Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
File: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft (raw, json)
Hash identifier: vfNtvfpYQrlhb7Un9kgmwFjt+gBcI2H+h333X/u/m8Q=
Subject key identifier: 0C:C2:79:52:3A:1D:82:AA:54:23:C7:96:DC:58:E7:0F:4A:56:C6:14
Authority key identifier: D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
Certificate issuer: /CN=d588db17666fa9515af31dba095d0f250f84bdf7
Certificate serial: 0194BD4E407363CD02BD26F9846A33821956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
Manifest number: 142D
Signing time: Fri 31 Jan 2025 17:00:09 +0000
Manifest this update: Fri 31 Jan 2025 17:00:09 +0000
Manifest next update: Sat 01 Feb 2025 17:00:09 +0000
Files and hashes: 1: 1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl (hash: JYtCFMEmlH3B2qdaAzKKlYKxu5ufrlVjIYu+ykykzDQ=)
2: bGf4cCRG9dkpmbXoKNR-wNn-qNk.roa (hash: Cp+HX5WugU73QzyqqCmrt27DN2j3Lyp2sZVezzd5Obc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:40:73:63:cd:02:bd:26:f9:84:6a:33:82:19:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d588db17666fa9515af31dba095d0f250f84bdf7
Validity
Not Before: Jan 31 17:00:09 2025 GMT
Not After : Feb 1 17:00:09 2025 GMT
Subject: CN=0cc279523a1d82aa5423c796dc58e70f4a56c614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:24:45:66:ad:8e:da:10:9e:ac:b5:64:bb:12:
c6:a8:b5:eb:d6:69:4c:7f:84:c0:b2:52:c6:17:81:
71:b6:e7:9d:16:3c:6c:76:52:b1:39:36:40:32:e1:
e6:70:96:7e:0e:5e:16:ba:cc:78:fb:0f:c4:ea:80:
34:2d:a0:73:7a:ae:8d:8b:c9:ce:0c:4e:cb:fd:b7:
99:14:dd:2a:54:7d:19:8d:50:08:8a:de:2c:f6:8d:
bb:f4:3a:51:53:ab:40:d8:02:45:1d:88:9b:dd:e4:
26:df:31:43:7e:5c:2d:a2:7f:db:ca:ed:eb:6b:d8:
79:30:2f:9a:88:71:80:86:5b:b0:3a:70:29:70:0f:
5a:0a:96:30:34:49:71:3b:28:82:9a:26:97:f9:81:
b8:cc:d4:25:23:81:57:9a:a8:a8:92:21:46:f8:a7:
6d:f4:4d:3d:df:6e:30:05:ac:e3:42:f4:34:3f:67:
e2:9e:32:86:f2:f0:40:06:93:d0:0c:94:4b:02:e7:
ef:5c:56:a7:6d:59:f5:ea:9a:57:93:e1:20:27:18:
87:cf:3a:fb:e4:4b:2e:07:b2:7b:4f:cc:de:b7:99:
50:47:8c:d0:fa:48:c2:31:79:b0:04:44:86:1e:5e:
b2:9a:f4:0d:8d:7e:d8:81:3b:a0:16:31:b4:a5:5e:
d0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C2:79:52:3A:1D:82:AA:54:23:C7:96:DC:58:E7:0F:4A:56:C6:14
X509v3 Authority Key Identifier:
keyid:D5:88:DB:17:66:6F:A9:51:5A:F3:1D:BA:09:5D:0F:25:0F:84:BD:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3d7e20-9022-492a-b882-3188e9d1f5a0/1/1YjbF2ZvqVFa8x26CV0PJQ-Evfc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:6f:22:35:96:c3:3f:f5:e5:f0:21:fc:ee:91:5d:13:91:13:
46:77:65:b8:1d:34:d0:0b:22:15:26:f3:03:93:30:7b:51:15:
16:63:63:56:47:47:8d:bb:dc:d9:4f:60:e3:cc:08:6a:c5:69:
95:3b:ea:11:09:b6:5d:c1:26:63:a3:da:ea:21:b0:38:7d:82:
18:72:4c:25:e8:b8:d2:73:5d:35:fc:44:5a:ed:55:bc:cf:d2:
5a:6f:7e:7b:cb:5b:18:c9:aa:f2:eb:3c:53:ef:df:db:41:98:
c0:bf:21:6e:8b:5f:2f:fb:09:90:cf:b7:24:5b:03:c4:c3:1c:
79:d9:61:3e:ad:ae:9c:12:0f:3e:b4:bf:11:a4:b1:69:c1:08:
4c:67:e1:68:59:66:49:a1:48:09:82:a3:0d:dd:e3:1c:8b:4e:
ac:65:a3:8d:07:6f:2f:a8:a7:1c:6e:b7:69:89:b1:96:6b:74:
01:8d:c9:8e:ca:df:c6:92:cf:49:4c:c0:21:06:a5:d4:eb:96:
ea:a1:d2:0e:57:9b:c0:7e:85:5b:da:04:6b:8c:2a:a8:32:bc:
70:30:bc:98:cc:a0:1e:c2:45:af:d7:11:cd:b5:38:d8:c1:db:
55:18:44:31:28:64:36:8a:bf:29:1d:f7:bd:b7:ac:fc:29:b9:
b7:69:42:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:43:33 2025 by rpki-client