaQISrCgWGaWpGkfUNjvMVUEKljA=)
2: vyk4WQ4NABlyVmLUtK5Myew6c00.crl (hash: 7qLciDvl0JmjcJo5hu+vCttVmzm8cHGvGpkWO5HmYEg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:14:25:a2:67:db:ec:d4:18:41:be:9a:3a:6f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Validity
Not Before: Jan 31 11:00:36 2025 GMT
Not After : Feb 1 11:00:36 2025 GMT
Subject: CN=d498efe3a47f327e2e0f7b2b0e7158e164349bf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7f:93:ca:87:fe:3d:c4:1b:f0:07:f8:85:ce:
86:82:d1:46:4e:d4:ad:ec:10:7d:de:ca:0d:53:35:
e9:db:47:9c:e5:43:bb:98:e0:42:42:0c:01:d8:a3:
01:ce:c2:bc:ea:5a:8f:66:cd:88:27:2b:a6:2f:43:
65:ad:84:fa:4f:65:63:b8:ec:81:5f:8a:d7:23:cb:
05:19:ce:46:86:79:a7:ed:d1:ad:05:84:a5:46:02:
d4:4c:38:8a:ec:60:5a:53:c1:28:d3:93:54:55:f0:
54:54:99:dd:f7:60:e0:dc:f2:ac:8c:6e:65:14:ce:
23:2d:7f:e4:61:e2:67:c8:8a:b3:3f:7f:e9:82:b8:
27:4e:3b:41:30:36:1f:ee:36:f2:6c:46:97:18:bb:
d4:1a:b1:61:b7:87:6d:38:cd:d6:2d:5a:7d:de:64:
2b:8a:66:de:3f:28:55:7c:76:1d:c3:cf:35:71:81:
4a:e5:28:03:4e:9e:d2:20:b6:5b:94:0c:01:63:70:
ab:2e:ad:53:1b:1d:f7:3e:8b:21:9d:62:c0:0b:7f:
81:ef:e5:3d:0f:f3:6e:d7:37:1b:59:57:0f:04:b9:
a7:a7:88:c9:69:94:71:2b:86:41:76:1b:73:04:76:
3a:41:a3:92:8f:68:90:37:e5:8c:15:be:e9:be:6c:
4d:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:98:EF:E3:A4:7F:32:7E:2E:0F:7B:2B:0E:71:58:E1:64:34:9B:F5
X509v3 Authority Key Identifier:
keyid:BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:2e:f1:18:15:02:f4:ad:d9:45:43:bc:f1:ec:f4:e8:fa:99:
b2:b0:31:a8:fa:92:ad:2e:75:95:6c:cf:e0:5f:0c:f5:8b:59:
cc:ea:1e:76:18:62:92:bf:d8:13:79:21:c5:eb:7b:fb:7b:8c:
5d:2b:45:4b:41:97:76:02:a3:0a:77:3b:41:f0:a5:66:e7:ec:
a9:45:9c:0c:5d:39:65:04:73:50:d2:cf:78:27:d5:81:5c:77:
ec:1e:eb:c0:7d:81:a8:d1:09:54:2e:40:59:7f:46:74:a2:78:
47:02:fe:5d:6e:7f:cb:78:f3:69:d4:e5:fa:9a:9c:19:11:56:
e3:c0:37:58:56:60:02:1c:e7:bd:0a:50:c0:c4:da:2d:aa:34:
96:ae:3f:54:ca:9f:a3:63:f5:93:c2:0b:0d:9f:5c:de:58:86:
e3:d3:5f:2f:e3:64:73:6e:58:a1:37:24:ba:3a:fb:0d:54:99:
07:25:52:ce:3e:71:70:a3:2c:42:76:f3:c6:34:3b:f0:15:04:
95:81:b3:61:25:c7:8a:ba:27:3d:55:89:a5:2b:ce:ed:b1:04:
12:ba:6b:b2:87:3e:02:62:51:8d:e6:09:1c:12:16:c2:26:47:
72:20:5d:a8:e6:3b:27:2a:02:3c:17:85:49:d6:1f:1c:02:b3:
ee:d1:97:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:24:26 2025 by rpki-client