Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json)
Hash identifier: bmt0YhkXPcnmden57T/e2Kci0YbHwCYLUeyiyweEDfA=
Subject key identifier: 2D:E1:25:36:4A:B3:8E:20:C3:B4:D9:E4:27:E0:10:7B:9D:5F:86:DF
Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Certificate serial: 0194BBCE99BD769B9F7798EC8FA1EF3FE3CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
Manifest number: 083A
Signing time: Fri 31 Jan 2025 10:01:06 +0000
Manifest this update: Fri 31 Jan 2025 10:01:06 +0000
Manifest next update: Sat 01 Feb 2025 10:01:06 +0000
Files and hashes: 1: BVbo9uh3-UvDvwSZi6BfXSBGPHU.roa (hash: Z8qyhH6viB+EEzaDtRv3WrjvxrAR7rKFv4csNYovB+g=)
2: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: Ra9wEK7OlKwVuPRSe5Yo3PUiif7FkI9R/x3XO8xOALA=)
3: DN7cb2WxNWOTpycH6YaG66edbbs.roa (hash: xHRCbbCrWIHuruRPkilEuXWa24rKkDGqIeFboryKMwQ=)
4: Fiaoyzt87itbMDPQcRW3KUFZRqE.roa (hash: msw75zbRd9jVXLoPptdxNvS4cyBll5nFN6qdq2TWWOE=)
5: Jc9D6pL0tybtqLuuNbwlYUh4B68.roa (hash: qj9Ku8qt3QMrLU+senB/+rsFyVvP7pOUp5NAuPmXysg=)
6: OEhLMwhGsj88kZ4FqVMVTfpqz-8.roa (hash: /KQ43a3fdsH0+xJZbYiIUJZNQ9G0ar1u4ierKXmEsMM=)
7: Q7ylfuCC8FIAA0S7lneAelCvwiE.roa (hash: IgBth00dtUmBF0nZpBo0VG8Ndo3/qKj9XZ2f/WUzp8U=)
8: _8-3Qs_qZ1htreiN1JNh0Xfjgzw.roa (hash: vjBjNUyiud1IqRH6IpSBed0Ql8B7vtUZBKWlZlCokKM=)
9: m87-CXNBm5VwmmEvQBAI-p_8l98.roa (hash: vGGq9E7IPOkRddkapcYuXImJsPgw9f+HEWKjnAHtMCI=)
10: nMhyX7boXa--DjLfLdE1CijBszU.roa (hash: s95e1FJb6EuRsUkazwo7HJhOqZW3W1mabgyeLhjUIIo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:99:bd:76:9b:9f:77:98:ec:8f:a1:ef:3f:e3:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd
Validity
Not Before: Jan 31 10:01:06 2025 GMT
Not After : Feb 1 10:01:06 2025 GMT
Subject: CN=2de125364ab38e20c3b4d9e427e0107b9d5f86df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:99:ca:a9:2d:5c:c2:43:37:a1:84:4f:96:7f:
9e:14:71:7b:03:55:77:85:f9:6d:7c:1f:36:c9:88:
c4:dc:f6:16:c7:2f:2c:be:2f:f3:ee:24:40:35:9b:
79:41:eb:00:86:0a:1a:c7:1f:4e:3a:e6:19:93:bd:
f0:7a:60:d3:b9:dc:fa:f6:6b:e8:a3:80:7c:56:93:
2c:ff:f4:d2:01:96:03:78:59:6b:4d:a6:e3:4a:05:
a2:f6:9a:49:86:2a:3a:34:0a:7b:db:aa:3b:6d:a3:
f2:08:9c:21:0a:9d:5f:da:7d:95:c7:1f:29:c2:4a:
d0:66:f1:3e:0f:1d:4c:2f:0b:ec:3b:17:65:46:46:
ba:c3:0f:58:0b:04:a0:0f:a3:09:e3:05:34:bc:1f:
0c:c8:f1:70:60:ef:c5:ef:fc:3f:18:0e:18:f3:c4:
ff:99:f0:ca:0e:2b:a8:ca:25:bb:50:0e:65:3a:3e:
c4:22:c5:10:45:a6:4a:cb:93:18:58:94:49:7a:b3:
e6:75:1f:00:0b:ac:74:6f:9f:08:af:2a:ab:3c:eb:
5e:11:d6:99:ed:a2:2b:a6:75:f1:05:cc:ce:8e:cb:
03:27:ae:82:71:83:e2:0c:92:30:20:d9:92:f3:ff:
d3:ad:10:69:51:62:93:43:a2:c6:fc:38:ab:44:d5:
90:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:E1:25:36:4A:B3:8E:20:C3:B4:D9:E4:27:E0:10:7B:9D:5F:86:DF
X509v3 Authority Key Identifier:
keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:c3:4a:a7:15:a9:d8:d9:d9:dc:66:57:0f:f3:0e:96:ec:3e:
12:69:78:fa:42:c1:e2:cd:be:2a:27:6d:38:ef:39:8b:c1:1e:
a0:51:c9:24:94:ca:0e:d2:d2:41:de:d4:bc:20:09:46:12:62:
90:4d:7b:da:ab:7d:af:d8:b8:b2:29:bd:09:47:12:04:94:ed:
bf:f0:45:ba:f8:ac:44:55:7d:90:9d:db:dc:17:0f:c1:1b:a7:
17:c0:c8:78:f1:db:b4:b6:be:a2:ad:c3:5f:9b:39:4a:e1:54:
09:24:60:cc:e7:32:25:5a:87:d4:c3:ea:19:eb:ca:11:09:e8:
ac:dc:90:0c:7d:27:77:d4:d6:9d:44:0c:bf:d4:7c:12:57:ef:
df:67:be:96:d8:4a:03:5e:d2:ce:91:ce:23:80:31:c7:5d:45:
0d:2c:2b:9d:d8:f3:76:39:32:dd:c8:6c:11:37:23:21:07:60:
d0:e2:01:0b:f1:0a:4b:19:08:75:06:d0:ae:c4:3b:6e:3f:06:
11:b7:06:7c:9a:ce:67:42:bf:d2:a8:a3:42:c2:27:1a:47:e0:
64:8a:8a:c8:ef:98:76:ca:90:ec:ac:c1:8f:73:2d:8c:d5:a7:
9c:db:74:ca:9e:9f:ab:44:0f:2a:f0:26:03:36:be:26:66:d6:
70:4d:6c:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 13:22:46 2025 by rpki-client