Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
File: 0YHQxAlRpPkA5NndnCDkhWNQkg4.mft (raw, json)
Hash identifier: fe32Z+ideDUOHMOMkEud00coee6vz6mt9Xf4ScUJzxU=
Subject key identifier: 72:8C:29:19:4F:21:E5:00:E3:AC:38:9A:D2:E2:80:7D:D0:B6:ED:E6
Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
Certificate issuer: /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Certificate serial: 0194BC728F8DEAC5A6E8BEF3D213295C3052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
Manifest number: 142F
Signing time: Fri 31 Jan 2025 13:00:11 +0000
Manifest this update: Fri 31 Jan 2025 13:00:11 +0000
Manifest next update: Sat 01 Feb 2025 13:00:11 +0000
Files and hashes: 1: 0YHQxAlRpPkA5NndnCDkhWNQkg4.crl (hash: dtV3rCeqvoxYrGIKohgk2aQrqPmxiw7kEWzUjW91hqU=)
2: 2VAk9AH_jCxBcmS3UFNJkQWmjmM.roa (hash: OTJmVbnhsENHWSTSM66puZiLKu+kw6NtZbXCQeGN/YQ=)
3: 5kzmDTi0KIXTn8Ss2d36rIX1bZA.roa (hash: VgZeJy91lZpXmzMfyFbTui1JSN8xoQwBbcwBQ01/D0A=)
4: SA8oSTczcAjgQR1zXNlc0Vgrtd0.roa (hash: fw6Ud0wGZN9ltnlpcBVHmq+wSri7RZaFK71pfthgGyU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:8f:8d:ea:c5:a6:e8:be:f3:d2:13:29:5c:30:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Validity
Not Before: Jan 31 13:00:11 2025 GMT
Not After : Feb 1 13:00:11 2025 GMT
Subject: CN=728c29194f21e500e3ac389ad2e2807dd0b6ede6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b7:17:34:1c:91:bf:36:60:78:e3:fb:52:0e:
d8:92:85:02:df:dc:fa:24:8b:b6:88:cf:6b:b3:0a:
7e:09:a3:18:71:b5:56:59:67:26:f3:e4:4a:ae:9f:
26:a0:18:79:75:dc:b2:13:c0:4d:0f:0c:20:6c:bd:
10:86:0b:cd:e5:1b:e3:65:b7:4e:a0:4b:88:c6:ba:
b2:1e:50:d9:49:de:88:26:d4:64:59:29:9f:84:f4:
22:58:08:4b:b9:59:a7:cb:e7:03:03:75:d7:ec:20:
98:b6:e4:e4:23:be:df:b8:38:57:42:c8:52:b8:4e:
5e:eb:bc:bf:29:b4:cb:64:e5:2d:04:af:19:a4:9d:
bd:bc:0c:23:bf:cc:8e:36:8e:6e:33:08:7e:2e:c2:
38:40:b9:75:dd:4c:89:4b:55:0d:a4:26:03:8f:cb:
a4:e0:d0:41:84:28:d3:d7:c1:74:e9:1a:01:93:c4:
bc:33:0e:d6:cf:12:05:0d:29:91:96:f4:c5:34:41:
41:ff:0c:7a:3d:a3:6c:57:94:93:82:e1:32:3b:5a:
47:5a:0e:d3:e7:c8:5a:9f:c3:bf:33:7d:40:9c:84:
40:7a:bc:4e:69:1e:9b:d7:0f:68:49:90:9f:17:62:
1d:65:00:ca:16:13:a5:77:d6:23:64:8e:84:d5:85:
e6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8C:29:19:4F:21:E5:00:E3:AC:38:9A:D2:E2:80:7D:D0:B6:ED:E6
X509v3 Authority Key Identifier:
keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:a1:c2:f6:a3:28:cf:b3:10:31:23:33:92:8b:17:dc:8e:b1:
e6:51:8a:a1:76:30:25:55:25:43:98:7a:0b:f5:26:87:73:e7:
94:16:0c:87:9b:1e:30:61:89:95:52:7c:28:2e:70:23:2d:b1:
ae:39:72:00:ef:54:1b:2a:ff:cd:b4:ea:2a:23:26:9b:84:ee:
2a:20:f7:3f:1c:f7:f2:24:31:40:93:83:d9:3d:ba:eb:eb:98:
dc:f2:99:04:23:33:3b:01:57:1e:ae:89:5b:e8:a2:76:b8:ee:
ed:a7:d8:98:93:63:04:1b:07:cb:6c:71:f0:ed:f1:70:15:17:
96:18:42:32:4f:d2:d3:e0:58:3f:bb:ce:be:19:32:18:21:c7:
fa:88:f1:39:14:8e:68:ad:51:14:e7:a6:72:1d:7a:8c:c0:d2:
d8:93:20:3a:05:67:bc:7c:60:d2:f3:2d:c1:cc:66:b6:f3:cb:
62:02:95:96:fd:fe:61:58:4a:73:f3:01:51:00:69:81:a2:8f:
59:a6:85:e0:ce:66:57:60:a1:57:e1:0c:7f:3b:03:a3:b6:a9:
0b:47:d2:73:d1:11:09:d1:90:b2:03:7e:66:20:3b:08:dc:0e:
ce:21:6c:cf:a3:d8:bb:a1:6f:0a:42:89:85:48:18:62:9c:7b:
7c:d3:11:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:39:30 2025 by rpki-client