Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
File: Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft (raw, json)
Hash identifier: kYYhVCjr9iN4TiDD2UqxgZAAFS6WWYNhx7bIrpyki2E=
Subject key identifier: 9F:7E:04:31:6D:1D:DB:42:C9:F0:94:F6:FA:26:41:08:3E:19:D5:97
Authority key identifier: 63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
Certificate issuer: /CN=6353829c061a8af26de946fc9e81885c74c174c7
Certificate serial: 0194BC0531DFC35F648F708B4509A7D8CF19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
Manifest number: 062C
Signing time: Fri 31 Jan 2025 11:00:44 +0000
Manifest this update: Fri 31 Jan 2025 11:00:44 +0000
Manifest next update: Sat 01 Feb 2025 11:00:44 +0000
Files and hashes: 1: La2c1GzhO3LCYjtEuOjFcoNgj6s.roa (hash: hdTkzvggjd5erT4guotzR+j9YHEwpmHcJ+YP7gw1WZs=)
2: Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl (hash: hXeGDHckRLwMki/DWhfpV2IxRnqJUJNNx7W3vS1wgiY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:31:df:c3:5f:64:8f:70:8b:45:09:a7:d8:cf:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6353829c061a8af26de946fc9e81885c74c174c7
Validity
Not Before: Jan 31 11:00:44 2025 GMT
Not After : Feb 1 11:00:44 2025 GMT
Subject: CN=9f7e04316d1ddb42c9f094f6fa2641083e19d597
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:66:33:4c:df:50:3e:c5:b0:a1:67:26:48:37:
b0:93:03:cf:e3:a1:9d:f2:b0:48:d4:5e:5d:c9:9e:
bd:02:de:48:11:95:fb:4f:b3:16:9b:cb:f8:ae:9b:
db:83:f6:3c:58:36:fa:8b:88:94:6a:aa:0f:b1:9e:
c5:76:80:17:f3:7f:cd:75:9d:df:dd:fd:a1:79:16:
3a:58:68:03:6e:68:4e:0b:77:b6:b1:a4:e9:af:bc:
c6:db:1e:0a:ba:66:87:28:98:36:66:aa:5d:24:61:
9f:5f:28:e6:4f:b1:b4:91:4d:8a:d8:be:80:4b:92:
cc:29:da:18:55:10:47:19:6d:b4:ab:27:64:46:49:
02:93:72:71:18:63:cb:65:26:54:72:42:f2:a1:5a:
71:67:fc:f5:30:88:2f:70:96:b5:57:8f:d8:92:56:
f3:55:78:d4:d6:e4:05:ad:e6:97:9f:1d:ae:7e:e4:
0b:87:b3:fb:8d:72:b6:f5:d8:b3:65:57:e4:c4:26:
d4:5a:07:a9:fd:50:ae:b7:1f:2a:ac:12:b2:ed:2c:
f5:f7:d3:d3:1c:92:39:0a:6f:cb:4a:cc:54:ef:a1:
8a:76:51:76:3b:3e:c4:68:b2:37:c8:fa:91:a0:a2:
50:5a:0a:a9:c2:70:67:7a:b5:76:ad:3e:d8:53:12:
92:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7E:04:31:6D:1D:DB:42:C9:F0:94:F6:FA:26:41:08:3E:19:D5:97
X509v3 Authority Key Identifier:
keyid:63:53:82:9C:06:1A:8A:F2:6D:E9:46:FC:9E:81:88:5C:74:C1:74:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y1OCnAYaivJt6Ub8noGIXHTBdMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/8cf962-074f-41ac-ae2a-816203d21d12/1/Y1OCnAYaivJt6Ub8noGIXHTBdMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:02:84:03:1a:6e:14:b5:42:f6:98:38:6f:89:58:f1:f9:21:
27:a6:e9:bb:30:3d:94:e1:7a:fc:08:22:12:a7:f0:f9:a5:db:
67:91:94:9e:38:fc:8c:ca:c7:77:15:0d:c8:4d:fa:ad:3e:c6:
bb:c9:72:f4:5d:11:94:cb:2d:de:b5:fc:92:6a:61:f8:84:83:
04:c6:fc:22:d7:26:f8:ef:46:42:69:0e:61:d0:fd:2e:2e:a8:
1f:1b:85:a1:f6:00:55:9c:82:99:17:13:b8:cb:9f:62:b0:f2:
00:5c:c3:5a:f9:a6:c8:49:c0:7e:bb:20:e2:bc:65:7a:ab:d8:
0e:c0:2e:18:63:d9:d2:6f:ae:45:2b:5c:24:a8:7c:39:dd:d2:
9f:0b:9d:61:8c:6e:23:a9:91:dd:0b:ce:72:0f:56:26:c2:9f:
58:2f:3e:ef:bd:68:97:fe:1f:88:79:af:90:a5:f2:ba:18:c4:
e0:21:b3:62:ee:e7:79:59:40:c1:df:fa:a7:65:32:e8:f1:f0:
2a:a7:a0:6c:fb:8e:59:82:5e:bc:d5:e4:35:74:83:4d:67:e8:
ff:07:96:16:10:71:8f:92:74:b8:ff:69:0b:8b:64:45:71:ca:
56:63:fc:1d:d3:75:b4:5f:2c:64:a2:5d:cc:3d:a3:5d:7d:08:
ce:ab:9c:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:39:48 2025 by rpki-client