Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
File: y5idLhUgGyDjQIjdHARVslRE-Pw.mft (raw, json)
Hash identifier: x7b2e0jxIsRZRXXIkfj63FZmiD7sJ1d+yNeRg6Bad5c=
Subject key identifier: 13:A1:07:42:BC:DA:B9:32:A4:EA:3F:57:6F:59:20:D2:1B:A3:47:6E
Authority key identifier: CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
Certificate issuer: /CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Certificate serial: 0194BCE088B14B429A37947BBA74D61F9DD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
Manifest number: 0A64
Signing time: Fri 31 Jan 2025 15:00:19 +0000
Manifest this update: Fri 31 Jan 2025 15:00:19 +0000
Manifest next update: Sat 01 Feb 2025 15:00:19 +0000
Files and hashes: 1: IlHeExFCZOwDVGR-pn-Mj6btqHA.roa (hash: G3OUewbUbdIfclHozVugqBGDnmkGwJv9DxeJNbUzFpM=)
2: y5idLhUgGyDjQIjdHARVslRE-Pw.crl (hash: JV6LKENvMlaHuqJcic8Epe5sIhAoCQgTcKgJYCpNQ1M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:88:b1:4b:42:9a:37:94:7b:ba:74:d6:1f:9d:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb989d2e15201b20e34088dd1c0455b25444f8fc
Validity
Not Before: Jan 31 15:00:19 2025 GMT
Not After : Feb 1 15:00:19 2025 GMT
Subject: CN=13a10742bcdab932a4ea3f576f5920d21ba3476e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:75:4a:b0:15:90:83:07:f8:76:55:25:40:8c:
3e:e2:8b:79:da:9e:90:1b:7d:03:bb:34:a1:cd:0c:
a5:fc:49:d6:dc:a0:91:85:b5:59:c3:4e:29:77:6a:
7f:c7:3f:f0:7a:92:5f:07:32:c5:41:ac:bc:f5:40:
c2:64:7d:4d:0b:6a:21:a3:a9:40:01:fe:68:92:44:
6a:16:75:cd:4f:84:52:94:41:7b:dc:18:39:10:c4:
0b:0e:f8:9a:5c:75:d5:92:8e:11:d0:df:5f:db:77:
f5:9a:46:e2:dc:fa:56:30:e5:e7:f9:fb:4a:4f:99:
42:ff:1d:5a:2c:94:e4:8f:1a:c4:72:92:f7:94:55:
11:dd:e8:f1:46:06:3b:13:7e:f2:4e:f1:89:3f:ad:
b8:19:52:e0:8a:d8:6c:37:85:c8:16:15:56:6b:ae:
e9:f4:24:05:e4:0b:10:4d:a1:ac:1e:a9:f5:5f:38:
17:86:66:db:0d:e6:f8:65:d7:50:fc:aa:d2:04:ce:
10:43:50:67:0e:15:6c:be:d2:3b:36:77:0d:b1:4a:
dd:52:32:a4:ac:e6:2c:b3:b1:b4:51:3f:6d:a9:30:
4f:df:ad:aa:c4:30:4f:dc:63:52:12:7f:ad:7f:66:
a9:68:47:b9:0c:b7:84:07:30:52:08:5b:26:ad:95:
8d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A1:07:42:BC:DA:B9:32:A4:EA:3F:57:6F:59:20:D2:1B:A3:47:6E
X509v3 Authority Key Identifier:
keyid:CB:98:9D:2E:15:20:1B:20:E3:40:88:DD:1C:04:55:B2:54:44:F8:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y5idLhUgGyDjQIjdHARVslRE-Pw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/be56d4-8de6-44a2-9691-369263443025/1/y5idLhUgGyDjQIjdHARVslRE-Pw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:68:c3:2f:ce:a6:bc:3c:c1:fe:45:15:62:35:2b:58:db:d9:
ba:63:00:c3:fe:6c:62:5a:9a:a4:fd:06:ea:01:b2:35:0d:19:
2c:96:57:be:e8:a9:f4:ee:cb:95:ca:c7:7f:44:c8:f3:55:7d:
eb:71:d2:f5:16:ca:cf:13:97:b3:1f:eb:98:d2:86:af:15:1e:
29:a6:62:94:f0:c5:25:25:d6:10:7c:83:51:a1:1a:31:65:21:
a0:9b:e3:98:4d:8c:77:0c:c0:07:de:d8:69:90:e1:eb:1b:22:
7b:22:07:1a:b6:8c:98:29:14:8d:9e:16:d9:cb:71:2f:c7:77:
fb:e3:2f:3a:77:88:32:f1:47:32:c6:03:91:6a:94:05:10:06:
1c:e4:be:93:b8:72:94:14:e1:85:d4:91:c7:12:d9:60:2b:7d:
b7:d8:e5:90:01:87:f6:4f:d7:55:11:22:8b:1f:29:57:76:5b:
65:a5:b6:92:47:ff:d3:32:c8:b3:31:e8:a9:35:fb:15:aa:64:
af:a6:42:8f:d8:fa:ce:4c:f6:9b:eb:b5:37:9e:98:ac:15:4b:
f0:25:e7:f9:93:4c:31:f1:f6:e6:f0:f1:40:93:44:f6:7c:f8:
54:90:c8:81:18:1d:bb:d3:5b:46:ca:be:58:37:bb:48:76:98:
08:e6:18:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:49:19 2025 by rpki-client