Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
File: _YmzSchPx7NBKlLWX_Jg0swomrk.mft (raw, json)
Hash identifier: 8CwBRpjJICaFdTEstV0t4vJWH2sBKkbx74MKOLJrs9k=
Subject key identifier: 9F:F6:DF:E8:54:B0:80:B8:45:77:B0:65:C1:CE:D4:47:E0:36:91:06
Authority key identifier: FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
Certificate issuer: /CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Certificate serial: 0194BC04EF35CE011FA2C6A8F9BC27762AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
Manifest number: 0ABA
Signing time: Fri 31 Jan 2025 11:00:27 +0000
Manifest this update: Fri 31 Jan 2025 11:00:27 +0000
Manifest next update: Sat 01 Feb 2025 11:00:27 +0000
Files and hashes: 1: 7voLoVZs2GImQRBCo5BKLZ-Uj7w.roa (hash: 4GwoSbNu+hRTl0Hpw8zq+LaDTkSr14kM179EFGiS8KQ=)
2: _YmzSchPx7NBKlLWX_Jg0swomrk.crl (hash: pL/7TZG/S4nLGtef/1QPAw7aeinnFMfCHJmYDGP56fE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:ef:35:ce:01:1f:a2:c6:a8:f9:bc:27:76:2a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd89b349c84fc7b3412a52d65ff260d2cc289ab9
Validity
Not Before: Jan 31 11:00:27 2025 GMT
Not After : Feb 1 11:00:27 2025 GMT
Subject: CN=9ff6dfe854b080b84577b065c1ced447e0369106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cd:06:02:3a:bb:51:98:0e:46:85:ec:36:1f:
97:34:92:6e:a0:8b:13:b4:79:23:80:d4:bd:3b:9a:
10:24:e2:03:4a:ec:93:56:0b:5e:3a:5a:c5:18:35:
c1:90:b4:ca:d6:64:bf:31:14:7d:e0:48:fb:d4:d8:
90:26:b1:36:d8:f4:11:41:7d:e9:a2:44:93:e6:d7:
54:bb:ad:d5:f5:39:f1:76:29:50:9d:bf:64:29:e7:
6a:70:2d:a2:28:6d:78:bd:c0:34:6a:cc:93:3e:f2:
da:14:57:87:c1:7d:aa:8f:8e:15:28:7a:85:c2:29:
3e:74:d0:c2:ad:6d:1a:cd:1b:c9:75:e6:99:d7:50:
95:4b:4b:01:46:78:2c:1b:b0:80:dd:d5:9c:b4:4d:
a1:3f:c4:4f:35:4b:eb:35:6d:49:01:ac:3f:fa:89:
cb:2e:31:ae:fd:d5:98:5f:78:27:dc:8a:1d:2c:41:
56:62:b2:3f:ce:f1:0a:c5:55:1e:c8:b5:1e:2a:49:
11:55:63:59:04:15:9e:0c:73:bb:2e:79:75:c3:ab:
61:1a:b5:68:99:0e:a9:ce:b7:f3:fd:9f:22:90:94:
fd:11:8c:5a:6e:0a:99:7b:d9:d8:16:be:ba:53:7d:
af:07:fb:cc:67:d7:d7:69:98:57:6e:db:a1:9d:7e:
f0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F6:DF:E8:54:B0:80:B8:45:77:B0:65:C1:CE:D4:47:E0:36:91:06
X509v3 Authority Key Identifier:
keyid:FD:89:B3:49:C8:4F:C7:B3:41:2A:52:D6:5F:F2:60:D2:CC:28:9A:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_YmzSchPx7NBKlLWX_Jg0swomrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ee714a-21ac-4386-82f5-e8176102c5ff/1/_YmzSchPx7NBKlLWX_Jg0swomrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:4f:a9:24:68:2a:fa:78:c7:f7:ad:05:98:5d:aa:9d:1a:d2:
3f:54:d0:e6:8d:41:d8:e9:99:c4:d9:0b:ef:a1:7d:a2:43:c9:
95:a0:b8:40:da:e8:f4:45:c6:a7:89:db:5e:7a:c5:90:ca:a9:
39:c9:78:27:13:75:63:8d:5a:02:8e:80:63:75:dd:a6:02:58:
46:ff:d7:1b:a8:27:73:52:62:46:d2:5c:4b:bf:fa:ab:26:5a:
39:90:cf:9b:2b:44:97:a2:08:36:25:dc:a8:99:fc:38:84:db:
0f:17:e3:bd:ab:15:a0:49:19:a9:f8:75:b3:22:7e:63:46:b1:
e0:ad:fc:62:8f:0a:c0:bd:45:09:fe:56:58:dd:9f:7e:be:a3:
3e:fc:bc:33:30:7b:c2:8a:e0:6a:14:35:b6:48:9f:d2:60:c7:
b9:52:20:7c:56:88:3c:80:c7:6a:d1:08:dc:ef:b0:2b:aa:ea:
ba:af:07:ce:b4:aa:26:32:84:45:48:77:e1:de:90:22:61:39:
f8:b1:a3:1a:78:26:66:ce:9f:6d:1c:cd:c5:86:40:c1:19:cd:
df:f3:f4:bc:4e:03:7a:ba:c5:ab:50:3d:bd:ae:7e:47:0d:7b:
61:44:4b:27:d2:27:52:df:6c:9e:dd:76:6d:80:b6:22:f5:a2:
2b:93:1d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:37:03 2025 by rpki-client