Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
File: yh3vhAA2XhysFuj3iHCS2smDtz4.mft (raw, json)
Hash identifier: 8S3tfnhatWck7HVsJNDhXmK7ocfCAscHHddQw0yzP3I=
Subject key identifier: 41:8E:84:53:1F:CC:74:BA:31:DA:6C:B8:0C:97:63:68:91:C4:FD:F0
Authority key identifier: CA:1D:EF:84:00:36:5E:1C:AC:16:E8:F7:88:70:92:DA:C9:83:B7:3E
Certificate issuer: /CN=ca1def8400365e1cac16e8f7887092dac983b73e
Certificate serial: 0194BCAA1FF526BB3DD50E821B4D4F4E5290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yh3vhAA2XhysFuj3iHCS2smDtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
Manifest number: 0FC7
Signing time: Fri 31 Jan 2025 14:00:53 +0000
Manifest this update: Fri 31 Jan 2025 14:00:53 +0000
Manifest next update: Sat 01 Feb 2025 14:00:53 +0000
Files and hashes: 1: JOHfVLRjbgChQjLZ30d-DxmHuLA.roa (hash: OvGleZlyc/SzFlxVrESN9Tsi/ml5v3uiXnmlsUGLhlw=)
2: KYuIjlD_ziUu3DKQBc29NCLEHMs.roa (hash: ovaCWeRdT+nBdpVH9f8Oy/HVlcip6zrEl0tqWXxNw4s=)
3: yh3vhAA2XhysFuj3iHCS2smDtz4.crl (hash: yhe/x1LpNiiX7HZhBDtgRQryRw6k+uzFjDeJX434JIA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:1f:f5:26:bb:3d:d5:0e:82:1b:4d:4f:4e:52:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1def8400365e1cac16e8f7887092dac983b73e
Validity
Not Before: Jan 31 14:00:53 2025 GMT
Not After : Feb 1 14:00:53 2025 GMT
Subject: CN=418e84531fcc74ba31da6cb80c97636891c4fdf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b8:39:7b:17:bf:b7:64:28:e3:8b:28:36:7e:
46:d1:cf:6f:77:6d:78:20:6e:23:4f:2a:3c:6d:ac:
0f:af:7d:90:22:3f:cd:31:99:2c:71:36:d6:3c:38:
fa:24:3f:f4:b1:54:57:71:be:06:9f:88:40:5c:3c:
91:c2:a0:21:f0:01:16:6c:86:a4:0f:a8:64:05:b9:
bb:c9:9d:7b:76:9d:4a:44:c2:99:98:91:73:89:f2:
b8:1d:d3:14:cc:e5:3f:73:12:90:e6:f4:13:c8:9a:
cf:98:cf:bc:92:e0:a7:ab:4d:18:88:81:bb:a1:4d:
a7:c7:cf:22:a8:04:4e:7a:43:91:f9:ab:39:da:7e:
d3:8f:e7:6b:af:1f:5b:58:0f:51:07:ba:25:10:b7:
81:3f:41:68:10:76:b1:67:31:1b:19:85:e9:d4:fb:
a8:57:eb:bd:2a:a7:8b:0f:8c:e1:4d:72:13:b5:71:
30:e3:a4:a2:b6:9a:8d:51:b7:c4:10:e6:65:58:52:
c8:26:46:6b:8c:82:ef:10:2e:9a:14:84:62:a5:4a:
8f:4d:3c:3f:e1:70:76:6c:08:21:53:46:3a:f2:4a:
2c:7e:d6:57:cc:c8:01:0e:c4:b7:31:9a:01:e7:5d:
50:01:cb:1e:28:85:be:67:76:c2:e6:33:8d:8e:26:
00:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8E:84:53:1F:CC:74:BA:31:DA:6C:B8:0C:97:63:68:91:C4:FD:F0
X509v3 Authority Key Identifier:
keyid:CA:1D:EF:84:00:36:5E:1C:AC:16:E8:F7:88:70:92:DA:C9:83:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yh3vhAA2XhysFuj3iHCS2smDtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/71fd10-4f26-449a-b361-f98ec9d162be/1/yh3vhAA2XhysFuj3iHCS2smDtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:fb:7b:cb:a0:5f:6f:96:48:dd:3d:4f:f9:5a:e9:12:99:28:
6f:4d:63:bd:50:d2:f5:7f:86:42:71:71:df:76:a7:a4:2b:e3:
fb:11:19:66:5c:0a:57:99:8e:74:5b:86:f3:03:10:c1:3e:c3:
6d:84:f1:7a:33:a2:36:af:d1:da:04:8c:2c:0c:f7:54:c6:32:
06:cb:fb:66:67:28:95:12:7e:d1:64:eb:76:58:78:ac:fd:51:
81:7a:02:42:a6:04:16:65:48:a4:8c:6e:50:03:0f:c7:f9:d0:
43:f6:c7:df:27:aa:37:e0:1a:3b:31:93:b2:85:b0:88:2d:e5:
19:d5:7a:79:85:f8:b3:4b:50:d3:d9:51:92:19:22:24:9b:fa:
5f:76:7a:20:67:e2:c7:26:6f:b0:87:30:48:3b:4f:29:0b:b4:
63:b3:ce:68:0f:5a:da:d2:be:55:e6:45:42:47:cd:f3:f1:79:
d3:11:59:bd:85:ad:bd:eb:31:3a:cd:2e:b0:d4:be:6b:60:27:
cf:88:f4:16:85:a4:2d:c3:aa:b5:d7:19:8e:08:8e:63:fc:ea:
7f:a6:08:f5:ef:97:2b:97:e3:11:21:45:74:89:7f:eb:7c:65:
3b:9b:ef:7e:6b:b5:32:43:25:73:fe:6d:e8:27:c6:6d:c2:71:
f9:3d:4d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:41:52 2025 by rpki-client