Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
File: __YE3HiSupn1NSlrkQLY16GEQ4g.mft (raw, json)
Hash identifier: jMgavpYRjgAY78t7+YDZe5GTy61hOQY6jJPM/WpwHkE=
Subject key identifier: 15:3E:D9:4D:BC:4D:80:10:14:1B:C1:BF:63:83:D3:94:9E:B4:DA:61
Authority key identifier: FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
Certificate issuer: /CN=fff604dc7892ba99f535296b9102d8d7a1844388
Certificate serial: 0194BCE0D8CA2362BDB427EE6182AFB9D70A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
Manifest number: 13BC
Signing time: Fri 31 Jan 2025 15:00:39 +0000
Manifest this update: Fri 31 Jan 2025 15:00:39 +0000
Manifest next update: Sat 01 Feb 2025 15:00:39 +0000
Files and hashes: 1: __YE3HiSupn1NSlrkQLY16GEQ4g.crl (hash: SSbwVq1f6ArDl3udBqMn9/BSGLDyx5Zx6tFxuu/Fvt8=)
2: eNa9shPNfJuzCCd26UNFwFr7enQ.roa (hash: Pk/A2JGNB1YeZQ3WAmhEqcfQTtjVI6QLZ8AAQbj5fY4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:d8:ca:23:62:bd:b4:27:ee:61:82:af:b9:d7:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff604dc7892ba99f535296b9102d8d7a1844388
Validity
Not Before: Jan 31 15:00:39 2025 GMT
Not After : Feb 1 15:00:39 2025 GMT
Subject: CN=153ed94dbc4d8010141bc1bf6383d3949eb4da61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:07:47:7f:6f:3a:e8:9c:b9:fa:02:35:1f:f3:
8b:dd:25:10:72:9f:7e:93:8b:4f:11:12:d5:70:a6:
3b:76:94:8d:38:9e:ce:36:0e:09:71:11:02:7d:70:
fb:9c:da:1f:ad:9f:86:26:fb:bd:d3:bf:b2:da:da:
ab:36:07:8f:ec:6a:f5:a6:0b:56:99:a7:0c:a9:a0:
fc:53:71:bf:c0:7b:82:40:ba:9b:da:99:f3:5a:05:
96:ba:87:3c:ee:2e:be:59:6c:33:26:43:13:4b:69:
bd:13:8f:0a:f1:6a:77:9d:1a:d0:76:58:0a:e0:cd:
cd:99:e4:0d:5d:e5:be:50:41:2c:3f:c8:78:33:0d:
d4:38:6b:42:a7:d5:95:a3:b7:81:3d:90:03:85:92:
b1:b8:ba:65:be:9f:0d:3b:8c:23:b8:f7:a3:e4:df:
23:3b:d0:bc:ab:8e:64:d5:04:db:ab:01:49:46:13:
d2:1c:dd:c1:d9:57:06:30:9e:f5:91:60:b8:7f:40:
4c:dc:1c:5b:ab:95:a0:39:ba:f2:e4:d3:9e:49:72:
42:03:26:f3:6f:88:e8:89:ac:b2:2b:f1:39:a4:5a:
a4:ab:82:bb:b5:aa:36:21:61:90:3a:e7:e5:47:38:
4e:c7:ab:ad:de:a2:a8:c5:58:5c:ec:ea:2e:d4:4e:
ae:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3E:D9:4D:BC:4D:80:10:14:1B:C1:BF:63:83:D3:94:9E:B4:DA:61
X509v3 Authority Key Identifier:
keyid:FF:F6:04:DC:78:92:BA:99:F5:35:29:6B:91:02:D8:D7:A1:84:43:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__YE3HiSupn1NSlrkQLY16GEQ4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/b378a1-5b1b-4c89-8bc5-1c19949b96b6/1/__YE3HiSupn1NSlrkQLY16GEQ4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2b:62:0c:17:dd:79:a0:43:5b:d2:72:8a:8b:cb:fb:67:83:
bb:e6:3f:44:68:35:e3:4d:08:5c:c4:95:01:4e:50:77:27:c4:
4a:cf:43:e2:41:c8:a6:17:a9:0a:1e:44:c1:a5:81:3c:db:55:
c2:2b:d0:46:b9:60:d7:90:40:55:fa:89:ac:97:1e:81:c9:e2:
a3:d3:ff:96:43:b7:13:47:fc:7b:14:52:bf:19:92:b9:b4:4b:
49:30:7a:a1:38:97:3f:ae:5d:31:36:b9:62:67:00:41:e1:9f:
ed:78:06:01:fb:2e:25:e6:c6:63:9f:93:a7:e1:cd:98:91:15:
c1:81:86:ae:f6:bb:d7:33:45:8f:8b:81:ab:fd:94:5f:d1:bd:
ce:1f:fc:4b:c5:3e:8d:59:50:3e:3a:c6:2f:0d:d8:98:48:19:
b2:3a:8f:2a:e2:c6:de:8f:43:54:89:aa:eb:25:c3:3c:49:c5:
4f:40:38:cf:a5:5c:93:e4:a2:c0:d8:4e:73:29:9b:d7:fc:83:
77:ed:ed:8d:d2:83:a4:3f:46:c4:36:ce:4d:7a:f7:42:eb:ea:
ab:45:05:4f:e6:6f:49:4e:2e:2b:20:d8:27:7b:89:c6:1a:d5:
ec:f7:fa:ff:8c:da:37:3d:82:15:c1:c4:95:ae:47:db:00:84:
7e:cc:90:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:05:00 2025 by rpki-client