Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
File: kyRgt49uj0ZirseFjpIFHoVgmfU.mft (raw, json)
Hash identifier: UG9u7AazcsAOilPzVa9ZbO/VAOfIOQD3/z1Afa7YJ6g=
Subject key identifier: 5B:FE:21:82:9D:0B:2C:56:0D:08:D5:BA:F2:33:94:11:1E:84:F8:4B
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 0195DFD927418462E227A2CACB40473D6A76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
Manifest number: 09E3
Signing time: Sat 29 Mar 2025 03:01:45 +0000
Manifest this update: Sat 29 Mar 2025 03:01:45 +0000
Manifest next update: Sun 30 Mar 2025 03:01:45 +0000
Files and hashes: 1: Ms3efVN_XUHd4QxKef3_YdRpvGM.roa (hash: JqLniVKizln7qKYMvWy43G4dVpEgMo9SnC/GlXkBUPw=)
2: kyRgt49uj0ZirseFjpIFHoVgmfU.crl (hash: V5SZo2LaGm/oj4wD4Qdt4CJGd4VVA5B7BN2KaBpg7wo=)
3: uDDSIBamhzWkhMClbzH_9oqf3KA.roa (hash: m1HA6uhPnc0quVohM65OVF8eaR3/NxsjEYFcU7UUjUA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:df:d9:27:41:84:62:e2:27:a2:ca:cb:40:47:3d:6a:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Mar 29 03:01:45 2025 GMT
Not After : Mar 30 03:01:45 2025 GMT
Subject: CN=5bfe21829d0b2c560d08d5baf23394111e84f84b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:11:b3:c4:b3:b0:be:26:2c:47:38:6f:2f:46:
15:36:71:32:40:1a:7a:2b:ce:3b:dc:db:54:9a:f3:
2d:f8:7e:2b:e5:bd:2c:29:83:5f:31:16:46:86:0e:
c8:75:f9:75:eb:be:b4:bd:47:b1:3f:b8:e1:8f:ce:
48:0e:e7:20:f0:b8:cc:3a:14:af:a7:d6:57:30:23:
3e:8d:19:17:09:da:9e:e6:a2:32:70:89:6b:89:b7:
4a:71:4c:13:b8:df:ce:0a:bb:30:60:59:ea:d8:68:
f8:90:1d:50:be:84:b9:8e:43:3e:6c:4a:c8:41:1b:
13:c3:8e:03:21:a8:87:a8:1a:7e:36:13:52:eb:24:
6e:f9:8b:c8:45:be:69:d4:9b:81:f0:1c:63:46:22:
58:d8:dc:5a:5f:77:c7:a5:8e:24:57:62:b3:54:3c:
7a:53:08:81:d4:7a:ed:c8:c0:ba:3d:1c:97:60:67:
32:17:d2:2d:cd:ea:10:a1:5d:cd:fa:a4:85:72:6b:
11:a5:fe:44:9e:0f:fb:bb:20:7a:55:88:99:08:24:
03:7c:7c:14:ce:33:54:d5:5f:3b:16:8a:3c:cb:05:
1c:83:3f:0c:b9:3c:43:6f:04:1d:77:cc:6d:0d:e2:
e1:d6:90:c9:cd:15:24:3d:87:87:dd:dc:e3:96:b7:
f7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:FE:21:82:9D:0B:2C:56:0D:08:D5:BA:F2:33:94:11:1E:84:F8:4B
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:80:29:2e:4e:98:32:97:87:fc:35:9b:ae:df:0b:f4:04:d5:
06:03:ef:90:44:ee:a1:4e:bd:62:dc:84:6a:88:94:b1:33:98:
4c:bc:a2:f6:f0:7c:33:1a:71:a2:1c:2c:6c:f6:7f:5a:fc:56:
8f:66:0e:12:6a:d3:1c:51:45:94:98:33:32:37:82:93:d6:e6:
a3:c0:cd:98:95:2b:32:63:71:d2:64:57:0a:bc:f7:f9:47:32:
41:cc:7c:3f:fe:88:d3:99:06:01:68:26:7a:2f:93:c9:6d:67:
0f:6e:65:01:8e:b5:5c:66:75:cf:f5:27:69:71:80:42:e3:9e:
43:2b:f7:7d:c6:fe:4e:b3:b9:90:94:b1:c8:62:5c:4d:af:b2:
4d:8e:3b:d7:75:00:47:76:57:17:07:6f:56:34:b0:1e:16:ed:
9e:96:bf:1d:67:2e:19:25:88:9c:e5:1d:d4:85:c8:29:42:ce:
a6:8f:b1:22:57:4f:0a:ce:db:bc:13:ab:86:ed:01:31:f4:28:
5b:ab:64:d9:5e:fc:37:bd:e9:93:33:a6:ea:d2:b1:41:4f:a9:
a2:ef:6a:a9:d9:86:08:06:09:6d:74:56:72:10:fe:54:63:35:
65:1b:a7:19:eb:93:0d:f4:c1:85:9c:9f:2f:a4:51:e6:a1:3f:
dd:d7:59:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:41:02 2025 by rpki-client