Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
File: yxvWK-7KsOkDspgRJB2yRLv1LDk.mft (raw, json)
Hash identifier: mGAeSV6EETD8S2WV8Vh+MQ9iJGfc83sMDBmMcJx4jtE=
Subject key identifier: D3:BC:52:06:00:8D:7A:6B:D3:1A:BA:C9:7E:4C:AA:43:C0:19:46:0F
Authority key identifier: CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
Certificate issuer: /CN=cb1bd62beecab0e903b29811241db244bbf52c39
Certificate serial: 0194BCE07CFAA0352E2923FE73FE0C470D06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
Manifest number: 0DCA
Signing time: Fri 31 Jan 2025 15:00:16 +0000
Manifest this update: Fri 31 Jan 2025 15:00:16 +0000
Manifest next update: Sat 01 Feb 2025 15:00:16 +0000
Files and hashes: 1: 5aYNWnqt5MGeMuyfI5maKIJbJY4.roa (hash: 8Iaoh9OG5OjpMjtvt8V5oYDLknZ3K/iUcc80PeVe4YY=)
2: LlheXbpgUpnd6LfIavs5m7046X8.roa (hash: m29XywNUw2LYO1n9FuR/vWvutq9J3qKuKN5li9RC9G4=)
3: yxvWK-7KsOkDspgRJB2yRLv1LDk.crl (hash: aEWsHLct5+agQcfUX1WIfOV8cYA2VD3U0tJXOiTl5M0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:7c:fa:a0:35:2e:29:23:fe:73:fe:0c:47:0d:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1bd62beecab0e903b29811241db244bbf52c39
Validity
Not Before: Jan 31 15:00:16 2025 GMT
Not After : Feb 1 15:00:16 2025 GMT
Subject: CN=d3bc5206008d7a6bd31abac97e4caa43c019460f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d5:43:39:66:90:bf:26:bd:65:1c:67:4f:15:
4c:b0:16:20:b5:4e:9e:0f:1d:0b:40:92:92:e6:b4:
4b:b0:a1:83:97:d1:cc:6a:6c:cd:7f:97:9c:5c:68:
bf:15:be:09:79:66:d8:fb:c8:43:7e:75:84:ee:4b:
7b:d2:b6:3b:4c:61:e9:98:3c:3b:d3:73:13:74:d1:
91:b7:65:56:12:f6:f3:e9:84:cb:ac:4e:34:40:4a:
07:6c:db:06:05:7f:2b:ff:49:6e:a0:cd:4e:07:89:
82:fd:77:46:82:81:3a:62:ea:9f:6c:59:58:28:f9:
ee:5c:37:94:46:87:7a:64:32:49:83:67:98:4a:fe:
18:40:fd:fa:92:71:73:a5:ce:91:5f:d3:00:6a:1b:
36:73:57:9f:6f:3e:67:07:52:95:a3:5c:83:4c:f6:
ce:72:4a:99:de:d6:22:e7:05:d8:b7:5f:9c:f9:24:
7d:2f:9c:18:83:24:2b:9f:b4:4d:29:2b:74:de:d7:
56:96:16:8d:1f:f3:a7:b6:2a:5b:c5:7d:ce:2a:78:
bc:a8:64:c0:da:2c:89:43:f7:99:a4:72:d0:c1:a2:
1a:ea:e8:43:c5:80:87:ea:d5:78:c5:4c:dd:d6:c5:
53:04:74:ad:97:5a:5e:cc:6c:a0:8c:e0:5e:99:2c:
a3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:BC:52:06:00:8D:7A:6B:D3:1A:BA:C9:7E:4C:AA:43:C0:19:46:0F
X509v3 Authority Key Identifier:
keyid:CB:1B:D6:2B:EE:CA:B0:E9:03:B2:98:11:24:1D:B2:44:BB:F5:2C:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxvWK-7KsOkDspgRJB2yRLv1LDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e02b47-f2e0-4402-814f-e4016ad53cc9/1/yxvWK-7KsOkDspgRJB2yRLv1LDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:3d:68:68:66:d4:5b:75:49:12:18:c3:2e:e3:27:38:69:02:
2e:2f:a1:fb:b5:3a:1f:81:ec:fa:bc:7a:73:95:9f:7e:3e:31:
8b:13:49:5e:d7:56:49:1c:07:75:a0:3b:54:c3:b4:7a:68:ca:
4c:46:da:25:20:3b:e4:32:c6:16:6f:90:c1:4a:c8:bf:df:a7:
cd:c5:35:2a:25:f0:61:c0:1b:c9:02:e1:53:b4:79:1a:80:c7:
0d:fd:41:3a:b7:41:eb:d8:1b:41:09:52:15:84:58:28:6c:1f:
6a:94:fc:51:0d:e6:64:0c:1c:c1:50:6b:d3:3f:f8:e8:bd:9e:
17:a4:ab:72:8c:27:d4:4c:ba:b8:1c:25:4b:ca:dc:05:a7:f8:
fa:f7:8e:30:b0:6a:ef:68:51:03:8b:5e:0d:a7:49:91:b3:33:
00:64:33:cd:dc:5c:ab:7d:2e:de:75:c3:89:f0:31:27:f6:06:
7c:da:03:8d:58:44:aa:2a:a3:6a:ab:02:70:a2:19:b2:0b:62:
24:92:2c:45:a1:d7:ca:30:3e:91:c7:a5:24:bc:6f:f1:de:88:
ad:f5:7b:d4:53:f9:22:94:a8:86:64:cf:eb:42:cf:56:7e:a7:
16:09:9b:13:a0:eb:9c:db:8f:d1:ed:1b:3e:8b:e8:0f:04:aa:
3e:60:cc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:22:40 2025 by rpki-client