Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
File: _y3yl9sa8DdqWipy5pin6yh6868.mft (raw, json)
Hash identifier: TnfSOcOoLYPeFrc3TsTfAPNuqvonOX/Ay8kdo9LcElA=
Subject key identifier: B7:35:66:BB:1D:FE:65:1E:DD:2C:5F:95:71:86:C8:57:E9:31:59:0E
Authority key identifier: FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
Certificate issuer: /CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Certificate serial: 0194BC3BC7A87AA97A59BCDD039DAD2CDF05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
Manifest number: 02E5
Signing time: Fri 31 Jan 2025 12:00:21 +0000
Manifest this update: Fri 31 Jan 2025 12:00:21 +0000
Manifest next update: Sat 01 Feb 2025 12:00:21 +0000
Files and hashes: 1: LatVmLe7_3HhJVu7rsLTHeovBKs.roa (hash: IGGEFB71BgJP92qEL3zGMAOiHYa+Of8dpxdn55D3Bac=)
2: _y3yl9sa8DdqWipy5pin6yh6868.crl (hash: k31uE2z+/avAGjkdzJz9/YI0wGrzVLLvXSFyyVd9dsI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:c7:a8:7a:a9:7a:59:bc:dd:03:9d:ad:2c:df:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff2df297db1af0376a5a2a72e698a7eb287af3af
Validity
Not Before: Jan 31 12:00:21 2025 GMT
Not After : Feb 1 12:00:21 2025 GMT
Subject: CN=b73566bb1dfe651edd2c5f957186c857e931590e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:06:a5:92:57:65:7a:ed:b2:30:d2:3e:34:a4:
2a:59:88:09:d1:01:c4:e9:34:ff:63:9d:5f:7c:56:
32:aa:6d:26:f7:c7:40:d0:fc:81:1a:86:aa:77:04:
4c:fe:a0:a8:13:34:d6:10:ff:88:60:45:82:31:0d:
0f:73:5e:89:10:2b:0a:0f:28:bd:5b:30:89:e6:e7:
09:c5:b5:f7:11:c5:e7:e3:04:54:8a:24:54:32:42:
11:f5:16:cd:a3:25:c4:23:57:9d:01:98:eb:f7:c8:
e3:76:bf:b0:66:df:b5:38:4b:fc:76:85:44:5f:04:
8b:4c:02:3c:12:07:97:3a:b3:d2:bd:95:c3:85:ec:
bf:90:75:38:9c:8c:e3:c9:41:8b:9d:7c:50:de:8d:
79:5e:3d:3d:04:9a:5f:7a:b7:79:de:fe:2e:19:6d:
43:d0:62:b6:eb:47:d3:cc:c5:93:50:77:5c:19:67:
17:3e:18:24:e7:bd:7d:73:e0:f4:6d:e4:ba:b6:8d:
01:38:ba:a5:04:b0:bb:a3:ae:18:d4:9a:88:df:98:
e5:73:f6:a2:1d:95:8c:39:da:bf:b4:76:9b:31:eb:
7b:27:93:a7:75:fa:9a:3f:e8:54:90:b7:c2:5d:84:
f6:9b:cf:d2:2a:a3:0f:24:0a:e5:8f:73:cf:21:23:
8d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:35:66:BB:1D:FE:65:1E:DD:2C:5F:95:71:86:C8:57:E9:31:59:0E
X509v3 Authority Key Identifier:
keyid:FF:2D:F2:97:DB:1A:F0:37:6A:5A:2A:72:E6:98:A7:EB:28:7A:F3:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_y3yl9sa8DdqWipy5pin6yh6868.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/cd51e8-6594-4a58-bd57-01f28f4d49f6/1/_y3yl9sa8DdqWipy5pin6yh6868.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:12:a2:7e:c3:b2:34:f8:48:ec:ff:6e:60:f5:bb:59:e8:b0:
e1:57:a4:84:19:5e:b7:57:ba:78:7b:2a:a6:9c:66:4e:0a:87:
0a:a4:44:ad:71:dd:3b:61:c5:c9:f4:33:b9:e6:fd:e9:a4:a0:
a0:4d:a6:a2:5d:1c:21:01:f0:a9:1a:82:34:d0:60:c5:63:ac:
31:91:78:f0:78:77:a8:5a:e8:9d:b9:74:3f:01:45:37:ec:16:
bd:77:6d:3d:e1:a5:ef:c0:b4:52:57:a4:24:bb:ff:08:a3:b2:
9d:60:c5:9a:c5:04:4c:5a:7b:c4:d2:79:6c:fc:97:09:e7:52:
81:10:ac:68:03:f0:bb:44:b7:f9:c2:c6:17:f0:9c:16:4b:83:
4a:05:58:6f:5b:d4:aa:14:ec:dd:72:2f:bd:44:d8:82:be:38:
6a:74:27:b2:7b:11:07:32:89:0d:0b:92:07:e5:f5:29:56:19:
83:9d:d2:99:cf:54:3e:bf:15:3d:bb:43:19:33:84:d0:2a:e3:
fa:fa:b1:ec:97:c8:d0:12:23:0e:65:fc:97:37:62:10:d1:53:
62:fd:54:3d:ac:c1:15:94:81:ad:c2:cf:3b:d9:96:81:be:db:
75:18:82:37:07:27:59:81:f1:84:b8:03:57:89:e2:43:5b:6b:
51:a0:9b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:40:55 2025 by rpki-client