Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
File: RYzFKgcHzDQKycf26QKLZLcCZ7w.mft (raw, json)
Hash identifier: kec5s1txYclpZD/8aePpwxn3XX5J55P3X9oLQi6mqtw=
Subject key identifier: 66:98:36:3E:18:55:E4:FE:50:55:63:C8:56:11:F9:03:02:F8:27:58
Authority key identifier: 45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
Certificate issuer: /CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Certificate serial: 0194BCE05DA9644B61BA3304E03672B21B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
Manifest number: 0582
Signing time: Fri 31 Jan 2025 15:00:08 +0000
Manifest this update: Fri 31 Jan 2025 15:00:08 +0000
Manifest next update: Sat 01 Feb 2025 15:00:08 +0000
Files and hashes: 1: IkNC-TUcCoYBxsQeLh6_eg3WO0Y.roa (hash: FzBKtoxKdAzZGhoYpGryWwHPZ5WZpqNHKyLplIOiPAU=)
2: RYzFKgcHzDQKycf26QKLZLcCZ7w.crl (hash: 4D6pjgXjes9NHXQUUG+c5JZ0N6E/C8c/8X1OEm0EIwc=)
3: _5WIvJfKyXPt7q3eDEUV4dqzXLc.roa (hash: WY6kQSCLPQqO6U8inB26YKVMLyQQktJDfS2xbDWHzWw=)
4: uDI0D6qr7-usCDL-fgv2aBY_bUU.roa (hash: H5Mm89vS+5YR+a0XeYRvNkRodKD27aIsyfCqNBxXQhg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:5d:a9:64:4b:61:ba:33:04:e0:36:72:b2:1b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458cc52a0707cc340ac9c7f6e9028b64b70267bc
Validity
Not Before: Jan 31 15:00:08 2025 GMT
Not After : Feb 1 15:00:08 2025 GMT
Subject: CN=6698363e1855e4fe505563c85611f90302f82758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e5:3f:01:8d:e5:73:84:35:1d:33:cf:54:7a:
ae:08:82:be:6a:c4:53:65:6c:fe:30:f9:ad:c6:92:
d8:05:db:00:c5:1b:c4:83:39:34:81:9a:2f:a5:c3:
71:8d:8f:ac:f7:8c:06:f8:f3:02:b7:0c:d9:3e:30:
a0:ca:24:38:35:bf:01:75:b4:7b:6b:3d:0d:ea:97:
ff:ff:9f:d7:13:9c:98:16:bd:3b:e7:cf:7a:62:da:
b6:6e:f9:4e:97:ae:af:0c:10:9e:eb:4e:0f:66:54:
0d:2e:f6:ff:af:36:36:63:aa:1e:d8:d0:8c:ea:dc:
b2:31:63:aa:14:5d:b7:90:ef:ef:b1:01:d0:97:fe:
16:89:1c:49:aa:f4:1b:e8:65:0e:5e:e8:3f:f2:0f:
18:12:db:a7:ff:0b:b8:5f:05:0d:0b:4c:29:62:4a:
f1:6f:56:64:6a:b0:4e:a5:6a:4d:7f:b7:7a:e8:0d:
2f:80:36:ef:03:00:b8:8a:5e:9d:f6:56:b0:e8:36:
24:da:4b:05:f2:fd:05:b2:7d:86:b5:3c:19:1b:9d:
b4:bd:7b:f0:6f:37:2d:9a:40:37:17:88:d7:99:87:
3d:f5:06:dc:09:b7:c2:97:c3:ac:e2:77:5b:16:cd:
d4:e8:03:2c:5b:de:de:f7:72:c2:f7:35:d7:4b:71:
d6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:98:36:3E:18:55:E4:FE:50:55:63:C8:56:11:F9:03:02:F8:27:58
X509v3 Authority Key Identifier:
keyid:45:8C:C5:2A:07:07:CC:34:0A:C9:C7:F6:E9:02:8B:64:B7:02:67:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RYzFKgcHzDQKycf26QKLZLcCZ7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/5a7d2f-5168-4720-8ce0-704149619c46/1/RYzFKgcHzDQKycf26QKLZLcCZ7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:70:d9:ee:40:a8:86:45:8b:76:02:39:f8:aa:df:e3:0b:84:
ce:03:67:63:ca:2d:38:37:c9:b2:8f:70:8e:cc:8e:76:72:33:
13:87:66:06:a9:ab:6f:35:05:43:49:8b:4b:27:1f:3b:ca:ce:
24:cc:64:9f:af:67:13:db:e5:bd:f2:4f:f4:c9:43:21:1b:26:
6c:7a:93:26:a6:0c:ab:78:d1:73:ec:94:5f:27:6a:26:1f:58:
a8:9e:e4:ce:ed:44:69:fb:d8:7f:bc:22:63:14:73:ac:e8:61:
d8:ee:17:f6:22:7a:e4:df:c4:38:02:8d:a9:34:e3:3f:6f:c2:
53:35:1f:2e:18:60:5f:21:9d:e5:34:06:af:74:61:65:91:1f:
d1:43:67:b7:50:1c:09:5a:db:b2:80:0c:27:96:81:a8:11:95:
28:8a:1b:d7:19:4a:e7:08:de:8f:40:e1:31:b4:bf:de:70:5d:
eb:a3:e7:45:34:5c:a3:9b:6e:fb:00:a4:86:64:a3:cb:d9:1b:
f8:23:e4:a2:db:cf:1e:1e:8c:0c:04:e3:b6:1b:5b:b5:06:a0:
c2:3e:26:21:66:b4:3b:ea:33:79:2e:41:4b:10:28:02:8c:c4:
f5:73:46:0c:a7:aa:ed:04:b3:4f:fc:2d:61:13:6e:31:5b:21:
d5:f4:64:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:13:54 2025 by rpki-client