Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
File: AyTbHc8MJCnhIVFq4nkvwyU_07o.mft (raw, json)
Hash identifier: LW3i5VT30dzpC3Q+7gANtqLuIIrcCjzTMbpmSlGYoMs=
Subject key identifier: BE:97:4A:21:6C:1C:84:65:35:FB:08:CF:64:11:E5:C5:31:54:FB:8C
Authority key identifier: 03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
Certificate issuer: /CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Certificate serial: 0195E0EB0E7D8EC78B484DEECFD6556E84FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
Manifest number: 0597
Signing time: Sat 29 Mar 2025 08:00:55 +0000
Manifest this update: Sat 29 Mar 2025 08:00:55 +0000
Manifest next update: Sun 30 Mar 2025 08:00:55 +0000
Files and hashes: 1: 8SJ_LBREWOMigQGrbOSpoED6efU.roa (hash: 62y0nmOlXA0+Z/ArGW7+jXU+JPJ93QdKSCA9WPq34/4=)
2: AyTbHc8MJCnhIVFq4nkvwyU_07o.crl (hash: ZHvLAqVMsxS10tUW3qx29FCvEbw3qoijnOJr7dqRqWY=)
3: U0IdBWYUAnp0C9MJKk4Ai4LhTpg.roa (hash: VJHg2FjO1KvYj0CDyJtHwAwOQG4SNpGAsdsq9czAkJA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:e0:eb:0e:7d:8e:c7:8b:48:4d:ee:cf:d6:55:6e:84:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0324db1dcf0c2429e121516ae2792fc3253fd3ba
Validity
Not Before: Mar 29 08:00:55 2025 GMT
Not After : Mar 30 08:00:55 2025 GMT
Subject: CN=be974a216c1c846535fb08cf6411e5c53154fb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:10:4c:cc:bd:39:8c:86:ec:a2:bd:83:79:6c:
33:e9:ea:0e:1b:ab:d3:f4:c1:35:64:cb:6c:be:55:
66:5b:90:ce:f5:50:fb:9b:9f:5c:3c:09:55:ad:a3:
79:c0:e0:36:fd:33:49:37:27:ba:65:7e:6c:55:da:
fd:b8:c9:4a:e6:30:ea:37:e8:75:b4:b2:b9:25:96:
97:0c:7c:aa:9c:04:49:ae:82:2c:a5:81:66:91:9d:
2c:a4:e3:af:62:fc:5e:39:17:5c:8c:fa:42:be:da:
df:1e:a1:8b:a4:b1:69:2d:37:cf:29:48:20:ca:81:
a6:87:12:59:37:3c:d3:4a:ad:5d:00:0c:9d:ac:4c:
6f:4f:24:b3:65:66:86:a9:8d:f6:62:c2:f1:6f:60:
66:a5:a5:3d:58:1a:db:14:46:6d:45:cb:42:1b:dc:
8a:cb:c7:f2:50:41:60:d6:3b:90:5a:71:84:d8:53:
9e:27:3d:ce:9b:97:84:42:f0:9d:08:09:46:73:71:
84:19:12:08:96:1e:b3:64:19:fa:41:79:a1:2f:86:
ff:79:eb:da:c1:61:2a:dd:9a:93:a9:51:ff:58:55:
32:49:b4:dd:fd:48:42:b1:06:1d:f4:d2:4b:c1:91:
b0:e0:bf:6e:5b:b4:fb:bb:ef:5b:bc:1c:75:fd:51:
ae:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:97:4A:21:6C:1C:84:65:35:FB:08:CF:64:11:E5:C5:31:54:FB:8C
X509v3 Authority Key Identifier:
keyid:03:24:DB:1D:CF:0C:24:29:E1:21:51:6A:E2:79:2F:C3:25:3F:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AyTbHc8MJCnhIVFq4nkvwyU_07o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/90f942-6511-4054-94be-4d2c4da721d4/1/AyTbHc8MJCnhIVFq4nkvwyU_07o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:c3:71:da:d2:28:db:eb:13:af:f7:1d:5b:29:ad:a8:c5:66:
74:50:13:98:de:0f:2f:32:ff:eb:98:ff:7f:0b:d0:c5:64:06:
5d:08:16:f6:54:a0:75:69:c2:b4:76:38:85:01:d2:3c:8a:09:
ec:f7:89:72:5e:a3:6e:81:8f:3d:2d:5a:58:0b:fb:22:42:e8:
6c:39:57:2b:c1:f5:c2:90:e1:b7:a9:3c:61:e4:82:6f:5e:57:
67:94:b7:1c:d7:de:33:80:f7:d8:ab:16:58:c4:13:ca:9a:ea:
e1:47:0d:49:1a:79:f5:36:5a:59:8c:0c:3d:a6:94:31:97:2b:
44:18:46:79:97:9e:c7:7a:9f:5f:a2:22:59:51:77:09:02:3a:
01:0d:f1:c7:d1:03:db:e5:80:48:56:c5:d8:4f:20:f3:df:16:
93:c7:44:e8:2b:98:d2:1d:da:83:62:12:5f:3e:3c:d1:bf:18:
09:9d:ca:f6:20:9d:6f:1f:e7:c8:cf:38:bc:76:fd:9c:95:a4:
a4:6f:a1:59:52:79:e5:02:07:f7:70:45:16:56:be:9a:70:e7:
9a:84:9e:85:27:58:a4:d9:63:c5:96:ab:f1:e9:04:b8:ad:fd:
ed:70:76:e3:18:ac:d3:a9:1b:b5:e5:7c:37:a3:3f:96:8e:df:
72:a7:99:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:42 2025 by rpki-client