Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
File: SyttKl1BMFYPYXlj2fvJNELcHM0.mft (raw, json)
Hash identifier: e2feap74GRXxMsyupRrNqEE8geCjU6kJywgX5hdWxSA=
Subject key identifier: 64:09:AC:CF:19:6D:8B:EB:20:EA:1D:F9:F8:37:F5:F1:A7:B4:57:3C
Authority key identifier: 4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
Certificate issuer: /CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Certificate serial: 0194BCA9C6C40015BC9B87D6A70B5A18F611
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
Manifest number: 13BD
Signing time: Fri 31 Jan 2025 14:00:30 +0000
Manifest this update: Fri 31 Jan 2025 14:00:30 +0000
Manifest next update: Sat 01 Feb 2025 14:00:30 +0000
Files and hashes: 1: M4qXtzk7m1_HROVvWg529-GrNdE.roa (hash: edioIsxmBILO0oJIeA0UJ1H6nLNxCIDowpitLjgAj8U=)
2: SyttKl1BMFYPYXlj2fvJNELcHM0.crl (hash: 7cCV5fIZNPBqav/kksXPPh+Cjzj1OMS/JVgp7i+OfJg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:c6:c4:00:15:bc:9b:87:d6:a7:0b:5a:18:f6:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b2b6d2a5d4130560f617963d9fbc93442dc1ccd
Validity
Not Before: Jan 31 14:00:30 2025 GMT
Not After : Feb 1 14:00:30 2025 GMT
Subject: CN=6409accf196d8beb20ea1df9f837f5f1a7b4573c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:97:df:6b:39:ab:ef:19:22:95:10:6d:42:85:
cb:69:ed:0b:8b:89:cc:0f:c4:1a:12:b4:1d:86:a4:
50:d2:98:21:b7:50:1e:4e:e1:07:a3:b8:bb:d7:fc:
b9:6f:28:f7:65:19:b3:45:1d:05:72:c2:9d:81:7e:
8a:36:6c:5a:c9:4c:9e:b2:f5:d6:1e:2e:52:fb:6d:
72:75:28:84:9c:6d:5e:d1:bd:1d:96:8d:88:c7:2a:
85:95:33:9f:af:23:22:b3:7e:88:6c:1f:78:de:69:
fa:b0:c8:f8:31:b9:d2:60:1c:75:2a:da:34:4a:e6:
8c:ce:13:56:32:05:de:34:f3:56:65:e6:1b:76:7b:
2b:b2:c2:25:c9:cb:e6:4c:ef:56:27:35:ce:9b:87:
15:5f:44:00:c9:2f:37:9e:1f:a0:e2:0d:16:64:da:
91:07:60:52:c3:3f:c1:e1:70:82:fd:48:01:00:f8:
d9:da:5d:fd:1d:e3:6c:94:33:18:f3:5f:eb:66:e4:
12:a2:4b:96:b7:1b:35:bb:9e:73:e2:35:a6:05:e3:
4c:f1:f2:b2:af:44:fd:4a:cd:bc:7f:f9:65:23:f5:
34:25:ca:06:ea:41:91:af:31:24:0a:e1:0b:61:44:
1e:30:d7:a7:15:f6:e1:96:3f:25:9c:39:51:58:75:
f0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:09:AC:CF:19:6D:8B:EB:20:EA:1D:F9:F8:37:F5:F1:A7:B4:57:3C
X509v3 Authority Key Identifier:
keyid:4B:2B:6D:2A:5D:41:30:56:0F:61:79:63:D9:FB:C9:34:42:DC:1C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SyttKl1BMFYPYXlj2fvJNELcHM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40ef41-31f4-420d-badc-c574158502c8/1/SyttKl1BMFYPYXlj2fvJNELcHM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:db:8b:e6:ec:68:ed:6a:99:ba:2d:ca:2b:3e:62:70:08:a7:
df:f5:cd:c7:1e:45:60:d1:71:82:49:6e:55:5f:4b:04:70:eb:
84:ce:49:8a:a5:f9:f2:4a:8b:81:4d:23:6c:6b:a3:7f:d3:c9:
f0:ef:b5:7f:40:b9:8f:dd:53:f8:f1:c7:c2:35:98:16:1e:91:
52:f4:a8:7f:b9:0a:27:53:5b:f0:53:e5:a8:46:26:8e:c0:c2:
f5:ab:de:85:6b:d9:7e:23:2a:c9:e8:fd:a5:c0:cc:5f:8c:be:
93:7c:34:8e:a3:54:86:3f:2a:45:de:e5:0d:f1:46:54:4a:22:
f3:ba:30:03:8a:c6:a7:2a:24:90:d1:94:bc:e1:59:9d:f4:7a:
d1:5b:eb:a4:f9:a7:93:2d:51:55:81:6a:90:31:60:fa:21:f6:
c1:1a:e8:d9:ee:b0:72:3c:6f:e0:8e:fa:21:f1:0d:61:df:b6:
8d:ce:e4:cd:c8:84:76:fd:d7:27:3a:7d:e0:f0:73:cd:3d:7d:
36:04:c3:6b:a1:b5:10:65:0a:da:34:8b:61:75:2d:2f:b7:cb:
69:9b:3d:1e:02:5e:d3:99:72:5e:68:c8:20:4c:53:ac:2f:92:
2d:c4:dd:8f:2c:73:2c:9d:24:10:4e:cf:47:bf:0e:9c:fc:d4:
33:09:da:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:03:26 2025 by rpki-client