Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
File: yBECloayyAp_BGC2xu8bkIZygJc.mft (raw, json)
Hash identifier: e92y82uEZURDsNaf63l/Ly2XKlPI/OTzgbh9CPPOCzw=
Subject key identifier: 84:40:72:F7:EC:29:84:1B:20:C0:AB:58:5C:2F:73:DC:AE:44:E6:F2
Authority key identifier: C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
Certificate issuer: /CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Certificate serial: 0194BBCE96D7F652261C3349B9DDFE272A81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
Manifest number: 033B
Signing time: Fri 31 Jan 2025 10:01:05 +0000
Manifest this update: Fri 31 Jan 2025 10:01:05 +0000
Manifest next update: Sat 01 Feb 2025 10:01:05 +0000
Files and hashes: 1: 4euPgRI8peAtXVFX6sRIiF63Hf4.roa (hash: Q/jeTerSq3iHWfEt8s2/NsdSThKhl38+chGQZqGbuek=)
2: dDW5gmxlZIdnNaZCmbfyMICM7BA.roa (hash: eyiQyIt08acn/ysnIPCQKFaqdw+Ktkik3qnc/LcSJbM=)
3: yBECloayyAp_BGC2xu8bkIZygJc.crl (hash: va/I2YeKYQi2jngWYxCHdHEtBFqfoeWF9fuFb8Sffs0=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:96:d7:f6:52:26:1c:33:49:b9:dd:fe:27:2a:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c811029686b2c80a7f0460b6c6ef1b9086728097
Validity
Not Before: Jan 31 10:01:05 2025 GMT
Not After : Feb 1 10:01:05 2025 GMT
Subject: CN=844072f7ec29841b20c0ab585c2f73dcae44e6f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:86:18:f1:97:e4:46:5d:61:41:fe:38:85:d4:
9e:79:a6:74:bb:a3:58:53:4b:d8:d0:b3:bf:b8:59:
24:db:5a:6a:09:c4:a5:f0:ad:8b:a2:fb:8c:16:dc:
99:18:69:99:56:e5:56:b6:65:d1:74:a1:71:66:26:
31:6e:72:07:f0:82:c5:15:4f:1f:51:9e:e4:e3:ef:
d5:4b:e1:0e:77:90:82:f3:ba:d4:cd:0b:a5:e8:6d:
36:c4:52:8e:f9:f5:20:a3:5b:a8:8f:25:99:f5:0e:
05:ae:c7:d0:81:4f:d6:a4:d1:15:e0:84:9a:43:38:
66:c1:94:cf:80:86:2c:f3:28:d7:2c:c5:cd:d6:b8:
3a:d6:bf:e9:8a:23:e8:11:e1:5f:f6:23:1a:a4:f5:
a2:d3:c8:22:9d:c6:67:7e:db:89:84:03:ac:47:39:
89:80:91:f3:a1:27:fa:42:8b:ed:90:65:28:f9:a3:
49:6a:08:4b:c5:ba:9c:c9:0c:4f:a3:3c:fc:8d:de:
50:24:b0:19:87:3b:5e:ad:d9:5e:d8:05:5d:78:7b:
7b:6b:c1:c7:d5:34:9e:9a:df:3c:54:2a:45:9c:f8:
93:f4:8a:c9:b2:ac:54:6d:28:0d:93:11:4c:63:df:
ec:30:a5:e7:4d:fb:a8:f8:b2:7c:fd:ca:d7:6f:fa:
0e:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:40:72:F7:EC:29:84:1B:20:C0:AB:58:5C:2F:73:DC:AE:44:E6:F2
X509v3 Authority Key Identifier:
keyid:C8:11:02:96:86:B2:C8:0A:7F:04:60:B6:C6:EF:1B:90:86:72:80:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBECloayyAp_BGC2xu8bkIZygJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/afcf64-0051-4da7-9b12-50e333384669/1/yBECloayyAp_BGC2xu8bkIZygJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:81:80:63:34:8a:6d:b8:8d:44:d3:c1:23:bc:c0:5e:26:1a:
8b:d6:25:27:2d:ad:23:0d:46:00:30:81:27:42:c3:65:94:0d:
de:e9:a7:b0:cc:e1:97:8a:fc:5a:38:f0:f9:8e:4f:cb:4d:00:
72:27:34:a5:eb:ea:55:7c:92:98:7b:04:be:08:f7:74:42:be:
6b:83:55:09:85:df:ae:99:af:23:19:71:4e:84:b9:53:b2:0d:
df:10:8b:4f:87:5d:f5:4d:12:ef:b4:b9:67:ce:dc:12:5d:a3:
75:64:13:7f:71:b8:58:f0:ae:3c:9d:32:5d:c7:7d:43:bb:1a:
42:f9:32:45:c4:b2:02:d0:35:9d:34:6f:78:d0:a8:57:c3:dd:
b4:3b:e3:3d:b2:4b:55:b6:fd:a7:9e:01:49:ff:49:99:7e:b4:
a9:da:b2:09:72:3f:e7:29:9e:93:35:f4:85:9f:81:4f:03:33:
27:a5:22:f1:41:eb:52:63:28:c7:c6:ee:38:e7:db:a1:20:97:
d1:cf:93:32:14:18:3d:b8:ee:35:58:9a:2d:f5:99:00:f0:1e:
99:94:45:f3:5f:58:73:1b:20:5b:08:52:48:09:54:1d:61:ff:
18:da:e5:c7:02:89:d2:b2:d3:b1:95:ba:19:d3:0c:ae:e1:2d:
15:ba:94:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 09:24:14 2025 by rpki-client