Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
File: _YGNk-aFcflcRevCgVmMfJjzJXc.mft (raw, json)
Hash identifier: TAsKNayev/mplNDJoFDLaiLGJ/+tswbfe4bxZurUUZE=
Subject key identifier: D0:2F:1F:6B:22:EF:FB:AA:35:15:92:EB:7B:8F:BC:72:78:1E:E4:3D
Authority key identifier: FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
Certificate issuer: /CN=fd818d93e68571f95c45ebc281598c7c98f32577
Certificate serial: 0194BD855FCEA862B0AEB940A226704ED365
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
Manifest number: 0863
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: _YGNk-aFcflcRevCgVmMfJjzJXc.crl (hash: T6hHyACzHj2yNPeP6F7ig1xRLjzQFY++Qd+CKj9WjEo=)
2: so4Ox0bzJMlY-LIWih2N4dQlCqw.roa (hash: QBOK/FbIryhxWpMe1LaX6JpYN1B60gEyaVLYZ+GnZVk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:5f:ce:a8:62:b0:ae:b9:40:a2:26:70:4e:d3:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd818d93e68571f95c45ebc281598c7c98f32577
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=d02f1f6b22effbaa351592eb7b8fbc72781ee43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:ea:fd:13:2f:d5:45:4b:e7:b5:2f:62:34:
64:7c:7e:03:ac:37:6d:ea:c2:f9:af:75:e2:d8:2a:
6d:d0:3a:8a:b5:1d:d2:d4:df:5d:ee:88:52:14:b1:
ec:72:91:bc:cc:60:47:4c:68:b1:d5:a5:2e:fc:bd:
b0:74:98:e1:67:33:ac:a3:48:98:87:48:2c:94:55:
75:38:55:c8:ee:cb:74:d8:12:c7:27:f4:d6:e7:78:
43:6d:10:78:0d:cf:7b:a6:c9:ff:dd:05:4a:d9:d5:
dc:09:2f:6e:bd:00:65:98:94:d6:0c:96:c4:45:b3:
3f:61:e3:2b:cd:fb:e5:71:22:bd:f4:8c:2f:d3:ef:
e2:e6:e1:3d:86:f8:c5:4a:67:d7:04:f6:0c:4d:92:
9f:f7:5b:ec:07:82:26:aa:d2:54:45:a7:aa:d6:f5:
94:80:ef:29:17:b1:85:64:a7:f2:07:15:74:80:63:
6b:f4:e5:61:93:9c:00:a6:33:b6:d9:6b:2a:5c:15:
6c:09:89:36:c6:ef:ec:f8:f0:9f:31:45:f7:8a:78:
7d:8e:87:f3:30:a9:03:e7:19:91:d6:06:2a:c5:53:
3a:4e:94:76:e5:b1:c0:01:3c:29:25:c8:9e:9c:61:
d4:00:bb:4e:79:a0:0b:16:36:87:21:b9:97:15:36:
80:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2F:1F:6B:22:EF:FB:AA:35:15:92:EB:7B:8F:BC:72:78:1E:E4:3D
X509v3 Authority Key Identifier:
keyid:FD:81:8D:93:E6:85:71:F9:5C:45:EB:C2:81:59:8C:7C:98:F3:25:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YGNk-aFcflcRevCgVmMfJjzJXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/3d370c-3295-4306-98dc-f698b05ba971/1/_YGNk-aFcflcRevCgVmMfJjzJXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:ef:25:7c:b6:6a:a6:8c:21:a9:ba:e2:d7:c2:3a:13:4f:16:
ad:e1:9b:cf:9e:68:d4:3f:79:8b:9d:3d:5f:33:bd:7a:92:5a:
be:56:d0:96:9f:b5:35:f6:2b:ec:91:62:af:41:00:f4:d6:a3:
f8:e2:63:e3:b4:42:84:fe:c8:00:31:94:b5:c4:f6:7d:38:01:
57:d0:6d:42:c9:59:67:d2:83:5e:8d:e8:c9:4b:b1:1e:0e:74:
c3:02:5b:64:27:fa:c0:98:d9:cd:d2:38:1a:60:53:de:fb:19:
1b:d8:43:1d:d4:db:7e:cd:6a:87:dd:64:36:53:61:c9:62:c8:
24:91:ba:b2:8b:91:a3:61:74:26:54:70:2a:5d:f6:cf:5c:e6:
be:0d:4a:f7:7f:b2:e3:d8:16:3d:84:08:88:77:10:c6:8a:3a:
ea:c9:38:c3:1f:37:93:72:5d:be:2c:7e:ad:35:d1:96:eb:c4:
c0:35:7c:5f:f7:d5:43:2d:9c:72:09:27:82:d4:72:39:91:7a:
d4:29:3b:c4:de:fe:dc:74:30:91:69:7c:32:99:81:24:1c:50:
d1:0e:c2:30:7e:b1:07:e7:d6:05:7a:12:2f:12:49:67:6a:ea:
49:fd:e2:bb:40:23:5d:e7:d4:4f:a0:d7:4f:1b:26:70:2e:bd:
73:ff:a6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:32:30 2025 by rpki-client