Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
File: vyk4WQ4NABlyVmLUtK5Myew6c00.mft (raw, json)
Hash identifier: gsByNLSSihaXX7tzHTun8ECT6x3NgFLrQ4zK598Icqw=
Subject key identifier: 73:C1:A1:AD:39:46:D2:54:33:1D:8C:6B:6A:01:03:A5:40:48:8C:25
Authority key identifier: BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
Certificate issuer: /CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Certificate serial: 01962ECF99DCE0E8D2B707B52C14275992FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
Manifest number: 0789
Signing time: Sun 13 Apr 2025 11:01:19 +0000
Manifest this update: Sun 13 Apr 2025 11:01:19 +0000
Manifest next update: Mon 14 Apr 2025 11:01:19 +0000
Files and hashes: 1: vQtF-L-9ooOZxF-UCZufP97_4Tk.roa (hash: uZu5EdE4zrTNj+JjaQISrCgWGaWpGkfUNjvMVUEKljA=)
2: vyk4WQ4NABlyVmLUtK5Myew6c00.crl (hash: IfBvoBtwNqfDHhvCf2r2cGvZK4dOqh1dsxYNWmZMG3k=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:2e:cf:99:dc:e0:e8:d2:b7:07:b5:2c:14:27:59:92:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Validity
Not Before: Apr 13 11:01:19 2025 GMT
Not After : Apr 14 11:01:19 2025 GMT
Subject: CN=73c1a1ad3946d254331d8c6b6a0103a540488c25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:50:eb:11:96:c8:2f:94:99:ac:11:83:1e:33:
4b:18:5e:65:48:30:40:79:27:69:aa:23:3c:f3:c4:
9e:93:6a:68:34:fe:5a:17:e0:a7:70:ce:c8:c1:9c:
30:20:17:c9:f1:d1:3a:cd:5d:1d:7a:ba:8c:42:a7:
44:60:23:85:71:a1:53:30:c2:0f:2c:7b:c0:d4:a4:
2c:13:0c:8b:4c:54:06:37:d0:bd:45:3a:01:12:18:
a2:27:15:cb:0d:a1:36:eb:e7:71:d4:cc:72:c7:9e:
c1:03:0a:2b:ed:ed:ee:fd:42:98:bd:e6:d8:a0:31:
40:ad:2f:65:66:83:2c:00:d2:9a:e8:e6:e5:4c:db:
b7:e0:22:c2:ea:99:ae:ff:12:43:f4:61:ae:0a:83:
f8:b1:7a:2a:89:2e:40:92:03:92:71:59:b4:8b:8c:
d2:88:70:f1:7f:1a:02:0b:89:d0:80:db:ac:ed:e5:
64:e2:08:6f:dd:1e:cb:d6:82:2e:75:b2:93:94:3c:
37:9e:f4:19:85:1d:1f:a2:2e:3b:75:74:f9:40:04:
a3:5c:42:62:02:eb:43:c0:34:f0:9a:29:59:9c:2f:
56:10:d0:83:12:0d:34:04:56:5b:03:ae:7a:e6:d9:
75:d9:04:fb:86:86:5f:cc:1f:01:36:45:9b:30:2c:
d2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:C1:A1:AD:39:46:D2:54:33:1D:8C:6B:6A:01:03:A5:40:48:8C:25
X509v3 Authority Key Identifier:
keyid:BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:4b:2a:ef:67:6d:87:a0:3f:07:fd:d5:8d:a9:4d:06:74:ef:
7c:b3:d6:00:51:21:0c:24:2d:c0:81:21:71:dd:74:e9:21:0c:
55:05:f9:04:43:03:b6:d9:be:f1:55:42:a6:20:12:5d:72:32:
cb:46:6b:55:07:09:3e:e9:3b:2e:55:7f:77:06:3f:aa:76:d6:
d5:f4:f8:bf:6a:df:71:3b:77:b9:f4:30:23:ba:bb:50:1a:73:
c8:e0:02:71:b9:4c:84:ed:7f:26:71:88:0d:8a:56:0f:d2:b0:
ca:0f:b6:46:5f:7c:f2:d2:62:a5:e7:d7:ce:3f:1f:da:d0:b3:
f9:8f:d8:22:d2:ab:91:24:06:9c:59:b0:b5:5c:a4:01:23:80:
84:d1:41:17:bb:9e:5f:d2:cd:36:17:fa:96:9d:c4:79:1b:b1:
52:13:96:c7:31:35:3c:26:f4:61:d0:fd:54:39:55:47:9c:71:
a1:4d:23:00:f4:32:4d:78:5f:10:a5:65:8b:1b:c4:67:ca:b1:
fc:0f:f7:69:ae:05:92:d9:c2:83:74:59:5e:aa:d4:0c:14:c3:
48:bc:a9:dd:d6:71:d5:97:4e:21:50:03:96:1d:cd:a7:8f:20:
18:dd:91:b0:f0:b3:90:c0:4a:02:98:9f:86:25:ea:36:63:a5:
5a:e8:f2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net