Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
File: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft (raw, json)
Hash identifier: yLHvs01AwaMi7kBggLD/Bktb2xTBLiChuyA0ah64nF8=
Subject key identifier: 78:EA:09:78:58:F7:96:16:72:B5:ED:2E:9E:75:DA:3A:32:FF:4F:65
Authority key identifier: C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
Certificate issuer: /CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Certificate serial: 0194BC3BDB3E8BA3CEB265FF2A04847B5431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
Manifest number: 142B
Signing time: Fri 31 Jan 2025 12:00:26 +0000
Manifest this update: Fri 31 Jan 2025 12:00:26 +0000
Manifest next update: Sat 01 Feb 2025 12:00:26 +0000
Files and hashes: 1: DfudKWBsua2Qw82vhg_Oro_4T98.roa (hash: XG4PsPIlXqIkgFnmlSjnQQmXXe49OoS+FFltYc4QbS8=)
2: d6ev5Lq_SgXWZaDiFmTX8HhBeK8.roa (hash: 7NMCb/zeY3TNsahsQ59GZgDuhRzC5SGnnyyZpSOipqs=)
3: ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl (hash: EB5HKATHl07Q7lC47KZ2PG2nUmBB/v7GQkN/UZmVTpo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:3b:db:3e:8b:a3:ce:b2:65:ff:2a:04:84:7b:54:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9ed64c93ddfdf2f49b7ea1c23eaad0870249a33
Validity
Not Before: Jan 31 12:00:26 2025 GMT
Not After : Feb 1 12:00:26 2025 GMT
Subject: CN=78ea097858f7961672b5ed2e9e75da3a32ff4f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:15:b1:95:9d:3c:83:62:1a:f3:26:eb:c4:ba:
68:1f:c2:f1:0e:8a:b1:0f:4a:89:63:5d:87:6b:a0:
d7:0a:9a:4e:4a:fc:ce:27:6a:ed:ea:39:05:72:e1:
01:17:2b:90:cb:e4:1b:8e:09:66:dc:f2:0c:8f:e9:
b6:d0:b2:1b:06:e6:9a:53:9a:56:f6:22:8c:a7:58:
36:d3:4a:cb:6a:85:ec:31:b7:06:f1:2f:53:b7:25:
de:3d:6c:39:80:9c:43:73:d9:90:14:a1:73:cc:e0:
29:f1:fe:bc:b7:34:12:0f:35:84:74:6a:97:2a:e1:
5d:4a:69:d9:b7:2e:0f:15:a5:a0:a1:eb:8c:75:9e:
f4:9f:4a:8a:b9:12:2f:1e:d2:1b:85:6b:8b:24:cc:
fe:6c:ee:56:53:5d:69:5f:c8:b4:18:7d:37:4d:01:
e2:ed:d7:64:6d:b2:54:8e:26:26:ca:6b:df:c6:5e:
3b:3c:9e:d5:50:30:b5:d4:4f:a6:b2:2e:05:77:3e:
1e:1f:84:3b:b2:76:27:ce:f2:6e:60:3c:ed:1f:39:
1d:1b:c0:6c:8d:19:13:da:4c:c8:cf:e1:39:af:99:
64:3d:e0:b6:0c:35:8d:80:db:af:59:ba:ab:c0:3a:
cd:37:5e:f2:f3:74:a1:af:4e:c7:b3:8c:62:b4:c2:
25:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:EA:09:78:58:F7:96:16:72:B5:ED:2E:9E:75:DA:3A:32:FF:4F:65
X509v3 Authority Key Identifier:
keyid:C9:ED:64:C9:3D:DF:DF:2F:49:B7:EA:1C:23:EA:AD:08:70:24:9A:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2a2ab2-3098-4a0f-809c-35ed5b53da05/1/ye1kyT3f3y9Jt-ocI-qtCHAkmjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:16:de:9b:6d:9b:fd:e1:d9:f5:0d:fe:e9:a1:8e:b2:7c:74:
b7:da:87:ba:35:ac:a9:43:35:34:fd:ae:6b:30:70:6a:1b:8d:
6a:22:98:f7:e3:17:74:6f:12:90:16:11:83:13:31:85:3e:d7:
25:72:14:7e:38:b0:39:31:b6:27:6a:c2:c1:3c:9a:75:56:04:
4a:3f:9b:9c:d0:8a:a3:c3:74:23:ca:31:1e:22:bc:48:4a:24:
d1:51:98:df:9d:a7:3c:53:f0:cb:f8:18:3a:2a:8f:76:50:36:
3f:d2:7c:01:33:f7:d2:2a:a0:a0:a7:a0:c0:bd:2b:8d:22:2e:
3c:f3:a5:3d:3d:fd:a7:37:1c:ce:28:2e:ef:f6:c3:05:53:b2:
38:15:ca:93:a1:25:03:a3:54:d2:3e:9e:df:f9:d4:d2:0b:48:
3c:b8:8b:f6:26:11:95:91:6e:a7:b8:94:03:e1:c0:37:e5:46:
1f:42:52:9b:49:d5:03:9a:d5:19:7a:24:61:bf:4f:08:a5:df:
ea:15:eb:d6:7b:f4:88:e9:cb:43:4f:be:0f:6b:b5:b9:d4:8b:
1d:7d:29:60:35:c0:cc:7a:74:8c:ad:b1:dc:9d:12:93:47:e4:
8f:89:bf:8d:22:cb:04:c4:3d:91:19:09:56:30:aa:d4:53:85:
6b:8b:ee:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:51:18 2025 by rpki-client