Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
File: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft (raw, json)
Hash identifier: m6OGyRdD3+Mnf+HslC8lG0iNt1O0GG73ehMTIx+GhDY=
Subject key identifier: D0:32:D6:3F:9A:7C:59:59:91:F1:AC:62:35:8C:20:8A:80:6F:BA:1B
Authority key identifier: C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
Certificate issuer: /CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Certificate serial: 0194BBCEDFAC1FCBD9E89E859901621B145C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
Manifest number: 0501
Signing time: Fri 31 Jan 2025 10:01:24 +0000
Manifest this update: Fri 31 Jan 2025 10:01:24 +0000
Manifest next update: Sat 01 Feb 2025 10:01:24 +0000
Files and hashes: 1: Hjt16ZgJYnsTZcWE0Va13YoIt7M.roa (hash: xjrK/sVAC5wf26/BaujuTP3RD5GR/bbBxu4fokZn8xY=)
2: yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl (hash: uvcQzvdLClytTvkpriwNi4aMx4Rc8y+M9krYvY/A5Ug=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:df:ac:1f:cb:d9:e8:9e:85:99:01:62:1b:14:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c82bedbcf7b5360fee245b7a255f6640b7276968
Validity
Not Before: Jan 31 10:01:24 2025 GMT
Not After : Feb 1 10:01:24 2025 GMT
Subject: CN=d032d63f9a7c595991f1ac62358c208a806fba1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:92:49:28:28:8d:be:4a:c1:1c:e5:fe:2b:8d:
5b:48:56:ed:5b:8a:55:2c:d1:fc:79:fe:4d:27:44:
52:d6:e4:00:24:31:7a:0c:ab:a2:49:35:4d:e3:59:
d0:4f:b7:1e:5b:16:4a:93:85:9f:5e:14:32:cc:cb:
ea:fa:b4:9e:8d:2f:88:03:20:c9:e2:1c:03:a1:22:
08:79:04:94:27:fd:0c:1f:01:34:56:5f:f1:c0:2d:
37:1d:fe:61:d4:1a:65:45:07:b8:09:c7:0f:cc:a8:
07:3e:d3:17:d2:8e:7c:45:55:f2:77:6a:6a:26:af:
1e:0e:2a:18:06:f8:8a:e7:f2:c8:0d:4b:05:86:e0:
48:ce:d9:65:2a:60:1e:ac:86:3a:fb:ec:d2:e8:16:
89:4c:6a:41:fc:49:e8:89:33:8d:56:ea:68:26:98:
43:30:2a:67:91:77:00:fb:0e:5a:5d:45:67:26:69:
7f:a9:a6:cd:d0:e0:f7:bc:b2:68:93:84:de:f7:59:
53:72:41:d2:3c:41:ae:8d:27:4b:f0:8d:8f:f3:a4:
d1:17:f8:67:a9:97:7c:98:14:79:77:22:f3:7a:b8:
4a:dd:e5:6f:28:73:be:b4:ac:e6:65:2a:34:52:e5:
67:a5:b6:21:52:23:3d:8a:0a:ed:5d:70:f5:99:44:
b5:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:32:D6:3F:9A:7C:59:59:91:F1:AC:62:35:8C:20:8A:80:6F:BA:1B
X509v3 Authority Key Identifier:
keyid:C8:2B:ED:BC:F7:B5:36:0F:EE:24:5B:7A:25:5F:66:40:B7:27:69:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/dd59d9-eadf-4713-8977-42fa3cfbb503/1/yCvtvPe1Ng_uJFt6JV9mQLcnaWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:64:2d:21:00:38:de:c3:6e:87:e9:bd:29:bd:89:0a:11:b4:
d2:e5:5b:dd:86:a5:ac:93:99:7a:7e:da:32:4f:f1:04:a5:c0:
00:e8:7c:a3:15:21:50:8f:41:6d:98:44:15:55:59:a1:ef:96:
bb:e2:5e:cb:04:43:16:bc:73:4a:1e:2f:30:de:45:bc:8f:0e:
c0:92:be:e0:35:d2:47:75:9a:58:94:c9:e5:3e:c7:08:d1:39:
34:f9:cd:f3:ff:e4:39:a2:c3:fb:1d:d1:e8:41:fe:1b:9b:4e:
61:ea:41:aa:4c:b0:7f:c2:95:cf:fa:fd:7d:b4:09:95:cc:b8:
8c:ad:55:60:ac:9a:2c:5b:e4:54:3e:d9:2c:b1:b1:b8:9a:37:
9c:2a:0d:1f:90:aa:d7:2c:eb:be:0d:91:d4:bd:f6:ca:b4:ab:
9b:0b:b2:74:f8:79:1b:6c:5b:e5:e0:84:90:d2:65:a8:d3:fb:
ab:a9:45:bf:c8:1d:70:d8:b4:b3:ab:3f:58:ba:8f:b1:36:e1:
1f:33:b1:49:e2:0b:ad:a8:78:a4:9a:85:45:00:08:05:2e:4d:
a7:a7:db:4e:0b:a4:4e:92:98:1e:51:4a:f9:d9:96:78:b3:bc:
9d:12:f8:41:55:3b:b1:61:dc:a3:8a:bb:aa:00:16:7a:00:a1:
93:15:7c:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:39 2025 by rpki-client