Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e350a3-2987-43f9-9c3b-c0449a380c94/1/rY_w9RFuX2BJ3qI870x3_zzHzs4.mft
File: rY_w9RFuX2BJ3qI870x3_zzHzs4.mft (raw, json)
Hash identifier: fIvWKtuu9X6VnCTcKQOyCYOrmeYyYYnykuWrAON6FpU=
Subject key identifier: 64:DB:24:71:5B:B4:B6:29:B0:ED:6C:A8:BE:41:8E:94:5A:91:44:33
Authority key identifier: AD:8F:F0:F5:11:6E:5F:60:49:DE:A2:3C:EF:4C:77:FF:3C:C7:CE:CE
Certificate issuer: /CN=ad8ff0f5116e5f6049dea23cef4c77ff3cc7cece
Certificate serial: 06819303
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rY_w9RFuX2BJ3qI870x3_zzHzs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e350a3-2987-43f9-9c3b-c0449a380c94/1/rY_w9RFuX2BJ3qI870x3_zzHzs4.mft
Manifest number: 0893
Signing time: Thu 24 Mar 2022 11:10:24 +0000
Manifest this update: Thu 24 Mar 2022 11:10:24 +0000
Manifest next update: Fri 25 Mar 2022 11:10:24 +0000
Files and hashes: 1: 1O4mgWgQV9P0ifE1ljACcIFzXVI.roa (hash: VR/h8U37F+1AkgN7lonulMfjKNtWCLnHsBgbB8/iqVA=)
2: rY_w9RFuX2BJ3qI870x3_zzHzs4.crl (hash: oDxctf/PTQo0aryy8T+QCcIciXzGioUsI96tc2HxLGI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 109155075 (0x6819303)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad8ff0f5116e5f6049dea23cef4c77ff3cc7cece
Validity
Not Before: Mar 24 11:10:24 2022 GMT
Not After : Mar 25 11:10:24 2022 GMT
Subject: CN=64db24715bb4b629b0ed6ca8be418e945a914433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:bb:36:54:14:a8:3f:ac:38:9d:0e:1a:c4:55:
75:7d:7c:a2:67:ba:b2:97:d9:a2:73:12:f4:44:d1:
88:12:89:66:27:3e:60:e3:69:de:96:ef:62:96:b8:
b6:d0:1d:78:47:25:ce:6f:4c:be:d8:32:6f:ba:fe:
cd:a4:24:f9:c6:b7:d6:45:9b:57:ac:8a:e2:30:3b:
d9:7a:df:f5:71:b2:97:75:fa:d4:25:3c:2e:f2:bc:
16:f9:37:30:17:9e:8d:3e:bb:57:4e:09:54:59:bd:
6e:5c:f8:dd:83:88:c9:0c:b4:ef:02:dc:e4:11:fe:
33:f8:d3:d7:71:85:5c:63:f0:41:a4:08:51:77:ee:
cc:06:ad:0e:cf:da:7a:3c:ee:07:bb:11:65:41:ef:
88:ee:c7:de:4d:dd:99:ab:b3:9a:f3:0b:7e:fa:b0:
cb:1b:cf:33:77:1f:ef:91:dc:e8:1d:31:9d:44:80:
ec:a4:f0:80:66:cc:33:b6:71:65:ce:21:10:ad:a0:
b6:0c:59:49:76:01:b4:33:ae:ab:e4:4c:2c:80:14:
fb:18:20:68:95:87:49:db:95:f2:7f:2f:d9:c9:ff:
e9:29:51:68:6e:a1:45:f9:6c:3f:7f:1b:12:94:7a:
06:3a:c0:41:40:d0:c4:c0:e7:3e:49:4a:7d:0d:a6:
d8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DB:24:71:5B:B4:B6:29:B0:ED:6C:A8:BE:41:8E:94:5A:91:44:33
X509v3 Authority Key Identifier:
keyid:AD:8F:F0:F5:11:6E:5F:60:49:DE:A2:3C:EF:4C:77:FF:3C:C7:CE:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rY_w9RFuX2BJ3qI870x3_zzHzs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e350a3-2987-43f9-9c3b-c0449a380c94/1/rY_w9RFuX2BJ3qI870x3_zzHzs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e350a3-2987-43f9-9c3b-c0449a380c94/1/rY_w9RFuX2BJ3qI870x3_zzHzs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:17:34:bc:40:db:8f:0c:2d:c5:1e:df:84:ee:af:c7:e4:04:
2d:76:6a:d0:56:97:86:90:ae:10:97:3c:e4:5c:d1:a5:79:7a:
c6:e0:89:1f:88:4c:8d:7e:e6:2f:7f:7d:8b:ea:c5:5d:b7:94:
04:0f:fc:47:10:b9:c8:75:46:cf:64:61:ca:54:84:0a:5e:dd:
0c:16:fa:1d:34:c8:f4:6a:46:45:be:d6:aa:8b:1a:03:0b:21:
c5:79:45:87:ba:22:85:f0:a9:97:47:09:ba:a6:5d:e7:7b:cc:
95:04:e1:13:ed:f1:3f:ac:2a:d8:f7:86:20:34:91:0f:d4:bc:
b3:53:84:73:5f:95:23:24:0e:52:7f:f4:ae:38:a7:a8:20:46:
fc:89:6d:0f:1c:63:10:23:c6:fd:a4:1f:0b:d3:a5:62:62:8d:
e2:9e:03:b4:c0:30:23:86:f9:b5:aa:06:b5:b0:db:12:c3:a1:
3d:94:e1:9e:9b:cb:2c:26:90:66:3e:bc:b9:3c:a8:4c:80:6e:
63:b2:3b:15:32:e9:07:c3:b9:1e:68:57:57:e9:5b:73:87:bf:
08:9f:83:90:36:2f:90:7f:71:3a:28:e0:ee:67:0d:38:cc:77:
89:c9:4a:80:6f:27:2a:74:49:54:0c:b5:72:7f:82:56:07:e0:
c6:1f:04:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:39:01 2025 by rpki-client