Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
File: Y2NsO-9V0SpkU2twEwp09T9E1tA.mft (raw, json)
Hash identifier: Kacw6g22uIc75i6yQIsLHMZUSWC+coPxJ5mxQMjmBGc=
Subject key identifier: 46:3B:BF:7B:DF:62:D4:9C:7A:DB:0B:F9:43:77:D7:F3:FD:18:86:2F
Authority key identifier: 63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
Certificate issuer: /CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Certificate serial: 0194BD4E4749C71D41FB773B9FAA31F64231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
Manifest number: 0614
Signing time: Fri 31 Jan 2025 17:00:11 +0000
Manifest this update: Fri 31 Jan 2025 17:00:11 +0000
Manifest next update: Sat 01 Feb 2025 17:00:11 +0000
Files and hashes: 1: DtOZa_QnwbfCZcw6Ri25L5g5nKw.roa (hash: gPjF2bHK3b5JRNcNAuMcqGVmU2CAaScFraaS80Iy5UA=)
2: Y2NsO-9V0SpkU2twEwp09T9E1tA.crl (hash: tp9DmMVx+XcUW0fBEQxXKED+2hz705iTJ/Ghs+9W+mI=)
3: e9Z_8CtChGt4iClYaH_YgcqeT1k.roa (hash: 2K2jsaRk3MeR/R/Hwsml8Lc+ehwc8rBqNjGIvU2lgG0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:47:49:c7:1d:41:fb:77:3b:9f:aa:31:f6:42:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63636c3bef55d12a64536b70130a74f53f44d6d0
Validity
Not Before: Jan 31 17:00:11 2025 GMT
Not After : Feb 1 17:00:11 2025 GMT
Subject: CN=463bbf7bdf62d49c7adb0bf94377d7f3fd18862f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:08:29:0b:55:16:a4:a4:46:3b:3a:19:93:62:
e1:2c:8f:55:5e:fe:59:65:a9:5c:2e:f0:46:78:7e:
b4:da:03:79:40:0b:26:87:69:e8:f5:a2:52:61:50:
6e:ff:6d:d9:15:2d:b4:86:1f:a6:82:2d:30:ab:61:
c3:0e:a8:5f:71:9d:bf:a3:af:b3:3f:d2:cf:52:75:
16:a8:04:30:19:59:07:3f:5a:aa:8d:fd:ce:08:bc:
d6:e3:83:5e:07:68:a8:51:79:57:54:dc:8d:78:50:
2c:58:35:1f:29:da:e3:36:cd:dd:21:c9:e9:51:75:
3d:17:b6:5c:9e:d7:3a:f2:0d:d6:54:ad:3b:d9:27:
38:d0:c6:78:a8:5c:6c:9c:a2:41:99:da:3e:dc:c5:
7d:05:23:56:97:4a:a5:cf:04:69:eb:7a:0c:39:a0:
e0:79:20:16:30:91:75:b5:7c:0f:d1:a1:b9:45:0e:
35:6a:ad:3c:86:a6:dc:d5:9e:be:d9:44:a1:20:02:
a9:14:24:b7:be:15:98:d4:a5:df:30:e3:61:35:33:
a1:4a:aa:32:b2:84:2c:35:c8:4d:82:18:7c:99:0b:
98:00:04:1c:76:25:a8:16:9c:cd:37:02:bc:7c:f1:
d5:92:64:84:32:8d:86:2b:d7:a7:b8:59:ef:72:6e:
b9:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3B:BF:7B:DF:62:D4:9C:7A:DB:0B:F9:43:77:D7:F3:FD:18:86:2F
X509v3 Authority Key Identifier:
keyid:63:63:6C:3B:EF:55:D1:2A:64:53:6B:70:13:0A:74:F5:3F:44:D6:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2NsO-9V0SpkU2twEwp09T9E1tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/a564e9-3a4e-4d4a-807d-7055c2e0476f/1/Y2NsO-9V0SpkU2twEwp09T9E1tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:1c:ac:0d:d1:f1:87:23:85:be:89:41:b3:3c:36:67:60:a1:
8e:30:04:78:13:20:a2:25:e6:a7:06:c4:91:c9:c5:97:40:1f:
08:c1:97:b4:e5:2c:ed:e2:06:1f:07:42:8e:8b:cc:a1:89:93:
dd:32:69:d9:b6:a6:27:f3:34:32:71:1b:e9:26:15:48:2b:96:
52:9c:97:63:44:1d:d5:f2:4d:f2:a7:0b:a7:ee:b8:45:77:d5:
38:c3:a6:17:da:2b:b6:c7:37:d1:f4:28:ac:c4:f7:7a:7f:8b:
8f:dd:c7:a6:98:9d:42:de:5b:83:a4:f6:a8:52:53:e3:36:0a:
a6:16:e3:c8:91:98:b6:42:a5:fa:43:e4:4f:d5:6b:98:d4:bd:
00:29:39:78:e7:df:d3:57:17:54:1e:23:f0:eb:d6:94:2c:fa:
5f:ce:31:c8:d2:68:30:3c:bf:01:9f:68:41:22:88:cb:c3:c3:
1e:b5:1b:1d:3b:df:f6:a4:ec:f8:5b:73:ea:cd:5a:17:0e:27:
d0:b3:4d:3a:33:a1:8c:32:0b:55:63:d8:b4:42:ee:2e:8c:e7:
3c:e0:fa:1d:57:e8:04:57:f1:64:cb:e5:6d:e6:13:d7:34:96:
a7:c4:43:02:b6:c2:0e:37:b0:d1:2b:30:d4:5d:b8:e2:df:09:
9e:60:ba:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:04:22 2025 by rpki-client