Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
File: vYUnKkCAkE914jWkevC0EmbipgM.mft (raw, json)
Hash identifier: GW7y+KcqMTMAR1VmwGB2gpnmWVjBlYfaWsmSbk3oh/c=
Subject key identifier: 5A:C1:FF:16:D5:20:8A:2E:EB:BE:5A:8F:66:77:D9:DA:04:9F:E7:8D
Authority key identifier: BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
Certificate issuer: /CN=bd85272a4080904f75e235a47af0b41266e2a603
Certificate serial: 0194BD858A6E05EDE26711CA692C7B9B56E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
Manifest number: 0755
Signing time: Fri 31 Jan 2025 18:00:33 +0000
Manifest this update: Fri 31 Jan 2025 18:00:33 +0000
Manifest next update: Sat 01 Feb 2025 18:00:33 +0000
Files and hashes: 1: qUq_q62qYu3qxVOMe_F0xihpmUw.roa (hash: SovqRJc4ePvthgrrsQXCalBtYnWMU+TdM7o0xgmwIiE=)
2: vYUnKkCAkE914jWkevC0EmbipgM.crl (hash: x0VO/WecMNH16gG548HEZrG7ELQjoO0t/MpSblv+OJ4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:8a:6e:05:ed:e2:67:11:ca:69:2c:7b:9b:56:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd85272a4080904f75e235a47af0b41266e2a603
Validity
Not Before: Jan 31 18:00:33 2025 GMT
Not After : Feb 1 18:00:33 2025 GMT
Subject: CN=5ac1ff16d5208a2eebbe5a8f6677d9da049fe78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:46:41:29:7f:b1:a6:97:fc:47:fc:7d:44:94:
c1:b2:41:27:34:6e:a3:f3:58:35:f1:fb:c8:38:f6:
83:75:0e:d2:08:5a:91:7f:1d:be:9f:9b:c2:05:38:
e3:71:11:13:50:fa:37:2c:ea:3a:b2:8d:f2:d4:f9:
37:68:8b:ab:f4:ef:72:97:7d:bc:f2:90:c7:42:2d:
91:90:05:c9:a1:3f:22:52:04:b2:e0:d5:f1:02:46:
ca:9e:ba:00:dd:c4:dd:ee:6e:04:31:c9:81:84:a2:
13:28:e7:d8:a6:8f:cb:ac:85:f5:89:0c:96:f9:36:
fc:68:a4:f7:07:95:7c:cf:48:cf:43:b7:be:3a:5a:
f8:ab:3f:ec:ba:65:00:38:21:41:32:90:7e:d8:0e:
6e:5c:92:cf:52:82:e6:ec:ea:f2:0a:60:a1:f6:8f:
34:2d:88:5c:b9:14:f7:a6:4c:18:8c:56:6b:ae:d0:
e9:9d:17:50:6b:bc:95:a8:97:6a:ca:dc:5b:f6:5b:
c3:f8:71:32:d1:a9:7f:e1:04:db:15:08:7b:53:1a:
d2:b4:46:b6:b7:1f:ee:85:a6:cb:10:05:ae:5e:1b:
c6:c1:e2:65:54:f4:f0:e5:26:bf:f0:79:35:83:d9:
69:1f:88:a0:04:0d:05:d8:2e:1a:5d:9d:dd:fc:bc:
e4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C1:FF:16:D5:20:8A:2E:EB:BE:5A:8F:66:77:D9:DA:04:9F:E7:8D
X509v3 Authority Key Identifier:
keyid:BD:85:27:2A:40:80:90:4F:75:E2:35:A4:7A:F0:B4:12:66:E2:A6:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUnKkCAkE914jWkevC0EmbipgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/282cb0-91be-422a-95d3-24f20f9675ec/1/vYUnKkCAkE914jWkevC0EmbipgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:54:59:35:12:f1:97:68:9c:44:ac:b7:46:dd:2b:29:a2:54:
6f:bc:f5:c6:28:c6:ed:0e:0e:83:06:27:fd:81:02:d1:a0:ca:
7e:64:9c:75:cd:33:29:2b:a7:a6:f7:cd:7c:ef:3a:a3:4c:df:
20:c2:69:a9:0b:ca:4c:3b:5f:cb:6a:ec:5d:bf:8a:d2:e8:57:
f7:39:d3:42:e2:ce:af:8b:c8:1f:2d:bb:68:f9:b0:f3:2f:b3:
fe:eb:fe:78:04:78:6e:29:fb:ad:b2:41:d9:1c:74:a1:07:71:
64:57:f9:95:d6:a9:cf:89:09:d6:f3:f3:a3:33:1f:94:75:32:
1c:fe:27:11:59:95:8a:b7:4f:2e:4f:17:47:3b:60:94:82:c6:
5e:64:7d:6c:23:85:66:7c:72:9d:19:78:17:51:91:a0:89:aa:
fe:a5:6d:60:df:77:d7:62:45:63:55:f1:eb:ae:b3:c1:06:23:
eb:ed:ac:6f:23:4e:28:d4:48:76:6a:7e:69:0e:54:47:23:83:
db:87:b6:67:93:aa:69:46:1c:26:3f:5a:67:e5:3b:79:b4:4e:
a5:3d:ba:8a:21:f5:fd:a8:99:5d:22:82:8c:73:2d:92:6e:34:
ce:80:bf:75:6e:00:30:c9:e9:60:6f:04:40:2f:9e:b5:9e:55:
a8:7a:44:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:57:16 2025 by rpki-client