Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
File: y9dX6ROqzkNObdbW1Qp-33LOiIw.mft (raw, json)
Hash identifier: v9tbAskpcKBEhCm20kSdLYg4JSSDsl3pU5RKDhFYFXQ=
Subject key identifier: 1B:D7:AF:EF:F3:5C:7A:35:43:14:E8:9A:5F:FA:17:D3:E7:72:18:B7
Authority key identifier: CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
Certificate issuer: /CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Certificate serial: 0194BCA9F8D9FB639D277426633842B30543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
Manifest number: 0DF7
Signing time: Fri 31 Jan 2025 14:00:43 +0000
Manifest this update: Fri 31 Jan 2025 14:00:43 +0000
Manifest next update: Sat 01 Feb 2025 14:00:43 +0000
Files and hashes: 1: xXYCNUnm-3UsiS0Y2j4IJt8GJmU.roa (hash: kfa/1BPOG2GKMxXo/zgSWZ2DSaf3+pCaWIgYdprI0TU=)
2: y9dX6ROqzkNObdbW1Qp-33LOiIw.crl (hash: 0vZ+kDv0uLUx6gue/RTZBjIMj+yyUezF5MQCFAEOLEM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:f8:d9:fb:63:9d:27:74:26:63:38:42:b3:05:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cbd757e913aace434e6dd6d6d50a7edf72ce888c
Validity
Not Before: Jan 31 14:00:43 2025 GMT
Not After : Feb 1 14:00:43 2025 GMT
Subject: CN=1bd7afeff35c7a354314e89a5ffa17d3e77218b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:09:36:c8:d4:a0:97:05:30:66:af:fc:fd:4d:
10:61:36:d9:0f:f2:3b:39:5e:c4:4c:cf:25:57:f7:
0d:0d:2e:70:9b:73:c7:6c:ea:ce:59:a9:bb:87:b3:
62:f0:f6:0b:34:02:e7:e0:af:b2:6e:63:37:12:ca:
84:4a:90:58:c0:9d:2d:03:21:eb:64:61:fc:dd:1f:
58:c5:89:7e:0d:b2:90:9c:a3:c5:3f:41:a2:b3:5d:
ac:6d:69:f8:fa:66:7c:15:c8:31:a3:00:1b:8b:bc:
1c:b2:2e:d0:b6:69:0f:5a:ab:f0:90:02:e3:f3:14:
9c:f7:ca:ea:0f:38:74:88:ff:fb:e1:8f:4e:9c:08:
e4:8e:87:d7:53:f3:99:da:25:ec:8a:ea:5e:1a:5d:
8b:3c:0f:e4:90:bd:a4:16:7d:fe:49:ad:f9:f0:e6:
64:d5:54:ee:83:4a:e0:91:f6:55:19:70:ec:a3:86:
d5:a2:89:e4:98:d3:77:3d:cd:07:d9:04:ac:b5:5a:
be:30:dd:c7:65:fc:f2:89:1c:e6:d5:84:39:f0:0c:
b9:df:28:f9:0d:30:be:cd:77:c5:24:b0:29:60:b7:
23:17:20:8f:37:8f:2b:21:0a:d8:fb:37:7c:67:91:
79:b4:9f:81:43:bd:4f:a4:26:ec:ae:c8:09:c4:8b:
c1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D7:AF:EF:F3:5C:7A:35:43:14:E8:9A:5F:FA:17:D3:E7:72:18:B7
X509v3 Authority Key Identifier:
keyid:CB:D7:57:E9:13:AA:CE:43:4E:6D:D6:D6:D5:0A:7E:DF:72:CE:88:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y9dX6ROqzkNObdbW1Qp-33LOiIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/bdc09a-2b2a-4797-a296-9cfdf3c2b348/1/y9dX6ROqzkNObdbW1Qp-33LOiIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:ec:47:a7:8a:7b:f7:c2:d4:70:94:0d:54:3a:e4:39:3e:fc:
fb:61:b8:08:47:c2:1a:d2:b9:14:b8:39:27:f0:ee:16:81:27:
ba:4b:de:db:cf:1e:74:c3:81:be:e0:55:61:ab:63:aa:28:69:
e1:42:40:34:05:74:54:a5:80:22:75:bf:bc:22:40:cc:81:cf:
30:27:7b:4b:6a:99:f7:24:cf:6b:98:1e:cb:d9:51:3a:76:a9:
09:44:49:97:51:e2:e5:8d:64:b5:8f:87:7f:7d:9c:ba:35:4e:
5d:a9:73:e8:f5:a2:9c:45:22:a2:9c:16:86:ef:a3:0d:a3:d9:
14:a8:0b:67:81:ab:4b:f0:5b:06:90:cb:3c:de:1c:a4:52:01:
57:2d:18:5d:a5:4e:f3:c7:78:7e:d3:e4:b2:e9:bb:36:ed:4d:
fd:65:b2:31:a1:4c:ce:c7:ee:b9:e0:60:b0:dd:58:f4:3a:b2:
29:2f:89:76:f3:e8:1c:a1:33:90:b4:3d:7a:34:71:67:fa:d4:
08:7e:a4:63:65:c6:7c:13:68:80:54:e2:1e:be:30:44:86:43:
1a:29:b3:68:fe:ce:eb:e3:36:44:7a:51:7f:16:bc:81:57:d1:
10:b7:45:8f:c3:4e:54:30:8e:15:16:c0:42:dc:d8:0a:c7:3a:
04:58:67:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:54:58 2025 by rpki-client