Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
File: yYoYbo7rhxTtylsNcW5R1mwWjOE.mft (raw, json)
Hash identifier: oUz0qQyvUPwMM2YeOYL3X+LWEn/h9rNe7I6hPdrrbYo=
Subject key identifier: A8:26:6A:D7:05:1E:ED:26:E0:C6:34:4F:25:03:A4:45:ED:F8:83:F6
Authority key identifier: C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
Certificate issuer: /CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Certificate serial: 0194BD853AE329DA2801EB9AF3DCF840CACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
Manifest number: 142A
Signing time: Fri 31 Jan 2025 18:00:12 +0000
Manifest this update: Fri 31 Jan 2025 18:00:12 +0000
Manifest next update: Sat 01 Feb 2025 18:00:12 +0000
Files and hashes: 1: Y9vHd81ibfUetGxJah-LnbSDV5g.roa (hash: 4fkHfBFVcEfZDutW6y6I1HuGuOEE4ACtS7MPP484LwM=)
2: yYoYbo7rhxTtylsNcW5R1mwWjOE.crl (hash: e23UgdJSo110Yx7R0B5WEoNMPwhGM36828NlqrRqzM8=)
3: zBGnHPAUEWWCm_u3jtGTRqp9xHs.roa (hash: WhdGn2fRgjfQdOUl3EYSHsYRvd0466eSDsxZA6Pu8m8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:3a:e3:29:da:28:01:eb:9a:f3:dc:f8:40:ca:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98a186e8eeb8714edca5b0d716e51d66c168ce1
Validity
Not Before: Jan 31 18:00:12 2025 GMT
Not After : Feb 1 18:00:12 2025 GMT
Subject: CN=a8266ad7051eed26e0c6344f2503a445edf883f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:fc:a1:92:71:d1:5d:10:2f:a4:02:e5:78:
db:9a:a7:2a:a3:10:ca:00:95:80:f0:b1:2b:f8:74:
5e:d9:d9:84:78:06:96:73:88:d0:bc:09:0f:6f:92:
c0:55:cd:f6:57:23:4d:28:43:2b:44:f3:44:83:ac:
21:74:03:22:e5:6d:a2:d7:c2:59:a1:12:cb:58:44:
19:21:95:9f:76:7b:d6:04:13:52:2a:55:14:65:7e:
53:11:da:ee:a6:09:ec:2b:64:29:22:a1:fa:c0:f4:
77:57:ec:96:c0:69:84:6b:de:23:72:6b:cc:46:05:
f9:7a:99:9b:f0:68:1d:18:d8:4c:3d:5e:d6:de:e4:
58:8f:58:b0:f2:5a:ca:58:8e:08:b8:09:c1:1e:59:
92:53:7e:dc:5a:25:fd:03:0c:89:99:48:fc:4d:0f:
b4:65:2c:41:61:39:a6:e6:74:2a:52:e2:af:b3:15:
c4:c1:e1:02:75:91:56:d9:54:11:45:36:6a:3d:5d:
14:0e:1f:79:2b:11:2e:5e:61:bd:f2:87:4f:89:df:
88:7e:c6:58:fa:c0:f7:d1:cf:23:16:09:f8:4f:04:
ab:d2:07:f4:e4:cc:a7:a0:0a:dd:af:c1:36:3e:ab:
f3:13:e9:e9:9e:82:d1:e7:e2:90:c9:2d:1f:04:6f:
56:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:26:6A:D7:05:1E:ED:26:E0:C6:34:4F:25:03:A4:45:ED:F8:83:F6
X509v3 Authority Key Identifier:
keyid:C9:8A:18:6E:8E:EB:87:14:ED:CA:5B:0D:71:6E:51:D6:6C:16:8C:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yYoYbo7rhxTtylsNcW5R1mwWjOE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ba7214-5568-4a42-a999-7a5a8d0967c8/1/yYoYbo7rhxTtylsNcW5R1mwWjOE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7a:63:19:7c:63:99:ba:c3:24:de:cf:c4:71:63:ef:1a:73:
cd:1b:3c:d8:eb:74:99:24:d7:09:e3:9e:21:f3:eb:1a:e4:29:
15:2d:c0:c4:ac:ca:15:79:38:6b:7c:95:a2:1c:18:4a:7a:55:
c6:59:22:0a:c0:b5:a9:bb:a4:6b:eb:81:4e:47:a0:60:c4:d3:
09:05:44:78:9d:19:fa:02:2f:14:95:8b:d0:bd:db:dd:7e:38:
83:c0:f4:4f:84:82:b8:35:c3:7d:07:35:0a:26:ae:23:d4:f8:
e5:9a:51:45:54:78:cd:8c:c0:2b:63:c2:4f:fc:9f:8d:1f:2c:
e4:f4:19:c6:62:04:ca:cf:5c:a5:ca:e7:da:45:44:73:cf:33:
28:b6:85:17:c8:69:a4:be:67:79:6b:15:fe:c5:db:c3:ba:35:
7b:24:50:00:8b:99:41:4b:fa:a1:2d:36:2d:1c:4f:7d:6b:bb:
9a:c1:f5:10:28:00:76:15:c8:32:f5:c2:7f:e3:e8:9c:eb:ef:
fc:d2:46:51:96:2c:d2:96:06:36:4e:e6:1a:1a:f9:3d:41:e1:
26:a0:ca:11:b6:de:bf:e3:cd:e1:c0:b2:a9:28:65:e6:39:10:
ec:31:16:2e:39:fe:40:13:cb:ea:7a:3a:24:df:5a:41:5f:25:
7b:9a:87:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:14:02 2025 by rpki-client