Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
File: CYZDIBoqokoLh3o638p6iSBH2_w.mft (raw, json)
Hash identifier: SWRR3yc/zPArdrpgegXtrh2O4VV41NNxzv1tJJuj0+A=
Subject key identifier: 8A:F3:69:37:B2:E8:66:38:C3:F9:CA:EE:9F:D6:30:48:0E:23:C1:1B
Authority key identifier: 09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC
Certificate issuer: /CN=098643201a2aa24a0b877a3adfca7a892047dbfc
Certificate serial: 0194BCAA47AA0C7CAA4443AD1AC2621B6CAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
Manifest number: 1044
Signing time: Fri 31 Jan 2025 14:01:03 +0000
Manifest this update: Fri 31 Jan 2025 14:01:03 +0000
Manifest next update: Sat 01 Feb 2025 14:01:03 +0000
Files and hashes: 1: 9f0Q6rSiXJjkh_lJREdgBWV3nxk.roa (hash: TCvx1Dq9UNFJ/C/RNxBohy4u4C9d1rsY7iM9ireTjM8=)
2: CYZDIBoqokoLh3o638p6iSBH2_w.crl (hash: wyr0M+hc/YK/f8vJ7284tOCHDZVUmSZT1zxAhA1M/Lc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:47:aa:0c:7c:aa:44:43:ad:1a:c2:62:1b:6c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=098643201a2aa24a0b877a3adfca7a892047dbfc
Validity
Not Before: Jan 31 14:01:03 2025 GMT
Not After : Feb 1 14:01:03 2025 GMT
Subject: CN=8af36937b2e86638c3f9caee9fd630480e23c11b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:37:b0:ba:5e:16:25:79:f4:95:13:04:83:7e:
99:81:e1:e5:f6:0e:3a:a0:3c:2b:70:9d:89:d6:06:
db:02:37:11:30:48:43:57:46:e4:8e:2f:af:c6:0b:
f0:cc:91:9e:fa:1a:6b:2d:a6:a1:97:87:0b:82:7f:
e5:f7:7d:2c:51:81:cd:2a:cf:c1:ee:c9:48:e4:fa:
60:73:4f:7f:0b:7f:80:b1:a2:51:ae:f8:cf:83:cb:
d6:6c:2f:e5:2d:2b:66:b8:ef:2f:b5:dd:b3:11:10:
75:dc:46:3d:f1:ae:02:95:fd:f5:c0:46:37:88:e9:
a5:63:ad:29:29:9b:22:4b:a0:32:c7:18:a5:25:67:
81:27:79:ba:61:b1:57:7e:e9:8e:4e:46:ab:51:29:
49:d8:7e:30:23:8b:0c:a5:0e:0a:41:62:53:c9:bf:
7b:95:48:ac:c3:6a:19:7b:cf:c2:90:d0:05:cf:e2:
fd:20:d6:48:0d:f2:db:7d:4c:f5:55:05:eb:1a:95:
b0:0f:ea:65:60:a0:70:a8:78:b5:aa:f2:68:f6:48:
33:2d:a0:e0:d8:b8:66:3a:c8:67:0d:85:be:d9:e6:
29:d8:97:e8:c0:89:a0:3d:66:30:1d:07:a8:3c:f9:
16:e0:74:1b:e2:94:83:b7:97:f8:e3:a1:47:90:c8:
fe:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:F3:69:37:B2:E8:66:38:C3:F9:CA:EE:9F:D6:30:48:0E:23:C1:1B
X509v3 Authority Key Identifier:
keyid:09:86:43:20:1A:2A:A2:4A:0B:87:7A:3A:DF:CA:7A:89:20:47:DB:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CYZDIBoqokoLh3o638p6iSBH2_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/2d7f4c-c3d5-4557-93c4-78bfd24cf107/1/CYZDIBoqokoLh3o638p6iSBH2_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:10:a1:d0:0d:bb:d7:7e:a8:d7:0d:85:4b:50:f6:67:c3:c8:
fe:dd:32:ef:a2:3c:5d:71:d0:db:12:30:83:b3:ff:70:f6:56:
a4:43:92:19:70:db:7e:51:75:c8:c5:d6:81:8b:87:bf:27:20:
71:c6:5d:25:7a:da:50:11:4d:09:d6:e8:fc:f8:e2:6e:c2:d7:
44:d5:40:59:b0:ab:06:37:52:72:c5:fe:18:e9:c1:be:60:42:
93:1c:ae:83:bd:37:13:fb:fa:f8:9b:06:e2:14:38:b4:97:db:
58:77:1c:01:a0:41:f2:31:aa:67:75:41:96:a6:a6:07:c5:4b:
ba:2b:bb:84:db:24:df:ff:3d:88:62:5b:05:fc:f0:da:32:37:
0d:d2:63:0f:4f:8c:5b:6f:99:d8:4a:3f:7f:c5:dc:a5:1b:e3:
cf:9b:d7:e2:f7:c0:3b:b5:2c:c6:74:23:5e:b4:93:17:ab:32:
37:45:1b:9a:c7:4b:4c:da:ee:7e:59:13:b1:02:e4:ca:07:0f:
cb:20:81:e1:2e:59:f7:6e:8a:64:1c:29:49:c6:91:b0:54:88:
a2:4d:3c:94:21:3c:c7:2e:5d:38:1c:2f:87:36:6e:74:9b:21:
2a:56:1d:33:c6:a3:47:8c:da:f5:c3:09:8f:ae:d7:4e:5e:6f:
75:aa:ce:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:35:11 2025 by rpki-client