Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
File: vY-cA-dX89tRTKONFa2kUfoulhU.mft (raw, json)
Hash identifier: IQemfVUiBATQ0ffV64AG8V3/YkQc3owRB97mcyLhacM=
Subject key identifier: 5C:A7:20:F7:1B:8B:3D:83:6D:00:9A:F5:68:59:9B:4E:4A:0E:27:83
Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
Certificate issuer: /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Certificate serial: 0194BD4E810225C04D0F11F60A2FA272398D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
Manifest number: 07A0
Signing time: Fri 31 Jan 2025 17:00:26 +0000
Manifest this update: Fri 31 Jan 2025 17:00:26 +0000
Manifest next update: Sat 01 Feb 2025 17:00:26 +0000
Files and hashes: 1: CKcxnnd19wN0dY_tJv81hrxqU-4.roa (hash: Jigb3Y01l+fMYMW0ZZB5oBdO1NKLRrYbvCaXnAo+wkY=)
2: t5V-1w-s-rvBgb3wq2ZSKMwJCs0.roa (hash: 0NfSlFcI3MTsg3tU/1EBreDuvvrgFnFan39Sv/glqLM=)
3: usukqM3IhyDYNnttlGzr4GMalbM.roa (hash: AmN91z8j0spH0QCHEMiU2dfIQz38pEXTN+9Bqls+dfE=)
4: vY-cA-dX89tRTKONFa2kUfoulhU.crl (hash: pIVHYg03Qet1T2LbR+RFNOfttLTiL9us9cqT7/F8UZc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:81:02:25:c0:4d:0f:11:f6:0a:2f:a2:72:39:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Validity
Not Before: Jan 31 17:00:26 2025 GMT
Not After : Feb 1 17:00:26 2025 GMT
Subject: CN=5ca720f71b8b3d836d009af568599b4e4a0e2783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:da:9c:9f:23:bc:5a:b1:09:87:e5:dc:95:
a5:22:c5:fa:68:02:85:be:53:94:6e:48:55:19:8c:
2c:2f:ce:7f:c1:0a:47:30:9b:5e:e3:d7:1d:dd:5e:
c1:47:75:14:1a:f3:87:e3:a5:6e:23:38:26:55:29:
ff:bf:8c:e6:a1:a2:5d:19:60:79:0e:52:9b:06:6f:
10:45:d7:67:c8:d5:af:56:c2:6a:54:df:60:26:99:
f8:a3:34:ed:73:83:3f:bb:60:8d:3f:03:fc:00:52:
77:4e:d3:72:02:ee:7e:2e:9a:20:d3:bc:6e:75:67:
a2:fe:2e:41:52:97:11:2a:70:12:00:f6:68:12:c1:
6f:93:30:df:3d:f8:27:41:cf:32:a1:08:51:3e:e8:
63:9e:aa:02:5b:d0:17:6f:da:1f:48:da:8c:cd:91:
cc:ca:3a:11:8c:db:a6:bb:6d:fc:80:bb:ee:73:61:
5b:bd:90:3e:23:ae:20:11:44:77:a8:60:7c:4a:36:
29:27:c9:c5:30:0e:fe:bb:c5:2f:d9:d9:d4:d0:2d:
42:bc:50:b8:32:ae:b5:65:d0:79:0d:64:62:bf:cb:
5f:19:87:bc:27:8f:bd:89:52:21:47:fa:5a:74:f3:
3a:d8:c8:49:b4:c6:d5:ff:e1:8c:5a:1b:7f:7e:e8:
19:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A7:20:F7:1B:8B:3D:83:6D:00:9A:F5:68:59:9B:4E:4A:0E:27:83
X509v3 Authority Key Identifier:
keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:53:3f:6a:d2:2e:ec:da:ed:4e:80:2d:0d:5c:7d:06:6d:51:
79:27:87:fb:69:51:87:3a:06:ed:e2:62:4b:ce:1d:34:1d:80:
d1:d0:eb:e5:bd:5d:57:c5:5f:a6:13:cb:4a:dc:12:11:fe:f7:
56:24:33:73:1a:03:48:39:e7:8e:ac:92:e0:ab:6f:da:ed:c8:
39:1f:ee:e5:51:12:7f:74:8c:ec:87:99:0f:81:cb:71:c1:d4:
5a:20:d1:96:3c:5e:97:75:79:e2:4b:54:52:a0:12:01:1f:b9:
30:d7:f6:27:21:cd:4b:42:ba:d8:92:a5:ea:31:e6:a1:ce:bd:
b7:10:4a:1a:e2:14:47:c5:be:4c:ff:54:d4:1a:00:5a:be:15:
e9:a1:d0:b6:18:bc:7f:10:cd:9f:48:dc:b1:ab:9d:4e:0e:1b:
2b:f2:2b:84:d6:d2:37:51:f7:ac:9d:60:33:c2:6c:87:ee:b9:
3e:0f:83:55:8d:ea:e6:70:94:0b:50:63:53:fe:48:0a:31:8a:
52:cc:c4:fb:7e:0e:f9:7e:17:d2:45:e4:e0:e8:3a:1a:f2:82:
a0:9e:af:99:a4:aa:85:13:13:13:4a:18:cb:7b:4e:dc:00:0c:
35:29:bd:47:32:a8:0b:00:27:b9:ad:d1:55:2f:f5:40:0a:9f:
c3:eb:86:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:01:53 2025 by rpki-client