Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.mft
File: yWyebTIz4sJBILhdFxec-10zR4Q.mft (raw, json)
Hash identifier: XTeaO3h4R2dAxWHmjLLVU/LTlf0Nnkui8MjHkOFZFtM=
Subject key identifier: A9:65:F0:CD:44:A9:3D:A9:34:CD:46:F3:B9:8A:B6:79:84:00:55:F0
Authority key identifier: C9:6C:9E:6D:32:33:E2:C2:41:20:B8:5D:17:17:9C:FB:5D:33:47:84
Certificate issuer: /CN=c96c9e6d3233e2c24120b85d17179cfb5d334784
Certificate serial: 0194BD17F3CF5FAB3080634E8EB8ADFA4891
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yWyebTIz4sJBILhdFxec-10zR4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.mft
Manifest number: 0419
Signing time: Fri 31 Jan 2025 16:00:50 +0000
Manifest this update: Fri 31 Jan 2025 16:00:50 +0000
Manifest next update: Sat 01 Feb 2025 16:00:50 +0000
Files and hashes: 1: VZHF0nE3qVwIIpqdmF6QQh7nLs0.roa (hash: mQT6bJlTC89LqB3D9GVMba8EFmBGqFt+S6QYF8yZZKY=)
2: yWyebTIz4sJBILhdFxec-10zR4Q.crl (hash: b76X/D/0FvgKzE4PLhqh0kCCT5N6Mm7QSvifZOWPDbM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:f3:cf:5f:ab:30:80:63:4e:8e:b8:ad:fa:48:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c96c9e6d3233e2c24120b85d17179cfb5d334784
Validity
Not Before: Jan 31 16:00:50 2025 GMT
Not After : Feb 1 16:00:50 2025 GMT
Subject: CN=a965f0cd44a93da934cd46f3b98ab679840055f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a5:14:e7:ce:16:7f:17:99:43:c4:82:57:a1:
cb:4f:01:dd:f9:d4:27:8d:76:91:7d:ba:ac:04:2d:
6d:39:96:9b:4b:4b:65:3e:f1:c4:e3:fe:1a:8b:a4:
61:a6:84:41:57:fd:95:59:5e:ef:2e:33:c4:b4:0e:
89:15:62:26:b8:e0:f6:35:ee:a0:d0:5f:b7:99:83:
37:49:cb:ee:5b:59:a3:16:98:52:11:a0:ee:52:06:
31:6b:6f:3e:d0:cc:ef:29:fd:2e:95:f4:72:51:0b:
ea:5e:2d:0b:4d:92:05:52:2f:a0:5f:cb:06:e6:86:
a8:92:21:29:53:1a:ac:2a:32:e5:12:59:c6:a5:1e:
cb:e4:d6:e1:6b:9e:d7:00:cd:f1:c9:2e:27:01:fe:
8c:d7:16:78:42:d2:10:b3:89:60:5e:16:a6:3b:87:
3c:9a:5e:7f:3d:ad:30:c5:d5:f2:2b:94:36:85:f0:
da:0b:7c:ee:2c:f8:39:5d:2c:32:d7:95:5a:12:f9:
ce:4f:d8:dd:b6:96:98:78:82:5c:65:1f:a3:4d:54:
84:fb:96:ee:40:53:8e:14:c9:c4:88:a0:3d:2f:1b:
79:59:78:57:c4:78:01:13:1d:2e:44:74:b5:e3:07:
72:30:90:79:f3:36:c6:7d:dd:1d:13:c9:64:f0:b6:
94:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:65:F0:CD:44:A9:3D:A9:34:CD:46:F3:B9:8A:B6:79:84:00:55:F0
X509v3 Authority Key Identifier:
keyid:C9:6C:9E:6D:32:33:E2:C2:41:20:B8:5D:17:17:9C:FB:5D:33:47:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yWyebTIz4sJBILhdFxec-10zR4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/bd9f3c-9a03-420d-8a29-d094dfa364d6/1/yWyebTIz4sJBILhdFxec-10zR4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0c:80:12:d8:62:ad:ce:c2:e9:cf:39:cc:2f:e4:70:bb:42:
46:7f:75:c4:6d:04:a0:40:73:78:dc:95:ac:22:b1:16:82:44:
a9:33:c7:36:2c:70:36:df:cd:22:7b:41:62:e6:23:22:75:6d:
ee:c9:08:8f:39:d4:6b:d5:c0:1b:d3:03:3d:cd:97:24:7e:96:
3e:bc:92:70:77:41:bf:18:a6:c3:ac:d3:ca:f1:bd:db:3c:76:
cc:42:00:a6:f5:6a:7a:93:7e:1e:9e:c7:62:a2:6e:e2:11:3d:
36:44:15:e3:31:1e:7b:5f:56:f8:c3:fc:83:f8:d5:75:13:8a:
5b:41:d0:2f:51:fd:6b:76:ee:26:b6:98:16:d8:b5:46:70:5e:
40:2a:79:40:cb:9b:ee:40:12:59:27:be:2c:59:ac:84:d2:d7:
79:a0:a5:40:c5:d2:f5:ec:6e:45:63:80:43:c9:99:42:c1:24:
3f:6b:4a:18:ca:6a:21:17:72:ae:bf:90:37:52:36:21:66:97:
e4:8e:49:0c:ed:c7:82:00:a4:cf:7b:8f:48:f8:89:41:4e:34:
69:b7:eb:24:74:a4:ba:18:cc:8c:01:ac:05:df:c6:af:37:da:
b9:94:84:0a:1e:6d:55:54:be:77:b6:96:51:1e:71:c1:ae:62:
36:f7:19:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:37 2025 by rpki-client