Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
File: dYDRZWm7JKMo4ntH99dRZZcl3vs.mft (raw, json)
Hash identifier: a0uvhjlWoCv5TMdgg5BAuoGuX789KTtT22MhCMJMUDY=
Subject key identifier: 85:C5:0D:75:43:B5:71:99:DC:21:96:9A:88:F0:81:E8:4E:D8:64:AC
Authority key identifier: 75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
Certificate issuer: /CN=7580d16569bb24a328e27b47f7d751659725defb
Certificate serial: 0194BD857240E9DC6BDA472DDE4E16AA8E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 18:00:26 +0000
Manifest this update: Fri 31 Jan 2025 18:00:26 +0000
Manifest next update: Sat 01 Feb 2025 18:00:26 +0000
Files and hashes: 1: 1-xjgsfI902jNFD0m8-DZHtSyyIE.roa (hash: CsZOcJgPTxy7xIAOVt8lWaYqRyYDTFNbLjFpLqFoAHY=)
2: 8znWg7qZ9bI9AKat_qhyP26JqfY.roa (hash: Y2YmIOv3jVMh1xIJmeIZI13RLm2nx7Gd9VO4KN+O0Z4=)
3: dYDRZWm7JKMo4ntH99dRZZcl3vs.crl (hash: ZYBTyhMQMtJ5lM2DCwjFJxU9o4bhzbTjDjqLRwj3sQw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:72:40:e9:dc:6b:da:47:2d:de:4e:16:aa:8e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7580d16569bb24a328e27b47f7d751659725defb
Validity
Not Before: Jan 31 18:00:26 2025 GMT
Not After : Feb 1 18:00:26 2025 GMT
Subject: CN=85c50d7543b57199dc21969a88f081e84ed864ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:11:0b:dd:4f:6e:65:7b:13:ce:d9:df:11:
0b:4f:a9:a4:69:99:e2:32:0a:0c:4d:a6:ed:18:15:
1f:26:bf:f9:ba:fd:ad:15:db:c2:02:cb:08:33:d4:
45:38:77:e8:a5:32:cc:1b:01:15:35:82:7f:d2:88:
b1:4b:e2:20:fa:86:a2:c9:22:91:b0:c7:9a:be:81:
2f:4a:8a:3c:0f:02:25:c7:e7:8d:21:79:42:73:15:
2c:bd:63:a4:cc:10:8f:f8:4c:f2:67:01:4c:5c:0a:
77:f7:2b:84:13:c9:fd:e1:be:c4:dc:e0:0c:65:2f:
3b:c9:8f:35:d7:14:50:5f:8e:cc:0b:e0:ac:17:5b:
e4:3a:69:91:e5:19:9e:75:84:71:62:6f:1c:ff:a6:
84:11:99:18:6e:85:28:99:53:e3:b2:54:96:8a:21:
a2:74:e3:95:b7:64:8d:01:e2:44:54:7d:64:92:cc:
70:70:0c:3d:67:c5:12:dc:5f:7f:0b:48:19:2d:ed:
57:b4:40:d5:b1:9d:d6:d8:62:3d:b5:4f:ba:fa:c0:
5c:d9:cf:60:46:e8:4d:67:53:5b:e5:8f:a8:c4:09:
db:40:f6:b7:ef:57:97:17:5d:8f:11:e3:12:7b:1e:
88:13:6b:09:87:08:57:11:66:59:ee:5c:8b:03:4a:
02:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:C5:0D:75:43:B5:71:99:DC:21:96:9A:88:F0:81:E8:4E:D8:64:AC
X509v3 Authority Key Identifier:
keyid:75:80:D1:65:69:BB:24:A3:28:E2:7B:47:F7:D7:51:65:97:25:DE:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYDRZWm7JKMo4ntH99dRZZcl3vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1a18de-efbd-41b5-b336-79fbd385a550/1/dYDRZWm7JKMo4ntH99dRZZcl3vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:0e:ca:a6:bd:51:89:9a:73:0b:9b:8b:a9:61:79:6e:c0:b7:
97:7e:db:03:bf:6d:b2:16:ce:7c:7b:2f:1e:a0:e0:b0:3f:b0:
d2:ce:61:7a:e8:d3:b8:20:8f:44:0a:4e:a0:a1:47:be:40:94:
22:12:2a:9c:1a:df:a0:d2:f8:07:3d:aa:6f:97:f3:cd:4b:8d:
6a:50:fb:86:c6:0c:2f:40:7e:d6:6a:af:45:1c:03:bd:18:1c:
fb:3c:f4:73:1e:dc:91:c9:e3:2a:9c:3c:05:0b:99:b1:64:46:
a7:e3:b4:f3:87:22:ae:70:62:d8:25:97:09:36:41:77:69:b5:
2c:05:5d:d8:65:9c:9b:03:44:71:b7:9e:57:63:b5:96:6d:ae:
7c:16:ac:e9:48:a3:ab:bd:37:40:2d:17:70:d8:79:bf:22:31:
12:11:8b:4f:53:f4:5b:53:34:6a:a0:cc:1d:d4:a1:03:55:c2:
26:a2:ba:ee:96:7a:09:5a:5e:b0:44:56:0f:01:4c:55:d6:30:
90:e1:94:06:06:dc:7f:2a:45:dc:13:9c:b9:47:6c:de:7e:d1:
02:4e:5b:00:4e:f0:00:cd:ff:1e:3e:e0:30:a3:87:e0:33:f0:
98:d9:f1:b0:dd:ae:37:07:b9:58:37:00:12:94:92:93:55:b6:
0a:d6:31:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:26:29 2025 by rpki-client