Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
File: 2YtaX7E4aD0ajMcBn3iXC65ngig.mft (raw, json)
Hash identifier: Lkr9anBiNaFfM+BIKM0JR6Q4xM4wkuQh1AiYkLMtq1o=
Subject key identifier: 50:72:8D:DF:47:70:7C:9A:A8:AA:14:1E:D0:D1:AE:F8:F6:E4:89:B2
Authority key identifier: D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
Certificate issuer: /CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Certificate serial: 0194BCE0EBB1CAC1069204B8B5D557A15F4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
Manifest number: 0D54
Signing time: Fri 31 Jan 2025 15:00:44 +0000
Manifest this update: Fri 31 Jan 2025 15:00:44 +0000
Manifest next update: Sat 01 Feb 2025 15:00:44 +0000
Files and hashes: 1: 2YtaX7E4aD0ajMcBn3iXC65ngig.crl (hash: J9xzd+JM4GemDKZTPEIGy5b3wXGw1dZKHW4hIhB92do=)
2: pGBMbGUVmfmMQKR1-BVF--sKK7U.roa (hash: ayj/a/EtllFNMGD1HzcA6KglHzS5bxHd+NVb8RRWcAY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:eb:b1:ca:c1:06:92:04:b8:b5:d5:57:a1:5f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98b5a5fb138683d1a8cc7019f78970bae678228
Validity
Not Before: Jan 31 15:00:44 2025 GMT
Not After : Feb 1 15:00:44 2025 GMT
Subject: CN=50728ddf47707c9aa8aa141ed0d1aef8f6e489b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:d9:eb:23:c2:65:96:b2:c6:f1:6e:6e:5d:
fe:39:88:9f:fa:f1:b4:ed:c9:76:41:aa:5a:cf:3e:
c3:2b:57:7d:12:e2:04:67:b6:6d:48:fa:f9:a3:bd:
d1:56:0b:1a:ce:8c:f0:4e:45:cb:17:9a:07:21:8a:
1d:ec:6f:aa:8d:3f:21:33:de:6a:c3:ed:30:4a:0d:
83:ca:1b:78:df:3d:65:f9:61:48:4a:75:0a:93:d0:
31:6d:38:6f:3a:7c:f2:d4:9d:9d:ca:51:bd:5c:9c:
21:da:3d:20:98:87:61:27:0e:14:93:a0:7c:a9:f4:
6d:09:24:19:97:de:f7:25:2e:7a:e6:e4:f2:d8:6f:
0f:d7:87:4f:dd:51:80:6d:4a:06:ec:2f:46:f4:2c:
29:fd:00:21:0e:d0:d9:84:62:b4:a2:25:1c:28:64:
45:52:d2:55:bb:bf:cc:6c:d5:fe:a3:85:35:9e:03:
c9:a4:e4:ca:09:1c:c3:55:53:c0:f9:70:5e:51:3d:
13:70:5a:e6:66:88:0f:bb:c5:f9:5a:50:0a:70:b2:
02:bb:d3:8c:da:85:59:85:c5:b1:68:3d:7b:b3:2a:
ce:ff:7c:29:0b:fd:31:3f:46:86:03:dc:c4:2c:40:
37:5e:6b:d4:02:d4:88:fc:37:23:f8:13:03:4c:2a:
94:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:72:8D:DF:47:70:7C:9A:A8:AA:14:1E:D0:D1:AE:F8:F6:E4:89:B2
X509v3 Authority Key Identifier:
keyid:D9:8B:5A:5F:B1:38:68:3D:1A:8C:C7:01:9F:78:97:0B:AE:67:82:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YtaX7E4aD0ajMcBn3iXC65ngig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e2e95d-2cb7-46be-a228-8317a8288d10/1/2YtaX7E4aD0ajMcBn3iXC65ngig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4e:22:29:95:f5:a4:bf:9c:85:86:8b:9c:b5:1e:8b:ed:8f:
52:4c:87:b3:2b:09:bb:86:62:b5:a0:18:db:b4:fc:fe:11:d5:
dc:67:a5:a7:b9:5b:74:d7:12:4c:14:a0:85:e8:c0:0f:5d:e3:
40:9f:bb:e6:7f:26:4b:07:65:26:e3:25:83:2e:9b:75:0e:77:
94:ed:91:e3:d5:5c:0c:38:0b:95:4b:b2:54:d7:5f:e3:f5:24:
12:f4:12:97:14:5c:c1:19:af:d4:81:91:71:42:84:48:54:6e:
3f:89:38:84:d5:3d:50:bb:cc:2a:a2:87:17:f3:2b:71:36:0e:
1c:bd:b5:6d:28:14:d0:49:cf:79:6c:28:a6:b2:7c:4e:36:92:
82:07:23:53:0a:da:b9:cc:16:d1:ab:be:ee:18:fe:e4:0d:9e:
5d:60:50:5d:f9:de:b9:06:db:82:70:52:b4:5c:62:ce:3a:d5:
3c:25:d8:47:b3:bf:ee:13:63:57:99:77:f9:40:20:51:36:be:
60:a0:70:e4:f6:73:c9:cf:90:28:a4:e8:de:a0:86:12:9a:38:
fc:f5:99:5d:38:e5:90:c0:96:2f:ef:44:b3:4d:d2:74:0b:3a:
b0:99:57:06:e8:4f:75:21:38:fd:b8:4b:fb:85:ff:3e:28:2d:
1a:be:b5:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:28 2025 by rpki-client