Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
File: ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft (raw, json)
Hash identifier: UjQZ1obzUdYuoZHYbGvFj9Q0xTQpXt7iKyJlDiq+tGk=
Subject key identifier: 37:EE:BB:3A:C5:4E:2F:D4:79:B4:80:17:4B:87:93:88:29:59:9F:5E
Authority key identifier: C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
Certificate issuer: /CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Certificate serial: 0194BD85862AA604BA40134BE6CEA0D75AA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
Manifest number: 063C
Signing time: Fri 31 Jan 2025 18:00:31 +0000
Manifest this update: Fri 31 Jan 2025 18:00:31 +0000
Manifest next update: Sat 01 Feb 2025 18:00:31 +0000
Files and hashes: 1: XYTo8--GaI1zkSFfPzeY28AGPAA.roa (hash: +j8BMCXGsEgMrKyj3p7HthT9rpdHovUFyUwoGx0hCGc=)
2: _3URjmHxdeAClYJBPx5hMe6tQL4.roa (hash: Wn6zQOVZOy90FA4ddqwzS9m8fIclPh7APysxlSvJycw=)
3: ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl (hash: 44C9ZNdkhuyD+VH2U9AxdJtXSUNLquYKigkKD08h8qE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:86:2a:a6:04:ba:40:13:4b:e6:ce:a0:d7:5a:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9d11b707878bd77fbff15f27752c08a4aa556f4
Validity
Not Before: Jan 31 18:00:31 2025 GMT
Not After : Feb 1 18:00:31 2025 GMT
Subject: CN=37eebb3ac54e2fd479b480174b87938829599f5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:cf:31:45:be:94:e3:a8:a5:89:dc:8d:b2:da:
00:7d:f1:90:1b:1e:70:b0:71:74:97:3c:b7:48:96:
71:c4:d9:d3:e0:d7:48:9c:57:b2:d7:18:18:1f:60:
e0:34:4b:8f:37:77:f2:8b:b2:b9:70:85:7e:1f:54:
e8:33:10:91:97:1d:14:54:a6:c2:0c:97:4f:b8:98:
4a:51:b9:8d:b0:c5:ef:69:3d:fe:81:6a:b0:32:94:
4e:b7:08:f9:4b:ee:13:ca:72:7b:04:21:24:e4:29:
91:6e:59:cd:4b:c5:30:a1:10:b6:17:1d:0e:fa:7f:
24:16:5d:06:0f:5c:12:51:c4:02:9d:f6:19:ba:9f:
1b:57:56:4d:38:82:3c:0d:90:80:f6:bf:e3:5d:7a:
5b:bd:af:e3:d5:a8:01:c0:f2:96:6f:b9:51:2d:45:
81:c5:43:ea:32:d2:8c:86:73:35:c9:02:ee:10:2e:
ac:d9:46:fc:29:45:48:8a:1d:0c:5e:ea:85:01:35:
b8:fa:09:40:ef:b8:d2:fb:c2:a6:2a:74:b1:35:7c:
c0:78:0a:ee:82:cd:eb:e1:7e:ca:0d:11:53:f9:af:
55:40:1c:c9:0b:3e:85:48:c0:1c:9f:9d:61:25:2e:
ac:07:ce:ce:c1:b5:4a:e4:4e:0f:fb:c7:e3:00:66:
1a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:EE:BB:3A:C5:4E:2F:D4:79:B4:80:17:4B:87:93:88:29:59:9F:5E
X509v3 Authority Key Identifier:
keyid:C9:D1:1B:70:78:78:BD:77:FB:FF:15:F2:77:52:C0:8A:4A:A5:56:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ydEbcHh4vXf7_xXyd1LAikqlVvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/dcddfa-a059-4ff0-a809-5eabfb1e5130/1/ydEbcHh4vXf7_xXyd1LAikqlVvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:ef:c2:5d:d6:97:14:9e:41:8a:bc:87:8c:41:a6:93:6a:b7:
4f:d4:f3:c9:c0:74:5a:cd:99:3f:0b:8b:7b:06:c5:e3:49:75:
a3:1b:f9:c1:52:c0:1a:30:34:57:c3:ad:6c:d2:8f:31:04:64:
de:ec:e6:e2:cc:78:ff:b0:b1:69:ab:3c:58:2c:b8:be:9a:b7:
2b:d0:c3:b6:1e:1c:7b:1c:53:14:53:43:0f:59:89:b0:14:8a:
2c:1a:21:a0:a7:3a:a6:7a:1e:34:17:37:4d:64:9e:28:ca:f8:
44:8b:93:12:62:5b:e5:69:58:c6:2b:6f:4c:5a:20:c7:d9:7b:
fe:54:d5:87:08:92:dd:3b:60:4e:aa:70:d0:8f:2d:1a:18:7c:
92:d5:51:e8:af:97:3c:70:f8:47:16:46:03:b9:f1:54:06:88:
01:74:8c:a1:b4:7c:03:e5:7a:18:61:c8:22:c1:0f:43:6f:0c:
e9:6b:fa:06:26:d2:ac:34:cf:79:79:8c:fb:a7:45:ee:05:a8:
7f:70:ac:11:26:c8:39:e7:54:db:82:1e:a1:cd:03:19:71:d8:
4d:a3:5c:70:1f:39:eb:2b:e6:d1:01:96:60:17:5e:51:4e:52:
a8:c1:f9:cc:ee:f6:19:ce:3d:53:b1:70:e6:33:89:71:8f:6d:
7b:bb:88:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:35:19 2025 by rpki-client