Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
File: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft (raw, json)
Hash identifier: +pUN5icC9CXjM0/+I64ePf8ndFdx1SjWlHTc3RsfsEE=
Subject key identifier: 0B:27:D6:2E:C5:A9:41:81:6C:AE:8C:DE:46:F3:DD:1A:6F:D4:D1:19
Authority key identifier: 87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
Certificate issuer: /CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Certificate serial: 0194BD4E925DF423FC69B52597726D8537AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: C_dV-a8NL19EWcN2B58oBMal8wA.roa (hash: cfrqdXpjr4fkDxvy5PbVD58Is9FxlX0Bf3Low+2bVCc=)
2: hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl (hash: AM+AOeqiRxk+1BQ5nxSL3Bbtw+yn4VxekP58OFpbwDk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:92:5d:f4:23:fc:69:b5:25:97:72:6d:85:37:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8724b401ffeac3d5db42f828cab4f163c064d6d5
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=0b27d62ec5a941816cae8cde46f3dd1a6fd4d119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:55:3e:81:1f:8e:00:dd:1f:8b:f0:10:70:e8:
d2:75:1f:9c:19:46:cd:e2:1e:67:d3:f0:e4:21:d1:
29:68:7b:01:65:d0:af:79:cd:ff:f7:d8:af:5a:d4:
f5:9c:53:2f:12:be:8f:c6:d0:12:67:ec:ae:7c:69:
90:ef:fc:a7:e0:eb:45:db:a0:1d:ea:16:30:c9:3b:
01:c9:91:10:52:62:16:6c:07:58:1e:02:60:b3:de:
46:23:3d:e4:fd:15:c7:98:f6:8b:96:41:c5:67:dc:
5b:ba:bf:48:32:e7:e4:6b:86:a4:02:88:b3:61:06:
28:ca:f2:4d:1b:a0:76:d3:da:ff:5e:83:f8:1d:07:
8c:fa:3a:5d:48:c9:b3:4c:86:cb:44:ef:e3:3b:15:
cb:c9:3e:91:30:7e:63:57:cb:4c:b5:3b:c7:8d:33:
85:61:a4:d9:7a:90:ff:5f:a7:67:ce:e9:af:e0:70:
b0:b3:89:d7:f1:55:70:04:04:57:04:9f:d7:44:20:
02:3d:76:1b:8e:44:6e:00:aa:12:ac:ff:25:85:68:
ba:5c:b9:7f:21:03:c6:be:6b:45:bd:97:bb:6b:20:
62:4c:89:6d:0f:ff:1a:0c:7a:d0:e1:03:b6:7f:10:
d6:27:66:7d:62:c9:82:38:6c:76:9e:b0:a6:81:59:
24:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:27:D6:2E:C5:A9:41:81:6C:AE:8C:DE:46:F3:DD:1A:6F:D4:D1:19
X509v3 Authority Key Identifier:
keyid:87:24:B4:01:FF:EA:C3:D5:DB:42:F8:28:CA:B4:F1:63:C0:64:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/3e50c9-95d0-4ab7-a7e1-0111038934d3/1/hyS0Af_qw9XbQvgoyrTxY8Bk1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ef:1e:17:44:bc:ce:82:5d:04:87:b9:56:7d:aa:56:90:61:
5a:52:19:cd:f8:8d:f4:09:4a:b4:d2:00:a7:2a:2e:72:44:63:
f8:a3:cb:9a:ed:0b:cb:78:78:62:db:7c:24:00:21:3a:c3:67:
14:14:c8:70:a6:d3:e1:4a:ab:3c:4d:be:2e:ab:ee:7c:9e:21:
31:8f:b5:d6:a1:47:ac:f6:20:2e:90:31:0b:3e:42:08:1c:a3:
e1:f2:4c:e0:33:66:c3:40:5a:b9:27:a0:22:48:81:ed:ed:a8:
28:81:6e:48:0a:cc:2f:8a:17:65:6d:74:68:4a:aa:f4:12:26:
13:3e:a0:20:11:5a:33:3d:0e:49:8b:84:93:02:ed:2f:53:b7:
6b:9b:3f:ad:b4:60:69:83:9f:33:b2:82:d6:15:d9:4d:08:b5:
8b:5c:20:bc:09:05:1a:36:96:ec:d7:49:6a:65:bb:3e:17:57:
13:29:05:a9:97:1d:6e:fe:66:06:21:91:28:61:9c:63:3d:c0:
e7:fa:94:b5:17:19:d4:04:0c:47:a7:97:3e:91:30:3e:17:34:
ce:0c:2b:41:d0:a3:a1:7d:0b:bf:21:fe:91:e8:68:c7:d8:68:
d1:c0:26:61:c4:39:28:44:d7:c1:cc:08:52:70:03:5d:76:01:
eb:32:f8:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:39:06 2025 by rpki-client