Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
File: DYYRtReZGJkx4wrhvpWs2oHj4cw.mft (raw, json)
Hash identifier: YnRcktHsPDWQJyBWPz1UT4kP+mqWG/x8/ZNL0RDQz0s=
Subject key identifier: 79:02:1C:E9:99:D4:DC:80:5C:CB:5D:3C:62:B8:60:45:B3:A4:0B:28
Authority key identifier: 0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC
Certificate issuer: /CN=0d8611b51799189931e30ae1be95acda81e3e1cc
Certificate serial: 0194BD854982193F9244505495E9925B7DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
Manifest number: 0E25
Signing time: Fri 31 Jan 2025 18:00:16 +0000
Manifest this update: Fri 31 Jan 2025 18:00:16 +0000
Manifest next update: Sat 01 Feb 2025 18:00:16 +0000
Files and hashes: 1: DYYRtReZGJkx4wrhvpWs2oHj4cw.crl (hash: PLiQhd7RQoI65WwbOSSXU5mnnLPdweRRm9ejkVtOa6Y=)
2: wD2g-VtZvqp7IY0550_PgDhJeD0.roa (hash: lT0qtpgd/Q3svueonVDRMVNhaFwZxKOMYzAHt0tWC5M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:49:82:19:3f:92:44:50:54:95:e9:92:5b:7d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d8611b51799189931e30ae1be95acda81e3e1cc
Validity
Not Before: Jan 31 18:00:16 2025 GMT
Not After : Feb 1 18:00:16 2025 GMT
Subject: CN=79021ce999d4dc805ccb5d3c62b86045b3a40b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:31:79:00:d3:96:ec:33:91:e9:15:be:40:f1:
7e:a6:a0:52:94:03:8b:62:a4:87:b1:d7:c4:15:44:
1d:4a:dd:7a:de:6c:c2:d0:19:d1:68:50:5e:ad:48:
52:b8:57:04:98:eb:20:b5:10:e4:1a:60:fd:d8:50:
75:01:ad:38:46:b7:c0:78:71:6e:ea:28:08:d7:9c:
42:07:c4:aa:b7:5d:25:6e:fa:cf:6c:79:58:9f:f3:
33:7f:db:7d:b1:03:27:90:d4:31:3c:1d:13:eb:5a:
53:59:30:58:ec:b4:22:8b:ad:b0:27:bc:73:f7:33:
3d:a1:d2:77:8c:0e:82:e1:ad:c0:29:3e:38:c6:5f:
73:a0:c7:ed:f6:15:fc:d5:02:da:8b:07:56:6f:8e:
71:90:c5:a0:98:6e:19:d0:07:35:7e:92:50:ee:9d:
dd:89:50:a5:17:13:7a:28:2e:b3:ce:64:04:84:89:
66:1d:cc:e9:05:8b:50:ae:b4:5a:60:9d:b9:ed:80:
0a:59:4b:c7:94:77:24:ad:6f:89:f6:eb:74:43:68:
f8:c7:35:cf:89:87:8e:bc:d6:57:61:1a:bc:79:97:
61:65:7d:ca:a0:9f:11:b3:72:65:8d:cd:fa:9c:d5:
ce:73:50:7f:93:d0:61:0e:7e:49:e2:46:8d:e1:ef:
3d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:02:1C:E9:99:D4:DC:80:5C:CB:5D:3C:62:B8:60:45:B3:A4:0B:28
X509v3 Authority Key Identifier:
keyid:0D:86:11:B5:17:99:18:99:31:E3:0A:E1:BE:95:AC:DA:81:E3:E1:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DYYRtReZGJkx4wrhvpWs2oHj4cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/a2b2b8-cf1c-43e3-b0d3-fd31e1e3f5b9/1/DYYRtReZGJkx4wrhvpWs2oHj4cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b5:1c:04:ab:73:6b:11:b2:5d:61:30:3d:a1:19:1d:a4:04:
59:df:d3:3e:d6:6c:90:6d:1a:e2:16:8d:44:7a:b0:3a:43:a5:
0c:c0:e2:73:00:c0:b4:65:c5:a8:fb:c6:00:68:80:ba:a8:f0:
8f:b0:af:0d:be:b0:6a:08:a9:79:36:ee:21:54:55:25:25:b2:
3e:a2:68:de:c0:4e:8c:12:89:70:66:19:28:cf:6d:42:7f:95:
63:ee:6b:e7:90:60:0c:76:85:da:12:81:25:92:f9:95:5b:ca:
60:ca:3e:f6:27:ec:3d:d9:76:32:06:e5:7b:59:47:74:aa:02:
12:8e:1b:ae:a4:f1:24:5a:90:3e:c8:3c:cc:c0:15:a2:a9:2a:
39:d9:f2:65:7c:f6:24:9c:5b:de:4a:b1:70:53:a9:d5:68:0b:
ab:11:55:30:c5:8a:21:2e:d1:4e:0d:3e:63:4a:f0:01:76:a9:
4a:32:fc:8a:4b:2e:37:78:04:eb:33:8f:71:db:51:ab:cd:3c:
af:67:c9:c8:87:13:e7:86:e0:dc:8d:f1:06:9f:23:35:48:cf:
4d:88:84:9b:d3:07:dc:4d:ea:01:15:18:bd:62:03:7b:43:73:
82:30:0f:bb:6d:9f:26:88:47:ef:4a:3b:3d:21:4b:32:f7:3e:
25:3e:45:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:22:09 2025 by rpki-client