Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
File: AYZ9mLBSF68a-spyJrvWEzcHSfA.mft (raw, json)
Hash identifier: 3fWD3yufmrWTwG6XFVeJvtJ26ZXTHTI5eekQh/l/CNc=
Subject key identifier: 66:72:6E:D2:23:DB:C1:F8:86:44:88:9E:6D:5B:23:61:9D:27:18:82
Authority key identifier: 01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
Certificate issuer: /CN=01867d98b05217af1afaca7226bbd613370749f0
Certificate serial: 0194BC04E5CCC5B1AC5921B6D664E771E90C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
Manifest number: 0110
Signing time: Fri 31 Jan 2025 11:00:24 +0000
Manifest this update: Fri 31 Jan 2025 11:00:24 +0000
Manifest next update: Sat 01 Feb 2025 11:00:24 +0000
Files and hashes: 1: 1ENw1gcCvt1Pmax0p8zhB7SKAEg.roa (hash: 1qhYf9E0Pe4/V/O+LSKzrT8cldjvFnxKyFJ5/QtS500=)
2: AYZ9mLBSF68a-spyJrvWEzcHSfA.crl (hash: nlralt6xKlTuQUEgPFt/y0UPCtfae/brJV8C3sJ8rJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:04:e5:cc:c5:b1:ac:59:21:b6:d6:64:e7:71:e9:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01867d98b05217af1afaca7226bbd613370749f0
Validity
Not Before: Jan 31 11:00:24 2025 GMT
Not After : Feb 1 11:00:24 2025 GMT
Subject: CN=66726ed223dbc1f88644889e6d5b23619d271882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:18:c6:27:49:a2:07:f1:24:2a:8b:93:4a:42:
0a:06:ef:f9:79:64:72:38:2e:3b:5c:ca:7b:62:56:
da:8a:ee:33:79:fe:be:ce:c4:74:ff:63:de:b7:91:
90:5a:39:a0:f2:f6:9e:8a:28:5c:d9:2b:83:54:2e:
7b:61:03:5d:3c:28:00:49:bb:51:f8:34:89:b3:ac:
9d:ab:dc:ce:99:0e:6e:03:d9:69:0e:35:2b:5a:17:
ea:c5:2a:e1:6a:a1:40:5b:2b:9b:df:4d:86:de:7c:
8e:bb:0a:24:7b:60:ed:cb:29:27:3d:60:53:72:7e:
df:cf:db:e1:e2:17:f2:f6:e4:69:0f:65:db:aa:29:
c3:15:81:9c:4b:ee:8d:a7:72:82:42:12:4b:e3:44:
28:e8:62:b4:41:7a:df:34:05:5a:b5:92:5a:3d:73:
cf:d1:ce:e3:99:27:ca:27:bb:53:79:26:80:34:0e:
e2:be:87:34:e6:f6:d7:85:e9:94:c5:5e:97:fe:bd:
14:df:e1:8c:b6:d7:83:86:90:40:b9:0b:d5:9f:8e:
a6:e9:5f:11:aa:24:50:26:05:b5:38:c9:11:a8:6c:
32:83:fa:e1:f0:e9:05:db:d7:59:9b:44:bf:6f:e6:
d1:cf:8b:c0:d4:10:89:4e:e4:dd:89:a7:4e:40:9b:
c6:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:72:6E:D2:23:DB:C1:F8:86:44:88:9E:6D:5B:23:61:9D:27:18:82
X509v3 Authority Key Identifier:
keyid:01:86:7D:98:B0:52:17:AF:1A:FA:CA:72:26:BB:D6:13:37:07:49:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYZ9mLBSF68a-spyJrvWEzcHSfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/52bea4-0abd-4719-a64b-e47c58ce533c/1/AYZ9mLBSF68a-spyJrvWEzcHSfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:c0:a6:b4:a9:fa:e5:62:66:56:29:1a:fc:56:e4:00:3a:6e:
6b:f4:ef:ae:48:9c:c0:ed:5f:cb:60:23:34:11:dd:0f:16:54:
69:b7:b6:b1:fb:fd:1e:fb:24:a2:15:c3:10:f0:8d:85:70:a9:
d0:2a:cd:38:08:ca:06:80:a9:d1:8b:a6:15:75:a4:04:27:a9:
a3:f9:db:29:43:68:a3:de:4f:00:39:6f:32:de:18:73:1f:0e:
30:99:7a:62:c3:5b:f2:47:61:4c:ca:98:cd:04:a0:14:41:a3:
8d:2b:03:f2:e6:53:1b:ff:1f:95:8f:15:de:f4:2c:d1:4f:ac:
24:c5:13:c4:a7:e4:81:cc:2e:28:09:19:88:16:96:cb:4e:86:
6e:58:2f:51:df:d1:e3:30:82:2b:2a:99:b4:45:00:20:64:cd:
de:0a:d3:60:f2:18:05:db:86:27:3a:9e:b6:f0:3c:03:00:8a:
b8:24:b0:79:aa:83:3e:dc:7c:87:e7:ac:75:d5:92:8f:27:a7:
ed:46:27:b7:24:42:0e:97:40:c0:ca:1d:c4:3f:49:71:49:c6:
40:db:a7:b6:11:fb:ea:8c:99:8a:77:0a:67:e8:6b:83:10:85:
10:0d:16:43:29:e2:2d:02:50:c1:b0:a8:76:0f:f6:56:58:71:
b6:ff:4a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:02:35 2025 by rpki-client