Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
File: y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft (raw, json)
Hash identifier: D7ndueS7K/45Gtl4vwROa2poCZ6ucFHBb+hVxhrsGzs=
Subject key identifier: CA:F9:39:44:77:21:0E:B8:DA:9B:98:C6:3B:74:6A:E1:EE:AE:64:B8
Authority key identifier: CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
Certificate issuer: /CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Certificate serial: 0194BD4E7F3D61C9E4EB2C08EB238A502D17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
Manifest number: 10BF
Signing time: Fri 31 Jan 2025 17:00:25 +0000
Manifest this update: Fri 31 Jan 2025 17:00:25 +0000
Manifest next update: Sat 01 Feb 2025 17:00:25 +0000
Files and hashes: 1: 5DBv9RBy0-ALdhnOZ9mL1Puy4-Y.roa (hash: aEYaKBsIdOUxFwnWgD/VnfwycMEFPEslMaW+CK0NuzE=)
2: y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl (hash: mu76v/oJLveIjuGxTqr7wQVNz99ebLFBzXqJNvVmKWg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:4e:7f:3d:61:c9:e4:eb:2c:08:eb:23:8a:50:2d:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb425fde747aa7fea8e7b335b46c88d238850abe
Validity
Not Before: Jan 31 17:00:25 2025 GMT
Not After : Feb 1 17:00:25 2025 GMT
Subject: CN=caf9394477210eb8da9b98c63b746ae1eeae64b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ad:99:fd:36:4b:84:d6:db:00:3e:7c:89:f2:
44:95:3c:76:e6:e0:2f:42:31:69:79:dd:de:0d:22:
9a:18:cf:08:7f:93:fc:cd:8a:a2:80:8e:3e:f1:f1:
82:7f:08:58:cc:16:0e:06:ca:a2:24:10:a8:ea:50:
a8:1b:8c:f1:eb:e3:35:53:02:9d:9d:dd:44:92:c2:
5a:d0:9e:08:fd:86:9d:65:96:54:b4:52:54:77:fc:
27:20:1f:bb:74:b6:6f:38:01:0a:b8:e8:a1:b6:c4:
d7:5b:11:b4:3f:bb:51:61:73:58:60:a0:7a:47:25:
9e:b1:06:fa:dd:9d:ab:33:0a:95:52:dc:cb:1f:1f:
07:5e:db:6b:d5:8a:3c:d9:c4:99:54:6e:74:91:42:
f6:75:60:71:b7:97:e7:76:f3:4a:e1:66:75:98:bf:
1e:9a:dd:23:56:da:e2:08:5a:e4:2c:b7:07:62:38:
39:20:fd:95:ad:ed:55:e7:42:51:ea:58:dc:fc:ab:
20:dd:4e:58:45:09:ad:77:78:ad:fa:a8:bb:fa:31:
3f:d7:ad:da:e2:34:94:2e:50:e5:ff:b0:1a:62:74:
f7:78:ed:f8:16:51:74:47:8f:90:45:1b:e6:02:d9:
41:84:8d:a7:d4:27:1f:cc:8b:cd:45:16:54:0c:d6:
e9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:F9:39:44:77:21:0E:B8:DA:9B:98:C6:3B:74:6A:E1:EE:AE:64:B8
X509v3 Authority Key Identifier:
keyid:CB:42:5F:DE:74:7A:A7:FE:A8:E7:B3:35:B4:6C:88:D2:38:85:0A:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/y0Jf3nR6p_6o57M1tGyI0jiFCr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/9e39da-1925-4464-9576-bbf719c3ca74/1/y0Jf3nR6p_6o57M1tGyI0jiFCr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:0f:60:ce:e0:53:02:ba:44:a0:84:a7:dc:e4:5a:93:6b:df:
2a:d9:97:43:58:75:db:e4:14:67:35:3f:20:ba:1b:dd:3b:df:
e9:c3:f3:b4:c3:b5:27:e8:8b:9c:0f:d0:b2:35:c5:70:28:09:
69:fe:45:b1:ad:13:08:d0:bc:9f:65:62:25:ca:3e:f5:60:ac:
e2:28:20:47:7f:f9:63:99:4f:17:80:89:88:1e:e6:90:57:ad:
2b:9b:91:a3:cd:c8:5b:9a:b2:e5:d4:5d:bb:0c:03:e8:f2:bb:
94:bc:3a:bf:ba:e3:b7:0f:8e:99:6c:72:3d:2c:aa:19:e7:42:
51:ab:eb:bf:03:c8:a8:30:58:f3:7a:81:1b:1a:45:62:4c:15:
24:d7:ef:fa:97:58:03:cb:ca:87:c4:6a:e5:a6:63:44:52:95:
1c:66:2e:0a:eb:14:96:9b:91:24:af:80:e1:82:ab:ee:ed:32:
88:e7:d4:5c:18:e5:85:c8:1f:5d:8a:f5:d2:ba:6e:22:ac:e7:
ab:ab:c3:b5:f1:28:43:f3:5b:ec:cc:ee:21:86:c7:46:24:88:
5b:5f:b0:7a:a8:a1:b6:d9:b5:6b:c3:3f:aa:3d:d8:04:98:0b:
7b:81:45:da:1c:34:8b:e7:dd:d9:29:c3:e1:05:70:06:e0:cd:
b7:74:eb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 14:48:08 2025 by rpki-client