Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
File: rvy2RB1w0usQ12M9pzGaPT_5d64.mft (raw, json)
Hash identifier: jRuvSKgc+ToZ/0t5/+NLW5WPeGvlxrifk7/WpSUxOvA=
Subject key identifier: AB:61:6F:FF:87:4A:2B:A1:05:AA:57:1D:40:5D:27:A2:FE:C7:8A:21
Authority key identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
Certificate issuer: /CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Certificate serial: 0194BC7294BCE85F174B7D09157AE38E8FA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
Manifest number: 04A1
Signing time: Fri 31 Jan 2025 13:00:13 +0000
Manifest this update: Fri 31 Jan 2025 13:00:13 +0000
Manifest next update: Sat 01 Feb 2025 13:00:13 +0000
Files and hashes: 1: OywOw90-BmuDTm7-vAr4oYdaiWc.roa (hash: 8bINvDgAJsHgmIljWuh30WywbwSEgdwt4RUZy9xG14w=)
2: rvy2RB1w0usQ12M9pzGaPT_5d64.crl (hash: Q6Wt0qaLElAh3IvrFICb/l4UEEJa3D6niqCf7Iue0bg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:94:bc:e8:5f:17:4b:7d:09:15:7a:e3:8e:8f:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Validity
Not Before: Jan 31 13:00:13 2025 GMT
Not After : Feb 1 13:00:13 2025 GMT
Subject: CN=ab616fff874a2ba105aa571d405d27a2fec78a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:50:05:75:bd:a3:9a:74:c6:fb:07:15:29:
50:55:1a:7a:9d:29:60:a4:1b:04:31:12:2b:65:88:
31:41:f3:c4:44:96:11:b7:12:70:1e:2b:3e:94:8b:
d4:1d:57:b7:a8:7f:2a:62:0a:52:bb:c2:f1:3c:92:
01:a3:6f:ca:bb:cb:49:03:7f:3e:61:37:22:97:76:
33:bf:17:8b:2f:c8:58:f5:c3:a7:dc:c5:2f:32:ab:
bf:83:14:ee:48:c1:0e:7d:e2:4b:e8:99:91:44:47:
16:f5:b5:45:21:74:f2:ef:e0:50:04:60:2c:14:f1:
52:71:92:58:01:c6:22:87:58:e8:d3:e6:d3:8e:92:
4a:bc:d0:5b:b6:0f:09:66:ff:b3:f4:7b:97:b9:8d:
04:95:14:b9:28:65:fc:30:24:b4:b6:00:5e:96:50:
3e:dd:11:c8:bd:cf:23:5d:f0:8a:3c:24:c6:56:61:
46:78:06:db:32:63:41:ff:4d:8e:a7:82:33:f7:3c:
00:d7:d2:e4:0c:d8:ca:89:56:3c:fa:4f:66:65:47:
7c:f7:81:51:e1:6c:a5:17:18:3d:81:52:96:3e:4a:
bd:83:4d:a2:0b:e7:88:16:ec:55:b6:3f:b7:5f:5c:
40:94:f9:3d:f7:d5:7f:2d:8d:61:db:21:1f:9a:32:
14:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:61:6F:FF:87:4A:2B:A1:05:AA:57:1D:40:5D:27:A2:FE:C7:8A:21
X509v3 Authority Key Identifier:
keyid:AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b9:76:2a:e8:84:46:a8:d7:1a:ad:da:b0:6d:ec:9a:7d:a6:
3f:f5:ac:af:3a:27:8e:5e:af:a8:d0:11:7a:97:82:31:57:52:
d9:c0:ff:cd:62:15:f6:26:57:73:09:37:f9:b4:8c:9a:34:97:
2f:9f:d3:3b:e2:0e:c1:43:0c:c0:57:46:0e:25:76:aa:41:94:
93:6f:61:1e:65:15:cd:cf:59:b1:fc:d9:66:03:87:04:54:5f:
97:13:13:68:72:86:0f:d3:2d:fc:35:1e:81:a9:cf:70:cb:bb:
de:13:5a:da:6a:78:ab:0a:e0:c4:3e:a8:f7:e3:7b:2a:21:35:
31:8e:11:9b:aa:e9:f3:28:8b:c7:59:1b:0b:94:cd:b6:16:bb:
a2:0b:48:88:8d:08:37:02:50:ba:a4:d8:a4:46:81:d8:bf:25:
1f:a6:7f:75:bd:4c:90:7e:bd:bc:f0:72:86:15:96:93:f5:14:
6f:18:b5:54:52:ad:0b:6f:58:65:86:99:66:fd:b9:a1:e3:f6:
f4:d3:97:21:19:eb:a3:89:76:e8:7d:2e:e1:3c:d9:d0:e6:64:
3b:1f:e1:79:ba:41:d4:ca:ca:02:cf:33:00:5e:f8:51:1b:88:
f6:de:fd:f7:80:06:d9:ba:74:29:d5:14:35:44:40:c9:83:e8:
a4:0f:7f:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:41:00 2025 by rpki-client