Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
File: Y01u7EA-_4a0D5xZgJHdQwKppyE.mft (raw, json)
Hash identifier: INtpbAgMS98QYG4wskg9IVVfQRi5ktOph8cCefEbuo4=
Subject key identifier: 72:22:1D:CB:74:54:5B:96:0C:03:D6:DA:23:32:77:36:87:57:08:F1
Authority key identifier: 63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
Certificate issuer: /CN=634d6eec403eff86b40f9c598091dd4302a9a721
Certificate serial: 0194BBCE700960BD0D5A016CF55DD5A016C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
Manifest number: 0749
Signing time: Fri 31 Jan 2025 10:00:56 +0000
Manifest this update: Fri 31 Jan 2025 10:00:56 +0000
Manifest next update: Sat 01 Feb 2025 10:00:56 +0000
Files and hashes: 1: UZAf8A9-pMDfvYbHB760wm3mim8.roa (hash: j34ASxN7++MCsv3IXa3rAjo5KvWthukAGWu5QUJzwPY=)
2: Y01u7EA-_4a0D5xZgJHdQwKppyE.crl (hash: 3FzSzdOB1gqf4caDCYFlk6BuKuWaC/uXxL6UK/B0cxY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:70:09:60:bd:0d:5a:01:6c:f5:5d:d5:a0:16:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=634d6eec403eff86b40f9c598091dd4302a9a721
Validity
Not Before: Jan 31 10:00:56 2025 GMT
Not After : Feb 1 10:00:56 2025 GMT
Subject: CN=72221dcb74545b960c03d6da23327736875708f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c2:e1:e5:40:8b:26:8a:76:da:8e:fa:a6:44:
59:59:de:f8:32:de:2d:67:cf:65:8a:f4:c1:93:d8:
ba:6e:d9:b7:de:e6:51:f7:10:f3:db:d8:20:fb:15:
47:7b:ed:d4:c1:64:95:34:2b:af:b2:1f:45:60:85:
be:ed:46:2e:46:c6:3c:59:51:64:c2:eb:35:a1:ed:
b6:1a:75:bc:ca:83:7f:5f:e8:50:76:a9:f9:a1:af:
13:8c:db:b2:f4:f3:46:e6:03:a4:f1:a8:dd:49:3b:
ad:04:7c:66:96:04:d1:54:68:d5:70:67:e7:8e:db:
31:35:51:0a:3f:01:4c:d8:da:26:fa:70:d4:c1:7c:
58:37:a2:5f:c7:fe:31:f3:82:d1:3c:1e:d0:ea:7c:
a4:a4:da:a3:24:31:1b:f4:d4:b0:98:7d:fc:82:80:
04:72:74:81:24:c0:65:30:ef:65:79:6d:40:a0:d6:
7a:a5:f6:2e:b1:d9:85:ca:a7:87:fe:ca:e0:40:7a:
1e:ea:c1:8e:34:a2:73:9e:00:8c:94:6f:c1:aa:f3:
80:6b:61:6b:11:69:8c:3b:d8:47:14:b1:5b:5b:3f:
00:3e:bc:d3:6f:6c:99:05:dc:ed:e1:73:1f:84:b0:
79:a6:83:a3:49:d9:26:da:72:4b:6a:2e:c0:ef:aa:
37:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:22:1D:CB:74:54:5B:96:0C:03:D6:DA:23:32:77:36:87:57:08:F1
X509v3 Authority Key Identifier:
keyid:63:4D:6E:EC:40:3E:FF:86:B4:0F:9C:59:80:91:DD:43:02:A9:A7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y01u7EA-_4a0D5xZgJHdQwKppyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/77c532-59c9-412a-aea8-02bd3dcae4ad/1/Y01u7EA-_4a0D5xZgJHdQwKppyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0d:49:62:54:86:2e:db:f9:cc:0b:79:69:e1:f8:e6:1b:78:
ac:1b:45:05:47:22:bb:44:41:8d:cb:08:47:83:25:f8:45:44:
db:cf:bb:95:f0:3e:a4:1e:5e:46:cd:6b:af:22:0a:79:05:98:
be:9d:72:5b:f8:8e:5e:ed:be:f0:9c:9b:28:35:3a:0a:63:35:
d6:54:83:e8:0c:7c:9a:97:94:17:ff:be:b7:59:6d:5e:e2:92:
ba:0c:78:8b:fc:65:c6:1c:46:0a:38:05:80:e9:0c:1a:d5:5c:
1a:81:02:c5:9c:87:ac:0c:53:22:11:29:b3:72:fb:bb:4b:7b:
e5:86:28:c3:b3:ba:a3:bc:28:06:87:2a:84:02:e2:2f:1a:50:
df:d2:4c:a3:d5:b4:b2:b4:69:3d:59:3c:ee:9d:49:10:13:d1:
81:a1:1f:ad:d8:09:8c:2b:50:65:59:78:ec:1d:60:4e:33:0c:
65:26:97:03:77:3e:21:84:9c:d3:d7:9e:d7:6d:95:45:0e:a8:
59:4d:37:15:dc:fc:e0:17:d5:6b:81:34:34:3a:6a:31:96:6e:
6f:f0:16:b9:a0:32:ea:ee:9f:83:bc:b5:d6:cd:6f:07:00:7e:
59:05:46:16:e8:16:26:ce:08:be:4c:9a:ef:9d:71:d5:67:5f:
99:41:73:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:40 2025 by rpki-client