Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
File: 0xryhyw_VQMHOGbf_vSItxeD2rY.mft (raw, json)
Hash identifier: tj2V7Jrd8+VRITQOajYsVwCZe0rrWQEqGJzXWeWtMfY=
Subject key identifier: 6D:13:7C:90:82:7C:22:83:1E:AF:52:69:17:68:2A:4B:E2:31:7C:42
Authority key identifier: D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6
Certificate issuer: /CN=d31af2872c3f5503073866dffef488b71783dab6
Certificate serial: 0194BD17B8ACE431ED4C1780D6329E02AE6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
Manifest number: 112A
Signing time: Fri 31 Jan 2025 16:00:35 +0000
Manifest this update: Fri 31 Jan 2025 16:00:35 +0000
Manifest next update: Sat 01 Feb 2025 16:00:35 +0000
Files and hashes: 1: 0xryhyw_VQMHOGbf_vSItxeD2rY.crl (hash: cb93jWGPzmS4HKjInFMQsE5Wsm4FK6Dlpee55Du0z0g=)
2: Vr2MHbk4BkpwijegPw7svFXxpY8.roa (hash: J4FlYQ16tBtXCX4bdbpdB9oishsKJVSj1Pc1U4pte9s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b8:ac:e4:31:ed:4c:17:80:d6:32:9e:02:ae:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31af2872c3f5503073866dffef488b71783dab6
Validity
Not Before: Jan 31 16:00:35 2025 GMT
Not After : Feb 1 16:00:35 2025 GMT
Subject: CN=6d137c90827c22831eaf526917682a4be2317c42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3a:17:94:77:07:24:11:b5:81:42:c5:8c:99:
9b:98:6b:1b:9a:a8:dd:53:d8:88:0e:a5:07:47:c3:
74:68:cd:53:a3:dd:c3:1b:2d:3d:24:6a:4c:78:b4:
a8:0c:19:c3:49:ca:6e:c8:2a:79:77:d2:0e:d6:09:
c6:03:f0:14:a1:9d:22:6a:35:3e:1c:67:da:23:66:
89:5d:cf:9f:09:e2:85:1a:22:cc:c9:06:ee:dc:d4:
11:4e:25:8c:4e:62:10:be:cd:00:63:97:8f:a0:3e:
82:be:78:d0:59:6f:b8:5c:92:2b:d0:ba:ae:84:81:
bb:93:d5:98:ce:58:01:08:1f:69:25:9f:52:0e:e9:
1e:5e:f8:47:71:9b:7f:e9:57:74:a2:d4:9d:69:9c:
fb:41:16:6f:bc:03:2e:f7:c0:4c:bf:5f:bc:a4:a8:
89:37:e8:8b:ab:0e:5e:2e:59:76:fa:48:61:03:bb:
01:23:fb:8c:78:36:a1:06:07:0d:4b:a5:8c:68:b3:
a7:8e:0b:5c:2f:98:11:ac:d0:53:7d:55:78:30:87:
cb:63:d0:01:a5:83:94:c5:d1:a1:a3:89:9f:07:b7:
43:2d:97:52:54:86:bd:44:a2:bb:75:b2:7c:3e:f9:
04:01:e7:03:c9:98:5e:67:e3:92:fc:2e:42:b9:05:
88:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:13:7C:90:82:7C:22:83:1E:AF:52:69:17:68:2A:4B:E2:31:7C:42
X509v3 Authority Key Identifier:
keyid:D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:34:ad:cb:a7:7b:48:81:de:30:e9:89:49:bf:c7:a4:06:7a:
47:53:b7:60:75:2e:dd:bc:ec:eb:b1:e0:66:af:2b:31:cc:ac:
8f:7d:51:f7:7f:90:7f:ad:f0:d6:97:9a:32:f2:f5:5f:50:0a:
6c:7b:28:00:e2:0a:67:a7:08:41:87:a3:16:8d:79:c9:8f:e7:
17:12:0e:d5:be:25:93:bc:a6:7b:92:34:c3:1e:7a:6a:61:d6:
59:05:06:f8:44:e2:f7:6c:34:f1:96:36:dc:b6:5b:fa:85:be:
50:f4:9e:b7:f8:56:d7:da:45:8e:f5:06:aa:1f:6d:3e:ac:a8:
49:07:4f:14:00:e7:b0:25:be:3a:63:9f:74:d1:90:15:ee:20:
ac:a2:e8:4f:33:67:f3:40:9f:6b:6a:97:b7:66:97:32:73:7d:
95:a9:60:66:de:02:0b:1e:a3:d7:d0:62:9a:f8:d9:2f:8e:c7:
00:47:5a:15:f4:f0:fd:55:9b:eb:5f:99:3a:41:b4:8b:13:68:
14:0d:99:db:0f:27:b4:2d:6d:da:c0:0a:5b:03:ef:14:57:4e:
7d:41:4b:3f:a2:46:43:ba:1c:df:2b:3b:75:a8:44:30:5e:6f:
dc:a6:72:c8:a2:29:34:2e:98:ad:2b:e1:5a:55:c8:03:b1:08:
33:c0:ff:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:56:47 2025 by rpki-client