Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
File: wYXXJDrphs3khBTmrYHyIpwKV9g.mft (raw, json)
Hash identifier: 1uPvqtpBj7+7fx3gdfXWjNfLGTozP3Sz/VKUP2uz77I=
Subject key identifier: 33:35:FD:11:8E:B8:EF:FC:8D:04:A1:E6:F7:D1:D7:2E:17:22:4E:7D
Authority key identifier: C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
Certificate issuer: /CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Certificate serial: 0194BBCE7DD3978EE7E22CA579747AE6E995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
Manifest number: 1380
Signing time: Fri 31 Jan 2025 10:00:59 +0000
Manifest this update: Fri 31 Jan 2025 10:00:59 +0000
Manifest next update: Sat 01 Feb 2025 10:00:59 +0000
Files and hashes: 1: W8cSUwyXIXnz6M1NsyKlwsJXzJ4.roa (hash: rZPkwf4eFRkmaVkGU+tJg15LkBGz0xTeLhl3l0qmLag=)
2: wYXXJDrphs3khBTmrYHyIpwKV9g.crl (hash: zKiJRxRfDGeNu8wuYjdmxJrwVsWhPQzJcgnCKD4DOE4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:7d:d3:97:8e:e7:e2:2c:a5:79:74:7a:e6:e9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c185d7243ae986cde48414e6ad81f2229c0a57d8
Validity
Not Before: Jan 31 10:00:59 2025 GMT
Not After : Feb 1 10:00:59 2025 GMT
Subject: CN=3335fd118eb8effc8d04a1e6f7d1d72e17224e7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:f9:22:61:f1:c7:7a:a7:56:67:63:f4:a9:34:
8e:2c:15:25:c6:3e:d4:ab:b4:14:7f:fd:28:be:9b:
8e:a4:c6:ce:ce:fd:dd:f8:c6:59:cd:35:12:5b:4f:
83:ec:a5:53:66:fe:5a:f1:3d:a1:63:a0:d2:3f:e7:
f2:da:67:ea:01:f9:b3:2e:db:f4:bd:bf:4c:84:d4:
a5:61:6a:9a:f5:63:ee:ed:f1:e2:00:4d:df:34:37:
1a:c3:f8:53:3d:dc:70:39:a2:e8:4a:e2:5c:fa:ba:
b1:1f:10:83:d2:7e:e5:29:0e:f0:02:ad:aa:90:b4:
72:76:ee:76:b8:87:1e:e3:4f:9f:72:1e:01:2a:36:
eb:9e:3a:d1:eb:4b:99:9c:c7:ba:b8:2e:2c:45:81:
ef:7a:75:ed:26:70:53:71:d4:fb:54:db:04:e4:71:
51:0a:9d:91:fa:ea:2c:44:25:97:31:c5:4b:62:5c:
9d:90:13:0f:79:e2:99:d5:60:79:37:8f:14:c6:55:
5b:6e:ce:11:e0:60:62:0d:db:55:7c:80:c4:2c:b8:
31:69:c7:56:cb:b5:5e:8b:ff:65:50:4c:69:83:38:
a4:37:39:e2:a2:0a:56:3d:81:fc:6c:33:bb:1f:37:
96:94:9c:cf:68:1a:82:cf:a4:7a:fb:42:d4:19:d6:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:35:FD:11:8E:B8:EF:FC:8D:04:A1:E6:F7:D1:D7:2E:17:22:4E:7D
X509v3 Authority Key Identifier:
keyid:C1:85:D7:24:3A:E9:86:CD:E4:84:14:E6:AD:81:F2:22:9C:0A:57:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wYXXJDrphs3khBTmrYHyIpwKV9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc392a-6a3e-4da5-b7b9-a7edb7d3f537/1/wYXXJDrphs3khBTmrYHyIpwKV9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:b9:91:3e:b1:ff:e4:51:24:08:05:ef:b7:a3:5c:bd:0d:2d:
1c:3f:38:80:b4:1f:9d:eb:ef:bf:98:9d:1f:ce:bd:6f:e7:ba:
91:93:ec:3f:a5:1b:0f:71:76:9e:44:c0:3e:60:0c:5b:7b:20:
f6:0a:ea:10:d0:0c:42:2e:55:fc:80:2e:e6:78:77:bd:89:c7:
c4:2e:fa:bd:ed:a7:9b:a7:36:bc:a2:90:bd:f9:a8:ae:aa:07:
94:07:3c:f5:49:32:5e:1c:46:ff:17:1f:a6:f3:48:48:ef:4e:
ee:6d:75:9b:9e:58:7d:af:0c:95:43:0a:1a:58:bc:80:90:a9:
fb:47:d3:6b:d5:15:8a:db:93:b4:a7:76:93:e7:58:1e:56:45:
d4:57:1c:61:66:24:99:53:be:f4:fe:9d:29:a1:d7:e3:6c:82:
ea:da:a8:50:c1:cb:f8:0f:ac:3e:b4:19:56:bb:5b:21:10:dc:
d7:3b:fc:14:49:63:0b:ab:97:fb:bd:6f:f4:d7:b1:90:6f:52:
e8:26:89:2a:0f:3a:e3:8a:72:5c:8c:f1:df:af:80:74:c4:ad:
0d:95:99:cf:ee:e4:ab:7b:f0:ad:db:90:48:35:3e:94:b6:2a:
33:1e:5b:af:85:93:2b:c7:02:cb:d6:b0:f1:7c:dd:87:5f:ae:
0e:7d:c6:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:47:08 2025 by rpki-client