Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/YWpyYPOGVhtDWOpQwDxeND1tDDM.mft
File: YWpyYPOGVhtDWOpQwDxeND1tDDM.mft (raw, json)
Hash identifier: IdxyuLmWF7FIDaJSRzQGznl3GKj6MvdtH4UmCQPKabY=
Subject key identifier: 40:58:3B:E4:FE:1F:EB:2B:61:DB:F3:6C:E9:4C:2D:CA:30:9A:83:DE
Authority key identifier: 61:6A:72:60:F3:86:56:1B:43:58:EA:50:C0:3C:5E:34:3D:6D:0C:33
Certificate issuer: /CN=616a7260f386561b4358ea50c03c5e343d6d0c33
Certificate serial: 0193F1ACAEE2B6CA5A4172EE23E8251718D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWpyYPOGVhtDWOpQwDxeND1tDDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/YWpyYPOGVhtDWOpQwDxeND1tDDM.mft
Manifest number: 08AB
Signing time: Mon 23 Dec 2024 04:00:45 +0000
Manifest this update: Mon 23 Dec 2024 04:00:45 +0000
Manifest next update: Tue 24 Dec 2024 04:00:45 +0000
Files and hashes: 1: FUQLReyV1fYnKhUR2Py0suEpzo4.roa (hash: 9A/8Ki/ykGwmpOcu1/NNU+e0I6B+VL2oFMH48r7RSZA=)
2: YWpyYPOGVhtDWOpQwDxeND1tDDM.crl (hash: a/zp32rfFjvBbth+3mMLEanxnjUUtoNFOoyRQm72RAk=)
3: bn-8w0IhBSiuS6xuFjpDgIuohzQ.roa (hash: +QhpotgMFXzmBJ570Cj1UTyTgz4LOzQrkl7OgjYZOQc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f1:ac:ae:e2:b6:ca:5a:41:72:ee:23:e8:25:17:18:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=616a7260f386561b4358ea50c03c5e343d6d0c33
Validity
Not Before: Dec 23 04:00:45 2024 GMT
Not After : Dec 24 04:00:45 2024 GMT
Subject: CN=40583be4fe1feb2b61dbf36ce94c2dca309a83de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:27:b4:dd:33:45:c2:e1:48:91:ca:d2:71:8c:
47:00:9a:af:6d:12:d4:19:4a:8a:46:dc:e5:7c:fa:
90:b6:69:e5:d8:e1:a0:b4:e6:ed:19:d8:bc:e7:fb:
31:d7:57:4f:23:23:dd:9a:99:fc:fb:4c:ae:5e:7f:
73:a4:8d:c1:b5:6a:be:aa:ce:74:ee:88:4a:2e:c4:
37:24:bd:c3:96:49:d6:31:8f:cb:5f:39:ff:d6:94:
7a:9d:ea:6e:0a:c9:41:df:17:af:8f:be:35:20:3e:
97:24:9d:09:43:34:7c:70:a0:fc:3d:5c:c5:cb:1a:
b7:46:e1:e7:16:7e:96:85:76:e5:a0:59:b0:84:c5:
66:d8:5d:92:cb:8b:28:cf:67:3b:bb:f6:28:cb:6e:
f4:50:1c:16:d8:3d:af:53:66:ce:ee:93:52:48:aa:
3f:43:96:28:20:ef:60:f9:a3:36:82:4d:b7:cc:6e:
f1:fb:94:0f:98:4f:5c:b8:06:fd:b1:33:59:11:9f:
df:01:1d:e1:b9:aa:88:f8:7d:c0:86:c4:e3:00:fc:
2a:4a:42:5b:82:0e:34:19:43:6b:6f:cb:03:16:43:
7b:e4:62:21:2c:1d:45:5f:47:3c:40:05:61:47:0f:
f7:73:89:3f:bb:35:63:ea:d4:9f:59:ee:8d:b2:32:
c9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:58:3B:E4:FE:1F:EB:2B:61:DB:F3:6C:E9:4C:2D:CA:30:9A:83:DE
X509v3 Authority Key Identifier:
keyid:61:6A:72:60:F3:86:56:1B:43:58:EA:50:C0:3C:5E:34:3D:6D:0C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWpyYPOGVhtDWOpQwDxeND1tDDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/YWpyYPOGVhtDWOpQwDxeND1tDDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/67668a-21e5-4954-aa27-c0e3c9072062/1/YWpyYPOGVhtDWOpQwDxeND1tDDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:12:d1:a1:2c:ba:b0:dd:4b:a3:a6:47:26:a9:d2:14:71:55:
2d:95:ee:47:df:7c:bb:86:65:aa:64:47:27:8b:db:71:57:b1:
93:9e:68:77:7f:62:88:57:48:88:c7:5c:b0:16:7d:f6:82:58:
03:9c:bf:34:44:ad:27:94:48:91:50:b8:2c:0b:a2:96:25:d0:
06:68:69:0b:e6:69:a4:3f:af:b9:d7:be:b2:74:e8:b8:ad:f2:
9f:c9:a9:b3:0b:ad:31:5c:f5:e9:2a:15:18:27:b9:75:0e:f2:
59:ec:cb:f2:e3:3c:8d:8e:f1:0a:32:96:c2:87:09:94:07:b5:
c2:e8:6b:f8:7c:54:9e:cc:37:13:d4:cb:98:d8:8a:c5:45:fd:
b8:30:57:64:a9:af:a9:d9:e0:b8:38:1f:f5:74:40:56:0f:37:
f8:00:a0:95:11:dc:e5:2a:96:8a:7e:61:65:f4:35:ce:a8:fd:
d2:a5:0d:fb:ee:29:73:1a:19:4f:a2:17:4b:90:ed:f3:5d:6d:
c6:b0:45:1f:f7:3f:d6:75:43:9c:99:31:0d:57:37:27:02:56:
cb:37:d6:da:11:e9:16:0e:11:5e:91:9f:08:4d:28:eb:d5:d7:
df:d5:0f:88:a4:2c:c4:19:dc:4f:26:61:57:bd:a8:39:48:a4:
eb:1f:fb:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 01:33:56 2025 by rpki-client