Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
File: 2YhPkq_rWP-rJkh7IyBf4NXaip8.mft (raw, json)
Hash identifier: peK/eoF1hUx43T2zzg/+pOVluE1wMG+VGds/wqH93o4=
Subject key identifier: F0:DF:AD:F2:39:79:02:C8:12:23:30:2F:07:FE:E9:B3:68:83:FE:50
Authority key identifier: D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
Certificate issuer: /CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Certificate serial: 0194BD4E5F9C8D20D95B474A4AA68A7F88DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
Manifest number: 0D0E
Signing time: Fri 31 Jan 2025 17:00:17 +0000
Manifest this update: Fri 31 Jan 2025 17:00:17 +0000
Manifest next update: Sat 01 Feb 2025 17:00:17 +0000
Files and hashes: 1: 2YhPkq_rWP-rJkh7IyBf4NXaip8.crl (hash: POicWp+YKoWTs2cFTL3xxNzUoqjtcCYy4LclVnfQM1s=)
2: CYLgyzMsYi7lgn_Q5Gp7OFp3YLo.roa (hash: KpU4uZLnHzH71nuh4tR8vuJUqVXwmRrydoVr8tnF92Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:5f:9c:8d:20:d9:5b:47:4a:4a:a6:8a:7f:88:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d9884f92afeb58ffab26487b23205fe0d5da8a9f
Validity
Not Before: Jan 31 17:00:17 2025 GMT
Not After : Feb 1 17:00:17 2025 GMT
Subject: CN=f0dfadf2397902c81223302f07fee9b36883fe50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b2:75:9a:ca:b3:98:0f:8a:d9:2c:89:2d:c5:
1f:ab:55:a7:e3:7d:3c:64:84:67:9f:d0:db:b4:db:
c3:fb:78:88:f3:1b:4f:40:54:2b:90:35:34:d3:e6:
af:9b:58:ca:4e:4d:91:27:df:15:75:02:bc:df:3d:
77:fe:28:4b:3f:f2:7f:f9:d4:11:5b:09:da:e3:fc:
a7:2a:cc:cf:6a:35:f3:30:76:6c:10:bb:aa:65:b0:
94:39:cb:6a:44:04:1f:1e:85:e4:3f:56:47:70:51:
a5:73:a2:2b:60:5f:79:66:61:a5:aa:08:54:df:44:
ce:97:d4:4c:a9:a0:00:55:f9:4e:c3:14:d0:a6:5b:
4d:ae:d6:0c:c7:85:ae:6e:20:ee:3d:24:35:cc:e9:
63:3e:be:f3:3f:99:f4:bd:ae:d3:2d:2b:04:69:04:
bf:a6:56:9c:80:5a:49:70:17:16:60:7d:80:3a:fc:
7c:b9:cd:3e:a3:17:33:5a:f8:5d:06:87:ed:9a:33:
68:41:09:67:42:17:92:cc:6a:1e:92:4c:2a:1e:14:
61:a9:fb:8d:48:05:d1:87:36:0b:dd:45:3e:4b:53:
ed:33:f6:e3:bf:83:b1:ce:b9:a5:f4:26:3e:6f:0a:
ed:42:f8:16:41:02:11:b2:ef:a4:da:5e:17:ad:a2:
a4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:DF:AD:F2:39:79:02:C8:12:23:30:2F:07:FE:E9:B3:68:83:FE:50
X509v3 Authority Key Identifier:
keyid:D9:88:4F:92:AF:EB:58:FF:AB:26:48:7B:23:20:5F:E0:D5:DA:8A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YhPkq_rWP-rJkh7IyBf4NXaip8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/7cc3f8-008b-407c-beef-76533245f2be/1/2YhPkq_rWP-rJkh7IyBf4NXaip8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:aa:81:f5:17:7a:ac:60:c6:d6:27:15:f6:94:c0:a7:74:4f:
b8:30:3c:0c:6f:f8:50:7e:7c:a1:63:9d:87:1d:4f:62:de:d9:
01:e0:99:1a:6f:48:49:d1:14:6b:9b:f3:4d:0b:a0:3a:1c:c4:
58:06:9f:e6:d9:af:11:ec:38:db:f3:65:27:66:db:33:e6:de:
87:31:34:aa:be:8b:14:5f:51:7d:77:1a:d6:d4:d7:40:0c:35:
9b:c7:65:d6:ac:f8:ff:2e:10:7a:da:94:b3:c4:6a:80:57:57:
f7:c3:09:3f:46:5d:9a:37:38:91:8e:6a:92:7b:02:35:72:4c:
86:5d:f0:27:43:67:d6:ec:12:a9:22:00:70:58:a4:e6:b4:0b:
25:4f:fa:c0:04:d7:8a:88:56:54:76:c2:5e:e7:d6:08:11:3c:
88:df:1d:ca:bc:94:c2:25:af:a8:e4:a2:f1:04:42:ff:31:64:
55:25:23:be:08:25:50:0f:8e:e8:0e:9f:15:b0:11:1a:57:e2:
25:64:da:b2:3f:76:70:d9:a2:32:09:cf:6b:49:27:b6:67:8c:
6c:11:b8:0a:3f:1e:d0:f8:2d:29:33:84:16:d9:bc:18:7b:41:
58:de:2b:e2:b1:fa:8c:b3:10:9b:b5:6a:5a:a3:ae:02:bf:cd:
d1:25:40:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:25:16 2025 by rpki-client