Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
File: Y3A8pQxDKs1_HLunwH2iICKZymM.mft (raw, json)
Hash identifier: nuxUDSZjWH4YYyuQB85IhpMTl6jQFli0Vvu4zdr2cmo=
Subject key identifier: AA:1C:C7:28:E6:15:4B:03:96:C1:E6:64:E0:FF:60:56:E0:F1:91:D5
Authority key identifier: 63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
Certificate issuer: /CN=63703ca50c432acd7f1cbba7c07da2202299ca63
Certificate serial: 0194BD4E92F9FC924A32B2A8B89D5CB8851B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
Manifest number: 112F
Signing time: Fri 31 Jan 2025 17:00:30 +0000
Manifest this update: Fri 31 Jan 2025 17:00:30 +0000
Manifest next update: Sat 01 Feb 2025 17:00:30 +0000
Files and hashes: 1: Y3A8pQxDKs1_HLunwH2iICKZymM.crl (hash: 6rr0HpANNOlT9Pngi5L6OtcUzVOc8JoBAD7Sq4+Jc9k=)
2: uKlqiwtoXkp9xjLftlQ9vTMqqrs.roa (hash: EwwfvCJkfqVqVmU0gYHOqumHmaTFzwTDUQGR86XAOZk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:92:f9:fc:92:4a:32:b2:a8:b8:9d:5c:b8:85:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63703ca50c432acd7f1cbba7c07da2202299ca63
Validity
Not Before: Jan 31 17:00:30 2025 GMT
Not After : Feb 1 17:00:30 2025 GMT
Subject: CN=aa1cc728e6154b0396c1e664e0ff6056e0f191d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:b9:7a:60:4f:1a:39:47:06:59:d6:4b:cd:
90:a6:48:6f:6d:97:cf:3d:03:72:a7:6e:d0:5e:9f:
0a:f1:fe:b1:31:55:bf:b0:07:8e:05:58:c8:d8:26:
db:88:fd:c8:87:81:ea:d5:06:10:5a:2b:a8:fe:c9:
e4:c2:8e:76:9e:5e:75:a1:2d:8c:14:48:f1:86:2e:
46:1d:e0:fe:31:25:5f:ca:eb:7b:05:cd:ec:10:ee:
6e:ed:6b:40:fe:bb:85:22:97:8a:04:98:f0:41:8c:
20:78:54:35:a2:62:a6:67:a0:02:30:16:b7:29:3d:
01:54:c7:59:87:40:6a:ce:e5:9d:06:1a:8c:66:73:
9d:7e:c6:62:97:9a:f1:48:77:07:a3:56:16:71:e2:
6f:1a:80:19:2f:58:fa:d8:65:b9:96:5d:44:83:8a:
72:17:45:31:49:d1:b3:16:ed:25:ce:2f:e6:96:e4:
43:85:ca:b5:e3:85:20:be:65:f5:cb:2d:e7:aa:8e:
03:4a:4c:1e:0a:03:f5:1e:15:77:bf:12:27:3c:47:
8f:e4:6f:f9:38:a3:5b:8e:f1:dd:a9:f9:01:b7:34:
a1:25:7d:61:d6:4a:b3:6f:d0:cf:86:c9:c4:38:69:
ff:fc:dc:b2:12:08:d0:a7:c9:c7:58:d2:c1:ef:bc:
17:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1C:C7:28:E6:15:4B:03:96:C1:E6:64:E0:FF:60:56:E0:F1:91:D5
X509v3 Authority Key Identifier:
keyid:63:70:3C:A5:0C:43:2A:CD:7F:1C:BB:A7:C0:7D:A2:20:22:99:CA:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3A8pQxDKs1_HLunwH2iICKZymM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/af334a-f9b3-419d-b590-fb0fb1c06c74/1/Y3A8pQxDKs1_HLunwH2iICKZymM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:b7:24:1a:fd:b6:16:a1:3d:91:43:a8:a5:0b:d6:69:bd:fc:
ef:28:c9:e2:16:d5:96:67:d8:8f:31:38:c4:de:67:d0:10:b0:
be:45:11:80:db:c3:ee:fd:0e:7a:da:5f:21:c9:50:45:dd:5e:
b5:3d:09:58:e8:0c:e8:4f:55:a5:0d:e3:88:a7:39:8f:91:56:
b6:96:ac:f4:ae:86:76:e3:ca:2c:6c:88:99:b0:f8:45:da:ed:
2d:e1:fe:38:ed:d5:c5:7e:36:16:14:1b:3a:ee:8c:5a:4f:79:
07:2e:46:ff:94:a0:f2:e3:74:12:3f:d8:c5:aa:3e:c2:4f:c2:
e3:34:03:66:44:5d:ab:9c:b6:e7:ef:ea:71:b5:cc:1b:50:41:
24:f6:f2:11:7a:e9:8b:a3:a9:e4:5c:7c:a5:4b:1a:31:8e:2d:
08:00:fc:5d:a0:ec:c4:22:3d:ce:73:23:d9:f4:a6:63:63:8a:
1e:a9:e0:3d:44:fa:26:9c:3e:22:8e:80:46:3d:6d:6f:ba:a2:
86:45:4a:92:6a:b0:f3:9b:ca:7b:4f:4e:9b:a1:92:94:d7:ac:
cb:c9:2b:17:5e:a0:b5:87:90:19:3f:fe:e3:c7:38:6f:76:15:
22:57:6a:96:71:93:5d:49:cf:c7:4f:2a:c0:1b:a7:7e:6d:ef:
ee:d5:5e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:09 2025 by rpki-client