Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
File: hdycVeFZfohWTa9WflpGZZeMe4U.mft (raw, json)
Hash identifier: GOAvkp0r+gPFrXT9Jn5eVkMroMcA2CSM2olQdPXCcTA=
Subject key identifier: 90:6D:5E:EE:13:9B:A8:59:C9:E8:C6:E1:79:0E:2A:12:BE:40:BC:35
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 0194BC72E80B0F9E81D8056E95B18ABA0DA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
Manifest number: 0E6A
Signing time: Fri 31 Jan 2025 13:00:34 +0000
Manifest this update: Fri 31 Jan 2025 13:00:34 +0000
Manifest next update: Sat 01 Feb 2025 13:00:34 +0000
Files and hashes: 1: 3wW5MOLSStojI9xiPbeDzYTIyjU.roa (hash: 2XAYsLytjrXYCpBJtfGxqKAam2Z4NRRhSRFoEEd4Llk=)
2: C3bQMRmtLfyKqffanrJ7_7vWCk8.roa (hash: EqbhaUJu7cZDNVqNN0UffRpUBKao2EeOOhzgBDrLfd4=)
3: P1xrsDj3N0ynN3JpUaE-Wz1pr18.roa (hash: 2a4rEq7sBMFkU8u7ERMYmBP6mk4U8OKJ4g4s+l9cEDo=)
4: hdycVeFZfohWTa9WflpGZZeMe4U.crl (hash: 2BDhsWhJASIea5Ku4bYl7Qr/cvHjaouoa3l6Hza72aA=)
5: yB29tJZko-Lc7mgNtW4aJqy2OH4.roa (hash: RwdgfwiMJl9oKJ48eg67JXX6tD33MmjSlDjkuGNeD5k=)
6: yXjHrq-s43_JYr0rLELUWWQUfRw.roa (hash: 4zzMUSCqPCS+1DFvUjbQidVA6cErC1SxAP7lBmahGck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:72:e8:0b:0f:9e:81:d8:05:6e:95:b1:8a:ba:0d:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Jan 31 13:00:34 2025 GMT
Not After : Feb 1 13:00:34 2025 GMT
Subject: CN=906d5eee139ba859c9e8c6e1790e2a12be40bc35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:61:a0:99:66:41:42:02:fd:00:0e:2b:56:
86:97:fb:14:18:5e:21:53:e5:f1:fd:ad:71:b2:1e:
b0:ee:74:e4:60:1b:18:53:1b:0f:f0:d5:ac:f5:e4:
a6:20:00:81:4d:6d:82:d4:5f:52:68:da:7b:dc:23:
b1:92:2b:bc:75:70:a7:83:c1:5f:e0:cd:95:3a:0c:
02:5b:b8:7e:3d:07:d8:91:b3:e6:6b:24:c5:e7:85:
c5:44:72:e2:1c:08:e8:e9:99:68:8d:57:8f:79:31:
fa:c3:bd:61:40:8f:aa:2e:5c:f7:31:6b:93:bd:31:
3e:c5:7e:0e:b0:07:f9:a0:f4:26:56:22:81:a4:e0:
c6:ba:35:b0:48:67:47:e3:7d:a8:61:38:8b:74:91:
d9:ea:e4:47:c7:3b:07:9f:1d:d1:23:57:19:f9:eb:
c8:88:b7:af:7c:6b:39:44:d3:13:d4:23:41:c8:34:
76:46:83:79:93:ed:7a:db:3c:d2:0f:c7:86:22:6b:
53:57:f2:ce:1c:30:26:2e:2b:11:c7:23:0a:0f:32:
c3:17:6a:dc:6c:5d:32:82:91:33:54:31:34:30:d5:
3b:02:b5:66:77:63:3a:e2:c6:e6:7c:73:24:15:fd:
9c:74:3e:e2:3c:42:81:3a:a6:72:0e:44:bb:a0:70:
1a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:6D:5E:EE:13:9B:A8:59:C9:E8:C6:E1:79:0E:2A:12:BE:40:BC:35
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:da:b5:1d:c7:8f:88:68:eb:71:2f:d4:49:17:5a:65:31:54:
95:55:42:35:ec:38:0e:9b:47:a9:72:80:f7:f7:c0:bb:c8:57:
e6:f0:e4:d2:dd:b6:c0:53:4a:a6:ea:fb:56:b1:de:a4:76:f0:
a5:0c:da:2a:07:d3:65:d3:ff:32:54:d8:fa:ea:eb:8b:49:cf:
de:29:bd:72:35:33:7a:2c:da:15:9a:e2:5b:d5:fe:9a:e4:db:
38:bf:4d:84:5e:6d:03:fb:e3:81:90:a0:bf:08:26:b1:70:bb:
a5:0f:c2:4a:00:18:8a:f0:4b:3d:b3:ed:fc:b0:fd:2b:95:09:
5e:c0:88:50:d3:29:46:1b:1f:df:9f:f9:25:d8:b2:a1:b6:b9:
6b:36:ec:dd:1c:65:5f:b1:cb:7e:78:72:f0:9e:94:80:1e:40:
e4:d3:72:cc:5c:ef:87:9b:13:40:c9:37:16:1a:d4:ac:67:fe:
a3:da:56:62:66:38:4b:cd:2d:3b:fd:e9:7a:b1:c2:55:dc:4d:
98:3c:6a:2d:1a:39:a8:bd:29:92:45:8e:47:c2:20:64:10:7a:
35:1e:fd:ac:bb:b3:96:34:c3:96:af:97:a8:4a:d5:32:6d:66:
04:62:53:4a:4b:01:20:8e:c4:0a:64:16:3b:5c:a1:98:e7:80:
de:43:fc:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:04:30 2025 by rpki-client