Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
File: y4if7tE13ANJLYs-goxzCVh9FBE.mft (raw, json)
Hash identifier: cGElEQ5NQNmahI6HF42AW4zRhZ2CWuX57mQzdM/MTKg=
Subject key identifier: BB:9F:3A:01:EA:69:D7:81:38:75:3F:3B:CF:A8:AA:78:B8:5E:84:E9
Authority key identifier: CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
Certificate issuer: /CN=cb889feed135dc03492d8b3e828c7309587d1411
Certificate serial: 0194BD4E68C025EAEDDEDFCA9E3E2B441754
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
Manifest number: 0EC8
Signing time: Fri 31 Jan 2025 17:00:19 +0000
Manifest this update: Fri 31 Jan 2025 17:00:19 +0000
Manifest next update: Sat 01 Feb 2025 17:00:19 +0000
Files and hashes: 1: rfAqhHSyB0bVC5i8dVtfZe-treM.roa (hash: tI9pAzBOPcqsKJP119w8Wmg6uhaucxG8mazRidS4T3g=)
2: y4if7tE13ANJLYs-goxzCVh9FBE.crl (hash: IG+UzYsO9VV8cKQQWBr+u5VCoBWNA8/0DqYTUUp9rcE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:68:c0:25:ea:ed:de:df:ca:9e:3e:2b:44:17:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb889feed135dc03492d8b3e828c7309587d1411
Validity
Not Before: Jan 31 17:00:19 2025 GMT
Not After : Feb 1 17:00:19 2025 GMT
Subject: CN=bb9f3a01ea69d78138753f3bcfa8aa78b85e84e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:c1:27:b0:35:e4:da:40:81:9d:2a:99:f8:28:
25:19:ac:c6:c9:cc:1e:45:3d:ca:8e:e0:08:73:12:
ab:6d:7e:cc:b6:46:75:60:b8:ad:d4:1f:56:b1:3a:
9f:98:21:67:04:47:7d:3b:f9:d6:c2:13:6e:15:74:
54:e7:34:10:94:20:77:d5:23:5f:95:61:14:a5:70:
35:67:3a:78:c9:75:55:c4:1e:f1:29:49:c0:4d:55:
f1:53:74:2e:42:40:cc:6e:82:cb:ce:e7:a4:87:d0:
86:49:3a:bf:a4:50:5b:69:21:bc:9b:60:2b:75:d9:
dd:38:5b:ca:6c:46:23:a1:f2:e9:ca:49:b4:f9:3d:
d7:0a:07:37:3e:b6:4d:86:74:ff:b5:24:10:8d:ba:
33:dc:29:5f:47:d5:b0:45:6f:10:fd:28:e6:bf:e3:
a8:7d:a3:82:b1:d7:dc:4d:2a:23:90:3c:35:41:47:
4c:eb:ac:9b:bf:00:2e:d4:66:c5:3f:8e:d8:b2:25:
6d:c4:73:d9:45:15:21:95:bb:fc:07:dd:43:1b:5e:
7a:8a:1c:17:c2:09:d9:09:b7:ab:6e:e5:20:27:ce:
e0:c6:52:92:74:1e:5f:0f:53:47:2e:0c:6c:d6:05:
1d:b4:52:0c:c0:47:16:c2:72:f7:99:c8:49:d2:a0:
73:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:9F:3A:01:EA:69:D7:81:38:75:3F:3B:CF:A8:AA:78:B8:5E:84:E9
X509v3 Authority Key Identifier:
keyid:CB:88:9F:EE:D1:35:DC:03:49:2D:8B:3E:82:8C:73:09:58:7D:14:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y4if7tE13ANJLYs-goxzCVh9FBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/df0e81-bdcb-4a24-8435-c1f12e58fedd/1/y4if7tE13ANJLYs-goxzCVh9FBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:70:ab:b7:26:24:ff:ce:73:5e:3d:47:e8:7c:20:19:f1:1d:
99:9d:59:6c:d2:e1:30:87:60:3d:ce:65:d9:2a:05:8e:21:6d:
35:94:85:08:ab:24:6b:97:36:99:32:76:9d:26:bc:70:3a:d2:
1f:b3:8e:48:4e:65:c7:78:5c:2f:47:c1:d0:fb:58:a3:1d:1a:
5d:92:67:c8:82:55:a1:d5:6d:fa:11:a5:95:29:08:ac:0d:c0:
29:aa:bf:2b:b3:a6:df:ce:04:16:9d:34:e0:9e:ff:33:58:b3:
97:0a:b7:02:9e:c9:d9:da:e0:66:2c:a7:b4:e9:75:aa:d3:38:
ad:d1:7e:4e:79:96:2c:35:3d:33:60:ad:e6:8f:b5:41:58:7f:
06:9b:e1:93:0f:ae:b3:79:52:d6:a7:dd:7f:77:c9:5e:fa:df:
40:22:d4:99:ad:5c:2e:61:79:3c:7b:08:fb:ab:0b:f0:db:74:
9a:dd:46:1c:e6:c4:ca:81:e1:ff:7e:2a:32:08:7c:c4:9b:0e:
1a:c2:40:70:c0:d5:5c:44:80:3e:75:76:e8:7f:62:50:ca:61:
a3:23:fc:05:76:59:2d:69:6a:fe:09:2d:d6:94:23:5e:99:dd:
5f:6b:2a:fc:d1:e4:dc:97:6a:e8:78:7b:71:d6:9f:7e:48:24:
2a:d9:6e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 21:41:55 2025 by rpki-client