Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
File: yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft (raw, json)
Hash identifier: bODP5ShZgJ9J73CFgQ8m2S/FRQMWB+qNLkdvm8it5ns=
Subject key identifier: 98:66:B3:0A:3A:9E:34:E4:F0:32:6B:27:42:3D:47:37:53:DD:C2:9E
Authority key identifier: C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
Certificate issuer: /CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Certificate serial: 0194BBCEDBF4837952CD4AE855C4097C3425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 10:01:23 +0000
Manifest this update: Fri 31 Jan 2025 10:01:23 +0000
Manifest next update: Sat 01 Feb 2025 10:01:23 +0000
Files and hashes: 1: fewPOq5Sy5alJvzpYZYieD6pmV8.roa (hash: nQVFjlDzgmj3SLHG29wBX3sEI4Pk0MW5juplwGFMB6g=)
2: yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl (hash: UUY6zw67TDRE9R1BMFB06AGcR0DKgQ4ZVg8hjW+/hAw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:db:f4:83:79:52:cd:4a:e8:55:c4:09:7c:34:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c85f510c72ce0b79c2899b35845ffe3670693f05
Validity
Not Before: Jan 31 10:01:23 2025 GMT
Not After : Feb 1 10:01:23 2025 GMT
Subject: CN=9866b30a3a9e34e4f0326b27423d473753ddc29e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:05:97:74:90:52:57:aa:e3:e4:a0:b0:db:b4:
a8:ed:83:27:ed:f4:72:64:ce:0d:b1:30:1e:d7:67:
cd:c6:fa:fc:f3:12:dd:d4:b6:9f:ea:34:d1:3f:72:
87:28:77:ec:8e:25:10:d7:51:10:f7:80:78:0c:3e:
58:2d:48:19:9a:1b:fc:af:ee:82:9d:cc:a3:ce:8a:
83:59:5a:ea:8a:6c:96:eb:18:58:35:d7:f1:bd:f9:
a6:37:4b:2c:42:73:45:b5:36:52:e8:d9:4a:9d:11:
b8:be:f6:63:f6:9c:4a:97:11:1a:2a:43:09:96:23:
05:b1:88:6a:b3:df:ff:36:e4:ac:a3:51:11:bc:e5:
e3:41:c8:07:fd:95:f9:23:bd:9f:3e:76:5b:e1:a2:
3d:35:db:06:95:90:c4:f5:b9:56:74:30:46:57:50:
ab:a3:aa:1a:46:91:14:89:dd:c6:70:7d:90:cf:68:
f9:61:5d:ee:fd:b8:d3:7a:b5:a7:31:43:ff:7e:b1:
04:b0:b6:4a:41:b7:24:58:a9:a3:d4:74:32:0f:42:
7a:a7:94:05:75:13:c7:f4:61:42:4a:68:b9:18:cc:
4f:7b:7b:16:b9:e5:26:a8:fc:26:99:d3:a1:ed:37:
64:95:df:86:de:b0:64:74:3a:b5:1f:0c:1c:ab:38:
72:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:66:B3:0A:3A:9E:34:E4:F0:32:6B:27:42:3D:47:37:53:DD:C2:9E
X509v3 Authority Key Identifier:
keyid:C8:5F:51:0C:72:CE:0B:79:C2:89:9B:35:84:5F:FE:36:70:69:3F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yF9RDHLOC3nCiZs1hF_-NnBpPwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a2cfb0-0e68-4e47-8881-b8c9a2a9da46/1/yF9RDHLOC3nCiZs1hF_-NnBpPwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:fd:06:49:4b:66:15:30:00:39:c1:70:f7:28:ca:09:f2:6a:
d6:fc:c0:60:23:25:a0:87:c7:70:8a:20:64:99:84:78:b7:09:
6b:34:6f:94:0c:fb:63:ee:fd:88:f9:83:7b:66:be:dd:65:7a:
0f:f6:dd:9a:67:53:5d:06:05:68:24:e8:34:16:d9:93:07:e1:
44:e8:17:fa:34:82:0d:92:53:1d:cf:22:90:aa:ac:96:14:97:
c9:64:29:ce:b4:c1:02:d3:ce:70:bb:17:c7:88:d8:65:3d:f5:
5b:3e:91:14:3c:f4:b1:4b:ba:48:2e:c6:a3:da:73:84:b6:57:
e0:2f:a4:63:78:f4:c8:58:9f:84:7d:61:c6:95:d6:2e:02:c8:
74:38:67:a2:b1:b9:0a:2b:6a:8c:03:a2:56:35:91:b0:35:86:
4e:e9:5e:49:b3:6d:8e:fa:6c:ec:5d:b2:4d:66:6f:0b:35:59:
aa:1f:df:4c:ae:2c:22:9d:73:64:10:f5:76:8e:62:b6:8a:87:
35:c3:3c:ef:1c:90:42:fc:72:b7:b5:3d:10:2c:61:13:13:87:
0f:76:85:19:ff:d4:0b:b7:16:7c:3e:bd:95:3f:df:cc:e3:93:
30:6d:97:8e:e7:02:c0:2f:61:07:54:3d:ad:5c:8a:a7:54:3a:
c4:6d:43:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:44:41 2025 by rpki-client