Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
File: A_P-YHUIK-jliDKbQ9dhv257AdA.mft (raw, json)
Hash identifier: 8dZ78+vkyJOrccIcAWL+brdQqmbhp4h36Pl8EiRRavs=
Subject key identifier: 0F:5F:AF:CB:49:3C:78:27:B5:B4:0C:13:38:E2:40:D1:4F:24:07:89
Authority key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Certificate issuer: /CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Certificate serial: 0194BC72C04F1CFAEADE04AF0B46AD67D963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
Manifest number: 065D
Signing time: Fri 31 Jan 2025 13:00:24 +0000
Manifest this update: Fri 31 Jan 2025 13:00:24 +0000
Manifest next update: Sat 01 Feb 2025 13:00:24 +0000
Files and hashes: 1: A_P-YHUIK-jliDKbQ9dhv257AdA.crl (hash: gZajsW3CUdqX5/qJFytvqV3xKQlafDzAJZ5/lBeZl74=)
2: l0K6PAqN9Gt27j_CVXz67WejrWo.roa (hash: 791A1HYehBk0Xv4a4YcluI/Rrf5zyMUHKzRR42V6uDU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:c0:4f:1c:fa:ea:de:04:af:0b:46:ad:67:d9:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Validity
Not Before: Jan 31 13:00:24 2025 GMT
Not After : Feb 1 13:00:24 2025 GMT
Subject: CN=0f5fafcb493c7827b5b40c1338e240d14f240789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:63:32:2e:db:d3:77:69:7b:24:ce:44:de:45:
9a:70:ba:1f:9e:0c:91:72:8e:fc:01:46:57:c6:26:
af:61:2a:66:f2:48:52:06:4e:20:99:c8:48:8f:30:
b5:62:0d:af:44:7d:39:23:d9:9c:8c:6a:51:b2:9a:
ef:ef:36:78:63:d7:60:0f:82:3b:2d:1c:71:e4:58:
40:6a:ac:d2:93:6a:2e:70:7d:bd:a9:9a:13:0a:ff:
7e:98:35:be:47:e3:66:5d:16:7e:85:51:a7:66:89:
fe:ca:40:06:68:35:89:ff:87:e4:ae:49:d7:9a:fc:
42:a0:bd:5a:b7:d3:ce:54:70:e6:f1:af:22:9b:43:
1f:44:ab:cb:7c:52:42:f2:a6:b9:ab:c7:09:bf:01:
70:6d:24:6f:37:c9:a9:67:9b:4b:09:de:ad:ee:ed:
6e:d5:6e:2b:23:40:3d:60:d3:e5:a2:b3:8e:d0:53:
2a:ff:7a:23:61:bc:ad:cd:bf:3f:e6:1c:95:77:7a:
d9:62:77:28:1a:5b:7f:b1:c4:67:24:7f:83:01:77:
82:76:69:a9:7a:b3:b7:59:f4:83:33:99:5c:3d:d7:
d4:83:e0:ef:6e:bf:af:c4:a7:bf:21:17:47:54:91:
87:24:2c:36:8f:72:f6:b2:7e:e8:09:54:51:b5:d9:
2f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5F:AF:CB:49:3C:78:27:B5:B4:0C:13:38:E2:40:D1:4F:24:07:89
X509v3 Authority Key Identifier:
keyid:03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:5d:07:bf:e6:57:e3:4b:02:99:e3:91:6d:01:35:f5:95:09:
c3:c7:6f:77:ba:60:b6:bf:5b:02:a0:ff:68:78:a5:a5:c3:de:
af:0b:df:38:57:4e:47:ef:6f:ad:37:fa:9a:a0:1e:49:1d:f9:
e3:9d:bd:0c:e4:1c:73:bd:cd:38:ba:f9:e9:ae:8b:22:1b:a5:
fe:ca:69:bf:78:97:a5:cc:85:b7:79:1f:1b:20:0b:21:9d:d5:
27:24:a5:7b:f9:7e:03:3f:27:52:2b:ca:07:ec:9a:dd:03:21:
f7:e0:ed:ba:f5:1f:5f:a8:ed:1a:1c:fa:36:d9:85:64:8d:19:
66:a7:e6:af:0a:df:e0:14:0d:4a:0c:8b:dc:92:5b:7a:dd:b4:
b3:1f:64:ec:38:4c:b3:2f:49:8d:e3:5c:3d:f7:47:3d:a7:a7:
b0:3c:dc:f7:13:08:39:96:bf:7c:ce:71:fa:3b:0c:0f:d1:90:
c6:f2:71:03:db:af:76:53:03:26:b7:6f:90:46:9f:1e:42:7f:
d9:89:a4:2d:04:65:16:bb:ec:44:86:1c:05:cd:c5:1a:87:83:
91:48:a8:9c:33:38:b7:97:d8:d0:61:a9:4c:64:5c:86:51:ac:
f1:e5:09:51:da:5a:34:17:22:87:26:71:27:26:db:f2:8e:79:
a6:22:2a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:28:38 2025 by rpki-client