Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
File: SYeUHnTBwD56ujuHhTAJXrb6h04.mft (raw, json)
Hash identifier: 6E3b4RBkQnzS0NWCasH+9kHBB4zK+ld+oQTZx+s/+KA=
Subject key identifier: C6:5B:F7:FB:00:CA:9C:DB:FC:33:AF:72:5F:1D:FF:FC:A0:7A:0D:87
Authority key identifier: 49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
Certificate issuer: /CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Certificate serial: 0195DFD8F2347BF709CB656E208DD1BED78D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
Manifest number: 0917
Signing time: Sat 29 Mar 2025 03:01:31 +0000
Manifest this update: Sat 29 Mar 2025 03:01:31 +0000
Manifest next update: Sun 30 Mar 2025 03:01:31 +0000
Files and hashes: 1: MjbQUPMNLIheZBDkrI8N0W9Uzh8.roa (hash: 4Iv06Vc4XP2DcLEHGwIUaAZcm9hUIsAMlBV/dIzvxtA=)
2: SYeUHnTBwD56ujuHhTAJXrb6h04.crl (hash: 9f6xn9Zvb1b4t6IGBqCr+93tdofgy1n5l6zF7ci/eTc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d8:f2:34:7b:f7:09:cb:65:6e:20:8d:d1:be:d7:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4987941e74c1c03e7aba3b878530095eb6fa874e
Validity
Not Before: Mar 29 03:01:31 2025 GMT
Not After : Mar 30 03:01:31 2025 GMT
Subject: CN=c65bf7fb00ca9cdbfc33af725f1dfffca07a0d87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0d:57:e8:48:9b:ef:07:6d:c0:0f:15:22:6d:
a5:0b:04:00:d9:86:de:1c:48:fd:3b:d3:a9:c7:0f:
c3:e0:42:29:84:bc:5e:3a:60:02:6a:8b:62:bc:77:
bd:6a:db:51:58:d2:47:3f:45:48:29:5b:1b:43:eb:
35:0c:0c:5b:47:97:71:7e:20:72:31:50:49:28:ea:
56:c8:0a:3f:38:78:05:1e:11:6c:62:ca:61:5e:ee:
79:9b:d2:ef:25:36:4e:45:57:c8:b5:2f:69:51:b3:
68:ac:ec:ba:1f:93:aa:da:0c:3f:87:d9:8d:21:34:
3b:e4:2c:14:e4:5c:64:07:34:a0:14:cf:6d:7f:b2:
e1:cb:24:b3:34:c5:05:5c:0e:ce:6d:4d:5f:88:84:
7e:90:b7:cd:e0:54:15:2a:5f:23:90:38:4e:33:c4:
e9:72:6f:5d:54:23:11:c6:4c:3c:cd:9a:79:fa:65:
77:8d:af:74:7c:b5:8a:b2:0f:81:94:8a:c3:a2:05:
56:7e:fa:58:f1:a5:6a:de:0e:df:e0:0d:23:b2:0e:
31:8f:0c:ce:98:a5:ca:45:d8:11:44:65:d6:17:ef:
98:41:80:55:6b:0f:6c:00:21:3c:a9:4f:a9:59:d7:
09:94:83:bb:57:f0:62:43:38:95:3c:cb:78:17:30:
e7:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5B:F7:FB:00:CA:9C:DB:FC:33:AF:72:5F:1D:FF:FC:A0:7A:0D:87
X509v3 Authority Key Identifier:
keyid:49:87:94:1E:74:C1:C0:3E:7A:BA:3B:87:85:30:09:5E:B6:FA:87:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SYeUHnTBwD56ujuHhTAJXrb6h04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/70777b-68b0-42a8-9e9d-e8ada51ee8ff/1/SYeUHnTBwD56ujuHhTAJXrb6h04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3b:1d:eb:70:18:a2:bd:57:88:e9:bb:db:eb:6c:59:73:03:
03:f7:27:0c:6c:e1:e1:1d:c0:35:84:a5:c0:83:9e:d1:7b:85:
6c:33:47:5d:ab:18:a9:36:a0:86:9a:df:ad:61:f9:0c:ff:41:
12:7e:36:fc:1d:81:f0:cc:7f:4e:ec:a4:32:b7:85:7e:c9:82:
fb:6f:40:b3:46:a1:35:0b:fa:a2:f8:ec:51:4d:b6:05:90:68:
c2:c0:68:77:bc:01:1f:58:e3:79:88:65:d2:d4:35:a6:bc:8c:
8c:e9:72:0d:e5:df:f7:8a:1f:3f:07:7b:56:59:ce:ca:17:73:
2c:82:1f:a2:14:ee:8b:ab:96:36:8f:31:34:6d:e3:46:01:40:
69:89:ea:ab:6e:23:15:75:fe:0e:1d:c4:91:3d:11:47:5c:e2:
57:f3:8a:06:1e:32:c1:6e:20:d8:50:75:e5:6a:de:9c:0a:b7:
32:fe:81:54:46:a4:24:e4:d7:92:06:36:e6:6d:96:98:1a:ed:
73:1d:3a:17:e1:5c:8b:a8:b4:2a:51:5b:0d:f2:75:14:f9:dc:
f8:08:cd:14:c1:e7:62:49:70:c6:8e:53:f5:17:7f:4e:37:d4:
b7:44:20:49:4c:ac:57:f9:41:e7:2f:13:a3:27:25:89:95:b1:
68:e7:02:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:30:46 2025 by rpki-client