Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
File: ydDpI0zGchlXpKwhPqxnU-2F7qc.mft (raw, json)
Hash identifier: fbOdckv9NnpS6ChaW9DmwJeFtyB42bGxHpVVH8ZOiS0=
Subject key identifier: 98:E4:DC:44:19:2E:7A:C7:B7:AB:8F:4D:BE:10:A1:1E:06:43:AF:D3
Authority key identifier: C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
Certificate issuer: /CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Certificate serial: 0194BCE0A18E09B2530499A9270AC929F4DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
Manifest number: 036A
Signing time: Fri 31 Jan 2025 15:00:25 +0000
Manifest this update: Fri 31 Jan 2025 15:00:25 +0000
Manifest next update: Sat 01 Feb 2025 15:00:25 +0000
Files and hashes: 1: OokYUWcbSrbqH_f8HmgcmqdnhJI.roa (hash: lEOM5QUpe0ZqlkmiuxBrUGOTGhzAkiXF0N6KvtAneUM=)
2: _G1IwYuiPRKax01xXjjobsob6yw.roa (hash: LZnDAWxOXPzc+P38eGPHBFeaOSKoPBWPSSrjh5BR84Y=)
3: ydDpI0zGchlXpKwhPqxnU-2F7qc.crl (hash: 0F4y/WL6G64LGsO4ZDno3OtTWmhle43ZsOstDGyq56E=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:e0:a1:8e:09:b2:53:04:99:a9:27:0a:c9:29:f4:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d0e9234cc6721957a4ac213eac6753ed85eea7
Validity
Not Before: Jan 31 15:00:25 2025 GMT
Not After : Feb 1 15:00:25 2025 GMT
Subject: CN=98e4dc44192e7ac7b7ab8f4dbe10a11e0643afd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b1:c9:be:6b:90:bb:5c:03:8f:bd:2b:55:26:
d8:ca:af:bf:d0:78:15:3f:e0:9a:51:f5:59:72:d3:
ac:87:45:fc:f0:99:58:33:0d:50:fd:18:ee:5b:97:
b7:81:9d:9c:a0:e0:17:23:86:96:b2:48:36:69:f7:
31:ea:dd:da:33:90:56:97:e7:1d:9a:81:81:7d:6a:
f4:54:8c:4a:84:26:24:36:b5:fa:65:fb:19:82:9b:
67:08:6c:c7:05:d2:ef:71:4b:fc:8b:58:46:ee:19:
a0:93:7f:90:16:2a:a5:2c:3a:b1:fe:2f:da:3a:87:
56:39:96:44:2d:fe:7a:ff:8a:d2:b9:06:09:ab:df:
3c:7c:dc:44:86:a3:c4:1b:9a:80:58:cb:95:a8:30:
87:6d:9a:0e:86:63:66:92:df:02:8b:4b:93:9c:2f:
93:1b:53:a8:9a:bd:f8:13:1e:c7:e5:d0:aa:44:49:
81:35:4a:d6:17:16:5f:1d:32:d4:3e:62:c9:71:e4:
6c:ee:89:59:0f:bb:a7:ce:d3:90:70:02:19:40:e4:
dc:ed:29:cb:4c:d9:44:e3:11:c0:6d:68:0e:f1:ea:
40:7e:0a:b2:c7:8d:83:c5:c0:07:48:32:1c:50:9b:
5c:6f:5d:c2:6b:2b:4c:66:b2:74:f0:2b:da:22:03:
d4:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:E4:DC:44:19:2E:7A:C7:B7:AB:8F:4D:BE:10:A1:1E:06:43:AF:D3
X509v3 Authority Key Identifier:
keyid:C9:D0:E9:23:4C:C6:72:19:57:A4:AC:21:3E:AC:67:53:ED:85:EE:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydDpI0zGchlXpKwhPqxnU-2F7qc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/ydDpI0zGchlXpKwhPqxnU-2F7qc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:1e:70:03:a3:64:a8:c3:a4:79:2e:d2:19:6a:58:58:88:70:
ce:10:01:5d:c1:0b:99:20:95:eb:72:84:90:01:11:ce:34:8e:
6e:b6:cf:03:44:cf:9f:de:8e:26:db:02:68:18:5c:1d:4f:39:
c9:36:7d:60:92:ea:93:6c:cc:9b:b6:bb:22:53:a8:a3:df:d5:
d0:35:14:e8:37:8d:07:49:e0:55:a8:6a:e0:c4:f7:a1:a6:d4:
ea:d4:4d:46:d2:fc:48:b8:43:86:b7:04:39:e4:be:ab:43:16:
8c:0f:70:50:e3:7d:09:23:5e:4f:22:49:a0:41:2d:b5:3b:be:
4e:05:83:0e:63:6a:f6:12:78:53:ac:de:b3:e8:4b:2a:d2:4d:
ea:8c:1b:ed:f0:60:8b:9e:6c:3b:ed:38:a7:dd:e6:6f:9a:95:
09:45:45:eb:e7:62:d7:a4:70:d9:38:28:ce:13:6b:5e:84:d0:
22:cb:b6:32:73:64:83:58:df:af:2a:0a:02:09:de:1d:cb:8e:
aa:bc:24:4e:0b:ac:42:91:05:b3:27:88:f1:ea:bd:bf:78:19:
7a:5e:86:53:f4:1e:aa:34:d4:8b:ad:61:e2:4c:38:61:d5:18:
c7:fc:18:19:cb:af:f2:ea:dd:8e:bf:38:67:10:7d:b3:41:44:
6a:4e:40:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:02 2025 by rpki-client