Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
File: j-YTvuu37zaZLASRrROyZwcFcmA.mft (raw, json)
Hash identifier: vwadpDcL9Z7EPUpDs8/OsasdGTL5Bt3xPtXLh28fn8Q=
Subject key identifier: 40:07:7B:77:81:9B:8F:2D:7C:AE:A6:8C:39:06:F9:01:CE:5F:BF:D5
Authority key identifier: 8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
Certificate issuer: /CN=8fe613beebb7ef36992c0491ad13b26707057260
Certificate serial: 0194BD4E5701AFAF49BD00245C08374EDEAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
Manifest number: 09BB
Signing time: Fri 31 Jan 2025 17:00:15 +0000
Manifest this update: Fri 31 Jan 2025 17:00:15 +0000
Manifest next update: Sat 01 Feb 2025 17:00:15 +0000
Files and hashes: 1: M8YwlBl4UsZFSGK22ajYHB1I9kk.roa (hash: NMhetTmMl7auiquiJXvinAOe9UpVWlWTrYgSxnLH8n8=)
2: j-YTvuu37zaZLASRrROyZwcFcmA.crl (hash: Ez/HzEHnKz88F+bkq91oC28Z0oh17Smoc8dlTOtxtQg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:57:01:af:af:49:bd:00:24:5c:08:37:4e:de:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe613beebb7ef36992c0491ad13b26707057260
Validity
Not Before: Jan 31 17:00:15 2025 GMT
Not After : Feb 1 17:00:15 2025 GMT
Subject: CN=40077b77819b8f2d7caea68c3906f901ce5fbfd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:39:ba:da:ac:d9:43:e8:d3:49:dd:5d:e6:39:
46:66:77:35:ea:7e:b9:87:9a:cf:05:c1:a9:a7:55:
43:78:a4:b7:5a:c6:f2:59:fc:c4:c0:ce:18:a4:e4:
75:4f:32:7f:77:58:c5:04:16:30:29:65:6a:63:fc:
bc:e6:0b:93:59:65:10:30:37:88:a7:08:37:0a:d3:
5b:d8:64:c7:bf:c3:05:b2:f6:0d:ed:31:f7:ba:62:
21:3a:da:6a:03:df:9d:6a:44:6c:79:0b:05:a4:90:
cd:35:47:47:e9:06:e3:35:60:93:c3:ca:05:92:84:
79:af:86:e1:d4:c7:21:a7:fa:ec:17:b9:cc:79:8d:
ff:37:68:4f:e8:85:c6:db:94:62:d5:d3:13:e1:18:
77:35:6f:1d:e2:57:03:56:7f:41:80:4f:25:55:fb:
7e:04:39:e9:cc:87:ed:43:75:4f:b9:ff:8d:f6:a0:
9d:35:4c:42:b0:6a:4f:b5:5a:0a:87:cf:ce:d5:cc:
bd:62:9a:cc:b0:85:6a:5d:27:6a:f1:c3:ec:33:f0:
45:19:9f:bd:e2:c5:36:8c:5a:60:dc:52:0d:9a:ae:
13:ba:06:e3:6e:78:15:70:b3:08:d6:ea:fd:e0:7e:
f0:8b:aa:f4:ce:f1:b9:7d:07:a2:e7:42:04:9e:07:
51:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:07:7B:77:81:9B:8F:2D:7C:AE:A6:8C:39:06:F9:01:CE:5F:BF:D5
X509v3 Authority Key Identifier:
keyid:8F:E6:13:BE:EB:B7:EF:36:99:2C:04:91:AD:13:B2:67:07:05:72:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-YTvuu37zaZLASRrROyZwcFcmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7af99d-da85-41a5-aa4f-fa6654a2a6fe/1/j-YTvuu37zaZLASRrROyZwcFcmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:ef:88:51:f5:84:ac:0c:df:19:b3:d4:00:21:97:6f:66:32:
ea:cc:71:a2:ca:04:3c:7e:43:fd:b9:3b:7c:99:42:ba:1f:8a:
c3:02:37:cc:68:99:53:7d:8c:63:b9:29:5b:27:fb:b0:e2:b5:
4c:d0:d3:38:97:ef:6e:44:5a:74:68:62:84:8e:d1:ae:a5:4c:
b7:9d:d6:26:98:87:c2:55:90:66:b7:7d:19:47:c5:51:6d:70:
5f:c9:51:76:21:ad:c4:aa:e0:3b:ca:37:1d:93:a9:74:df:c5:
2e:e9:04:a4:bd:3b:1c:90:3c:58:3e:a3:28:10:19:0d:df:4e:
12:ec:69:4f:be:58:b8:24:ca:db:1e:58:83:5b:1f:86:82:ed:
93:1d:ec:b2:e1:9d:18:4d:ab:93:9a:a0:d9:b2:72:28:c4:53:
bd:f9:18:5b:58:21:b6:27:fc:64:8f:55:86:d3:5c:ba:22:a5:
13:d6:aa:64:a1:75:c9:ea:09:c7:c0:be:44:3c:b9:15:ff:eb:
15:8d:1b:39:e4:c8:5d:0d:88:b5:68:ab:a7:ef:eb:82:58:b0:
64:f1:10:96:68:ed:b7:91:4e:f0:86:f3:26:b0:58:b9:53:df:
b6:71:d8:2c:6f:d2:22:e3:c6:f7:37:d1:1b:80:79:0f:2d:bf:
1d:10:c6:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:07:14 2025 by rpki-client